Chirpstack 4 HTTP Response Status Code Bug?

anop · September 17, 2022, 9:40am

Hi, With version 3, the HTTP status code 401 was returned after entering an invalid username or password in the ChirpStack web-interface. This is different now with version 4, where entering a invalid username or password displays an error message in the browser window, but the status 200 is returned. Is this intended or a bug?

bconway · September 18, 2022, 12:48am

I haven’t tested, but 200 should definitely not be the response for an incorrect login.

anop · September 22, 2022, 6:42pm

@brocaar The ChirpStack log-output shows the following every time a wrong password or username is entered in the web-interface:

INFO http{method="GET" uri=/ version=HTTP/1.0}: chirpstack::api: Finished processing request status="200"

Any ideas?

brocaar · September 28, 2022, 9:01am

Please note that the API for the web-interface is gRPC-web, it is not a REST API. gRPC has its own response codes, as you can see here:

Please note the grpc-code: 16, which means unauthenticated. I’m not sure if gRPC-web is supposed to also map the gRPC reponse codes to HTTP status codes.

system · December 27, 2022, 9:02am

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.