#10811 Issue with command line Bodhi; 500 Server Error: Internal Server Error for url: https://id.fedoraproject.org/openidc/Token
Closed: Fixed by kevin. Opened by eclipseo.

I'm getting the following error while trying to update a package:

$ fedpkg update --type bugfix
Could not execute update: Could not generate update request: 500 Server Error: Internal Server Error for url: https://id.fedoraproject.org/openidc/Token
A copy of the filled in template is saved as bodhi.template.last

Not sure if it comes from my end or infra's end?


I can reproduce this issue.

Me too. :)

@abompard Could something be wrong with the latest ipsilon rollout? I also see the 500's on https pushing...

Thanks for looking at it, @kevin. In case it's relevant, I'm running bodhi-client-6.0.1-1.fc36.noarch.

Metadata Update from @zlopez:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: Needs investigation

Same with ODCS when I want to submit the ELN compose. (That's actually what I wanted to report!)

$ odcs --watch create-raw-config --compose-type=production --label=Alpha-0.$(date "+%s") eln eln
...
requests.exceptions.HTTPError: 500 Server Error: Internal Server Error for url: https://id.fedoraproject.org/openidc/Token

I've had this issue for the first time last Thursday (2022-07-07).

This is now blocking Fedora ELN composes.

Please let me know if I can help in any way!

cc @sgallagh

Can you all please retry now? Hopefully it's fixed...

fedpkg update is working fine for me now. However, trying to "link with FAS" from https://packager-dashboard.fedoraproject.org leads to a 400 bad request error for invalid redirect_uri.

packager-dashboard should be fixed now.

Confirmed, it's working fine for me now. Thanks!

Excellent. Please let us know if you see any further issues.

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

I'm still unable to kick off an ODCS compose with odcs --watch create-raw-config --compose-type=production --label=Alpha-0.$(date "+%s") eln eln

It correctly prompts me to log in via id.fedoraproject.org in my browser, which appears to work. However the login still fails:

$ odcs  --watch create-raw-config --compose-type=production --label=Alpha-0.$(date "+%s") eln eln
Please visit https://id.fedoraproject.org/openidc/Authorization?scope=openid+https%3A%2F%2Fid.fedoraproject.org%2Fscope%2Fgroups+https%3A%2F%2Fpagure.io%2Fodcs%2Fnew-compose+https%3A%2F%2Fpagure.io%2Fodcs%2Frenew-compose+https%3A%2F%2Fpagure.io%2Fodcs%2Fdelete-compose&response_type=code&client_id=odcs-authorizer&redirect_uri=http%3A%2F%2Flocalhost%3A12345%2F&response_mode=query to grant authorization
127.0.0.1 - - [12/Jul/2022 10:53:37] "GET /?code=8c74edcb-f307-4696-be68-3b43d9cbbc1f_v4Dln_zoG2aU8yEKWjU3Fs3McExht5HO HTTP/1.1" 200 47
Traceback (most recent call last):
  File "/usr/bin/odcs", line 392, in <module>
    client = odcs.client.odcs.ODCS(
  File "/usr/lib/python3.10/site-packages/odcs/client/odcs.py", line 350, in __init__
    raise ValueError(
ValueError: OpenIDC token must be specified when OpenIDC authentication is enabled.

After this, the contents of /.openidc/oidc_odcs.json are {}, which suggests strongly that we're not getting back a valid token.

Please note: this is a blocking issue for ELN, as we are currently unable to produce composes at all.

This is on odcs-backend-releng01? or on your local machine?

Mind if I run one to see if it works for me?

@abompard any ideas?

Both, it doesn't matter where it's launched from. The specific output above was from my local machine. (Which has a valid Kerberos TGT for sgallagh@FEDORAPROJECT.ORG, if that matters)

There was another small (but deadly) bug in Ipsilon, I fixed it, it should work now.
Sorry for the mess @sgallagh & @kevin .

Metadata