Skip to content

[BUG] Remove password when OIDC is setup makes you unable to download backup recovery key #698

@Kyria

Description

@Kyria

Prerequisites

Rclone Pre-flight Checklist (if applicable)

  • This issue is NOT related to rclone (skip if not using rclone)
  • I have tested rclone listremotes and rclone lsd remote: on the host and they work
  • I have verified the rclone config is mounted into the container
  • I have restarted the container after config changes

Bug Description

Hello,

As the title says, if you remove the credentials associated to an account, while you are linked to an OIDC provider makes you unable to perform the following:

  • download backup recovery key (requests a password -> any password = "password incorrect")
  • setting a password again. (Error = Credential account not found)

Edit:
I just found that any member you invite to create an account through the SSO in the same organization have the exact same issue, whatever the role they have (owner/admin/user of the orga, user/admin in the tool).

Steps to Reproduce

  1. Add an OIDC provider and link account
  2. Connect using the OIDC provider
  3. Go in administration and remove the credentials for your users
  4. From now, you have the issue

Expected Behavior

no password requested or the ability to setup a new password.

Zerobyte version / commit

v0.32.3

Deployment Method

Docker Compose

Backup/Repository Context

No response

Logs / Error Messages

When trying to change password:

[zerobyte] <-- POST /api/auth/change-password
[zerobyte] --> POST /api/auth/change-password 400 4ms
[zerobyte] <-- POST /api/auth/change-password
[zerobyte] --> POST /api/auth/change-password 400 5ms

When trying to get the backup key (this makes sense)

[zerobyte] <-- POST /api/v1/system/restic-password
[zerobyte] --> POST /api/v1/system/restic-password 401 3ms

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions