GitHub user realistschuckle edited a discussion: How does `users_db_public` 
work? (CouchDB 3.5.1)

Using CouchDB v3.5.1, I updated my configuration to include the following 
settings.

```ini
[chttpd_auth]
users_db_public = true
```

The way I read the documentation is that, since I don't set `public_fields`, an 
authenticated user should be able to access their user record in `_users`:

> If [`public_fields` is] unset or not specified, authenticated users can only 
> retrieve their own document.

But, I can't get it to work with either Cookie or JWT authentication. I only 
get `401 Forbidden` results.

Is this a bug?

<details>
<summary><b>Full config</b></summary>

```ini
[chttpd_auth]
secret = 92de07df7e7a3fe14808cef90a7cc0d91
users_db_public = true  # What does this do?

[chttpd]
authentication_handlers = {chttpd_auth, jwt_authentication_handler}, 
{chttpd_auth, cookie_authentication_handler}, {chttpd_auth, 
default_authentication_handler}
server_header_versions = false
enable_cors = true

[cors]
credentials = true
origins = http://localhost:1234
headers = authorization, accept, content-type, origin, referer

[jwt_auth]
roles_claim_path = roles

[jwt_keys]
hmac:_default = ...

[uuids]
algorithm = uuid_v7 

[vendor]
name = ...
version = 1.0.0

[couch_peruser]
enable = true

[couchdb]
uuid = ...
single_node = true

[admins]
admin = ...
```

</details>



GitHub link: https://github.com/apache/couchdb/discussions/5957

----
This is an automatically sent email for [email protected].
To unsubscribe, please send an email to: 
[email protected]

Reply via email to