Public bug reported:

The system settings updates checks for updates in three different steps:

1. Gets the available updates against 
https://search.apps.ubuntu.com/api/v1/click-metadata
2. Gets the click token to be used for the download.
3. Tells udm to download the click package.

At the moment we are getting credential errors on step 2 because the
server side checks the signed auth header yet the same does not happen
in step 1. Ideally we would like to get the credentials/auth error as
early as possible so that, if the sso token is no valid we do not even
show the possible updates to the user.

** Affects: click-package-index
     Importance: Medium
         Status: Confirmed

** Affects: ubuntu-system-settings (Ubuntu)
     Importance: Medium
     Assignee: Manuel de la Peña (mandel)
         Status: Confirmed

** Also affects: ubuntu-system-settings
   Importance: Undecided
       Status: New

** Also affects: ubuntu-system-settings (Ubuntu)
   Importance: Undecided
       Status: New

** No longer affects: ubuntu-system-settings

** Changed in: ubuntu-system-settings (Ubuntu)
       Status: New => Confirmed

** Changed in: ubuntu-system-settings (Ubuntu)
   Importance: Undecided => Medium

** Changed in: ubuntu-system-settings (Ubuntu)
     Assignee: (unassigned) => Manuel de la Peña (mandel)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1489403

Title:
  The click-metadata paged returns a 200 instead of an error when using
  a signed token

To manage notifications about this bug go to:
https://bugs.launchpad.net/click-package-index/+bug/1489403/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to