Unknown Error when uploading via a public link into a space

[haary]

Describe the bug

When sharing a space via a public link where everyone can upload and the user uploads a file an unkown error appears. The file is uploaded anyway and can bee seen, when the page is reloaded.

Steps to reproduce

1. Create a space
2. Share this space via link and "Anyone with the link can upload" permissions
3. Open the link as a guest/anonymous user (not logged in in ocis)
4. Upload a file
5. A window "upload failed" and "unknown error" appears
6. Reload the page and the uploaded file appears

Expected behavior

File can be uploaded without error

Actual behavior

An "unknown error" appears when uploading a file via a public link into a space

Setup

ocis 4.0.6 ist started via this script and ist behind a reverse proxy (HAProxy)

#!/bin/bash
SCRIPT_DIR="$(dirname "$(readlink -f "${0}")")"
cd "${SCRIPT_DIR}"
export OCIS_CONFIG_DIR=/home/ocis/ocis-sandbox-4.0.6/config
export OCIS_BASE_DATA_PATH=/home/ocis/ocis-sandbox-4.0.6/data
export OCIS_INSECURE=false
export OCIS_URL=https://ocis.example.com
export PROXY_HTTP_ADDR=10.2.3.4:9200
export PROXY_TLS=false
export PROXY_ENABLE_BASIC_AUTH=true
export OCIS_LOG_LEVEL=warning
export OCIS_LOG_FILE=/home/ocis/ocis-sandbox-4.0.6/ocis.log
./ocis-4.0.6-linux-amd64 server

Additional context

Error log

{"level":"error","service":"sharing","pkg":"rgrpc","traceid":"39f0a84ac826620d4b303aaa8e3f9d28","user-agent":"grpc-go/1.57.0","from":"tcp://127.0.0.1:52128","uri":"/cs3.sharing.collaboration.v1beta1.CollaborationAPI/ListReceivedShares","start":"15/Mar/2024:08:39:48 +0000","end":"15/Mar/2024:08:39:48 +0000","time_ns":38863,"code":"PermissionDenied","time":"2024-03-15T08:39:48Z","message":"rpc error: code = PermissionDenied desc = auth: core access token is invalid"}
{"level":"error","service":"storage-shares","pkg":"rgrpc","traceid":"39f0a84ac826620d4b303aaa8e3f9d28","user-agent":"grpc-go/1.57.0","from":"tcp://127.0.0.1:60822","uri":"/cs3.storage.provider.v1beta1.ProviderAPI/ListStorageSpaces","start":"15/Mar/2024:08:39:48 +0000","end":"15/Mar/2024:08:39:48 +0000","time_ns":272684,"code":"PermissionDenied","time":"2024-03-15T08:39:48Z","message":"sharesstorageprovider: error calling ListReceivedSharesRequest: sharesstorageprovider: error calling ListReceivedSharesRequest: rpc error: code = PermissionDenied desc = auth: core access token is invalid"}
{"level":"error","service":"sharing","pkg":"rgrpc","traceid":"39f0a84ac826620d4b303aaa8e3f9d28","user-agent":"grpc-go/1.57.0","from":"tcp://127.0.0.1:52128","uri":"/cs3.sharing.collaboration.v1beta1.CollaborationAPI/ListReceivedShares","start":"15/Mar/2024:08:39:48 +0000","end":"15/Mar/2024:08:39:48 +0000","time_ns":33833,"code":"PermissionDenied","time":"2024-03-15T08:39:48Z","message":"rpc error: code = PermissionDenied desc = auth: core access token is invalid"}
{"level":"error","service":"storage-shares","pkg":"rgrpc","traceid":"39f0a84ac826620d4b303aaa8e3f9d28","user-agent":"grpc-go/1.57.0","from":"tcp://127.0.0.1:60822","uri":"/cs3.storage.provider.v1beta1.ProviderAPI/ListStorageSpaces","start":"15/Mar/2024:08:39:48 +0000","end":"15/Mar/2024:08:39:48 +0000","time_ns":240213,"code":"PermissionDenied","time":"2024-03-15T08:39:48Z","message":"sharesstorageprovider: error calling ListReceivedSharesRequest: sharesstorageprovider: error calling ListReceivedSharesRequest: rpc error: code = PermissionDenied desc = auth: core access token is invalid"}
{"level":"error","service":"proxy","error":"gateway: grpc failed with code CODE_PERMISSION_DENIED","time":"2024-03-15T08:39:48Z","message":"error when calling Createhome"}
{"level":"error","service":"gateway","pkg":"rgrpc","traceid":"39f0a84ac826620d4b303aaa8e3f9d28","error":"error: permission denied: access forbidden via public link","time":"2024-03-15T08:39:48Z","message":"error resolving reference resource_id:<storage_id:\"0a309786-e346-448f-bef2-ec785b27f147\" opaque_id:\"1029cf08-bf1f-4e20-9b11-732dfc79d203\" space_id:\"57923647-8b00-46a4-afde-696e66a8f057\" >  under scope publicshare:IqqZnHeiwMuNvXh"}
{"level":"error","service":"gateway","pkg":"rgrpc","traceid":"39f0a84ac826620d4b303aaa8e3f9d28","error":"error: permission denied: access forbidden via public link","time":"2024-03-15T08:39:48Z","message":"error resolving reference resource_id:<storage_id:\"0a309786-e346-448f-bef2-ec785b27f147\" opaque_id:\"1029cf08-bf1f-4e20-9b11-732dfc79d203\" space_id:\"57923647-8b00-46a4-afde-696e66a8f057\" >  under scope publicshare:IqqZnHeiwMuNvXh"}
{"level":"error","service":"gateway","pkg":"rgrpc","traceid":"39f0a84ac826620d4b303aaa8e3f9d28","user-agent":"grpc-go/1.57.0","from":"tcp://127.0.0.1:55656","uri":"/cs3.storage.registry.v1beta1.RegistryAPI/ListStorageProviders","start":"15/Mar/2024:08:39:48 +0000","end":"15/Mar/2024:08:39:48 +0000","time_ns":9406166,"code":"PermissionDenied","time":"2024-03-15T08:39:48Z","message":"rpc error: code = PermissionDenied desc = auth: core access token is invalid"}
{"level":"error","service":"ocdav","name":"com.owncloud.web.ocdav","traceid":"39f0a84ac826620d4b303aaa8e3f9d28","request-id":"b2ec8ee6-6506-4466-a05b-6545d7aeda3f","path":"/public/KXrjbsYXnaGiDVP/patat2.png","time":"2024-03-15T08:39:48Z","message":"No info found for uploaded file"}

[rhafer]

Might be duplicate of #8629

[haary]

Might be duplicate of #8629

The error seems to be the same, but the OP mentions that the error occurs when using public link to folders. Public links to folders do work fine here, the problem for me is public link into a space.

[2403905]

The cause of 500 that the file is not found right after upload #L300. Besade that after reloading the file exist and id matches.

[2403905]

@haary Did you have a chance to validate a fix?

[haary]

@haary Did you have a chance to validate a fix?

Sorry, can't test here because the requirement was raised to Go 1.22