Unable to create a file with Collabora in a Space accessed via an edit public link

[nicholas-wilson-au]

Create an editable public link to a Space.

Access this link and create a new odt file.

It fails with X-Request-Id: 743a0be4-8862-46b8-9a03-baf7f9d7f827

Tested on https://ocis.ocis-wopi.released.owncloud.works/

[2403905]

The user got 401 when trying to create the document and 500 when trying to edit.
@micbar Need to classification

[dragonchaser]

Can reproduce

[dragonchaser]

seems to be an issue with the permissions I see this error:
{"level":"error","service":"frontend","pkg":"rhttp","traceid":"dee4da1ed0bc08585f38f5cd53dca81f","request-id":"d972a73c-526a-4338-8150-95695a460714","error":"rpc error: code = PermissionDenied desc = gateway: error calling OpenInApp: rpc error: code = PermissionDenied desc = auth: core access token is invalid","time":"2024-04-08T07:38:02Z","line":"github.com/cs3org/reva/v2@v2.19.2-0.20240404085416-251ba8d12f6f/internal/http/services/appprovider/errors.go:63","message":"Error contacting the requested application, please use a different one or try again later"}

[individual-it]

ToDo QA-team:

• add API tests for /app/open and /app/new endpoints on normal files, shares, public links of files, public links of folders ([QA] API tests for /app/ endpoints #9682)

[dragonchaser]

The PR from @rhafer fixes the 401 for spaces as well but there is still the 500 that occurs in both cases, the error is coming from https://github.com/cs3org/reva/blob/767b09035271307bd2b8a01d8fa732e0bcf26ae1/internal/http/services/appprovider/appprovider.go#L446-L457 I assume. I guess the token is not passed properly there. The error is not limited to collabora, happens also with onlyoffice.

[dj4oC]

Do we have an ETA for a version including that fix?

[rhafer]

@dj4oC Given @dragonchaser 's last answer the fix doesn't seem to be complete for now. So unfortunately we can't give any ETA.

[dj4oC]

Sure @rhafer it was more asking whether this is going to be next week, the week after or ...
users are chasing us...

[dragonchaser]

@dj4oC We are working on it as fast as possible, unfortunately wopi issues are not that easy to track down, we hope for this week.

[amrita-shrestha]

ToDo QA-team:

• add API tests for /app/open and /app/new endpoints on normal files, shares, public links of files, public links of folders

will be covered in this issue #8712 (comment)