-
-
Notifications
You must be signed in to change notification settings - Fork 4.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Version 2.2.24 and above breaks fetch() method - undefined, unauthorized #3051
Comments
Just an idea, but there was a security fix in 2.2.24 that all configured keys are now checked. Previously if you specified 3 out of 4 client keys, then none were checked. Could you clarify which keys you have configured and which keys you are passing when you call your cloud code function? If using curl then please post that with keys obfuscated or with test keys in place. |
@steven-supersolid, while constructing the I use the I'm also 100% sure the keys match, checked numerous times... |
OK so that should be fine. Prior to 2.2.24 if you were not also passing I notice the case for your rest key is different to in the constructor, is this just a typo in this issue? It should be You may also have to specify Could you also post a server log with VERBOSE=1? That will shed more light on where the permission is failing. |
@steven-supersolid - the I've specified a Funny thing is, verbose will not return anything at all for this in I've just upgraded to the latest This needs to be fixed - or at least mentioned in the docs - ASAP. Could cause a lot of damage if people are not careful... |
#3070 should address this |
Hi everyone,
I've discovered an error with
v2.2.24
and above with thefetch()
method. The same exact code worked withv2.2.23
and below - I've tested numerous lower versions and all worked. Parse SDK JS isv1.9.2
and changing to lower versions doesn't affect the error.Here is my code:
Error log
I'm calling it from the Parse iOS SDK
1.14.2
, with an authenticated user (other authenticated calls work fine). The permissions for the object I'm trying tofetch()
are Public Read, Administrator (Role) Read/Write.As I've said, the only thing I changed is the Parse-Server version, else than that everything stayed the same.
I've compared 2.2.23 and 2.2.24, and I'd guess the error will be somewhere in the
spec/Middlewares.spec.js
changes, however I can't figure it out.I'm guessing this error appears elsewhere as well, therefore I'd consider this a critical error.
The text was updated successfully, but these errors were encountered: