#10064 bodhi commands fail: Token required but invalid
Closed: Fixed by kevin. Opened by martinpitt.

I'm trying to waive some invalid/missing test results. This has worked fine in the past, but today something in the authentication system is broken:

bodhi updates waive --user martinpitt --test fedora-ci.koji-build.tier0.functional FEDORA-2021-05b3e69178 'regression in libvirt, will investigate/report  separately'
Waiving unsatisfied requirements: fedora-ci.koji-build.tier0.functional
Password: 
Bodhi failed to send POST request to WaiverDB at the following URL "https://waiverdb.fedoraproject.org/api/v1.0/waivers/". The status code was "401". The error was "{'message': 'Token required but invalid'}".

I triple-checked that the password is correct (copy&pasted from keepass database), and I also tried with the "cockpit" account. This also happens after removing ~/.fedora/ (i.e. no stale openidbaseclient-sessions.cache).

I originally reported this there and got redirected here. Quote from Mattia: "I think it refers to the token that Bodhi backend uses to authenticate in waiverdb. It seems that for some reason the token we have configured in Bodhi config doesn't work anymore, maybe it's expired or has been removed from waiverdb."

When do you need this to be done by? (YYYY/MM/DD)

"Soon" would be nice (something like 2021/07/05, before our next release)

Thank you!


Metadata Update from @humaton:
- Issue tagged with: medium-gain, medium-trouble, ops

Metadata Update from @asaleh:
- Issue assigned to asaleh

Metadata Update from @mohanboddu:
- Issue priority set to: Waiting on Assignee (was: Needs Review)

I reset the expiration date on these tokens a year out... so they should be valid again.

This is changed/stored in the ipsilon database on db-fas01/db-fas01.stg... so I just did a sql call to change the expire date. Possibly we should make new tokens for these things when they expire, but this should have gotten it going again more quickly.

Please let us know if this doesn't fix things.

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

That did it, thanks @kevin !

Metadata