Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can not figure out how to login with correct password. #7

Open
sulisu opened this issue Dec 22, 2024 · 1 comment
Open

Can not figure out how to login with correct password. #7

sulisu opened this issue Dec 22, 2024 · 1 comment

Comments

@sulisu
Copy link

sulisu commented Dec 22, 2024

Hello, I started rustical with docker-compose.yml

services:
  rustical:
    image: ghcr.io/lennart-k/rustical:main
    container_name: rustical
    ports:
      - "4000:4000"
    volumes:
      - ${PWD}/rustical/config.toml:/etc/rustical/config.toml

Then, I created password hash with following commands and put them in config
docker exec -it rustical /usr/local/bin/rustical pwhash --algorithm argon2
docker exec -it rustical /usr/local/bin/rustical pwhash --algorithm pbkdf2

password is 123456

config.toml

[data_store]
backend = "sqlite"
db_url = ""

[auth]
backend = "static"

[[auth.users]]
id = "default"
displayname = "Default user"
password = "$argon2id$v=19$m=19456,t=2,p=1$KDiKMiJJ3RnZUojM49wx3w$wCnSBm9glJL2xxna++2pW5wDTAS0WPQ8AGkAllj85Co"
app_tokens = ["$pbkdf2-sha256$i=1000,l=32$RGDaZ3tILIRGMmuBhLoUMA$oXCNM6UcrcxYOLWt/TK4utYaH1fWFsjm6JBYTyTb7yM"]

[http]
host = "0.0.0.0"
port = 4000

[frontend]
secret_key = "e773b8322ebf0d3495183fce33761bf76dee224e978a47d89c58679b81b6a24fae35081a8ecef78d3820dd09939af82816ae6aea3e66579cfaf4c8247f35aca5"

[tracing]
opentelemetry = false

But I cannot login web frontend with default:123456, it always return unauthorized. And what the usage of frontend secret_key?

@lennart-k
Copy link
Owner

Hey, thanks for the report.
I don't yet know why this happens but for me it was fixed by clearing the cookies.
I'll have to take a closer look into this later :/
The secret_key is the key to sign the session cookie since at the moment there's no server-side session store (I might implement one in the future).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants