cachet icon indicating copy to clipboard operation
cachet copied to clipboard

Fix for: Click on "manage subscription" causes "invalid signature"

Open langemeijer opened this issue 4 years ago • 5 comments

This fixes issue: https://github.com/CachetHQ/Cachet/issues/4013

langemeijer avatar May 12 '20 11:05 langemeijer

@langemeijer I still see the issue, ManageSubscription links cause Error 403 Invalid signature. Forbidden

URL is missing signature params

https://example.com/subscribe/manage/mEwLTdnSmkkj2D4FUYhSC8K4sdQY2xUBXwLXjmGLLH

Requires signature: https://example.com/subscribe/manage/mEwLTdnSmkkj2D4FUYhSC8K4sdQY2xUBXwLXjmGLLH/signature=<signature>

Even after adding the signature, we see the same issue. This issue is related to #3714

vikramarsid avatar May 29 '20 00:05 vikramarsid

Please be specific. You now have Cachet generating URLs with a signature? And when visiting this URL, Cachet throws an exception saying that the URL is invalid?

langemeijer avatar Jun 12 '20 09:06 langemeijer

I am experiencing the same issue. When a user first subscribes both the Verify and Manage subscriptions buttons/links function properly. Those links look similar to the following: https://demo.cachethq.io/subscribe/manage/SUBSCRIBERKEY?signature=SIGNATUREKEY

When the subscriber receives component updates the Unsubscribe link at the bottom works as expected. The Manage Subscription link, however, returns the Error 403 Invalid Signature message. The link looks like this: https://demo.cachethq.io/subscribe/manage/SUBSCRIBERKEY I am guessing the issue is the missing ?signature=SIGNATUREKEY

Let me know what other specifics you may need to track down the issue.

mattluchterhand avatar Jul 16 '20 15:07 mattluchterhand

HI there !

Can someone merge this?

Thanks

SebastienFourreau avatar Jan 31 '22 10:01 SebastienFourreau

I confirm that this fix works, thanks @langemeijer

SebastienFourreau avatar Jan 31 '22 15:01 SebastienFourreau

Thank you for your input on Cachet 2.x. We are shifting our attention and resources to Cachet 3.x and will no longer be supporting the 2.x version. If your feedback or issue is relevant to the 3.x series, we encourage you to engage with the new branch.

For more information on the Cachet rebuild and our plans for 3.x, you can read the announcement here.

We appreciate your understanding and look forward to your contributions to the new version.

jbrooksuk avatar Aug 12 '23 19:08 jbrooksuk