pydio-core
pydio-core copied to clipboard
Thunderbird FileLink not working when authfront.otp plugin activated
When authfront.otp is activated, AjaXplorer FileLink for Thunderbird isn't working any more: On first setup of the TB FileLink plugin, (correct) password seems to be accepted, but no repository is shown to the user. When going over here with an empty repository selection, TB hangs until the application is being closed. Then, when TB is started again, exactly one operation against Pydio can be done by the FileLink Plugin (but only when a real file repository like "my-files" is configured as user's standard repository, because of failed setting / choosing of repository to be used on client side). Its possible only once to either show the state (space used, etc.) of the plugin within TB "Settings" dialogue or sending an attachment as link, but only once during livetime of Thunderbird.
So I assume that when the FileLink Plugin is first used per TB application lifetime, a username+password authentication has to be conducted and then operation works: |test9|AuthService|Log In|context=WebUI But on sucessing requests, a "secure token" is involved to prove authentication, and that fails with the following Pydio log entry: Error | error l.487 | from class.AJXP_Controller.php | message=Cannot find method switchAction for plugin authfront.otp! Error | error l.90 | from index.php | message=You are not allowed to access this resource.
Interestingly, the FileLink plugin sends the error message back to the server (excerpt from Apache access_log) as his secure_token instead of the real one (possibly this is a bug within the TB plugin doing no sanity check on response received): {IPAddress} - - [30/Mar/2015:02:11:30 +0200] "POST /files/index.php?secure_token=%3C?xml%20version=%221.0%22%20encoding=%22UTF-8%22?%3E%3Ctree%20%3E%3Cmessage%20type=%22ERROR%22%3ECannot%20find%20method%20switchAction%20for%20plugin%20authfront.otp!%3C/message%3E%3C/tree%3E&action=get_xml_registry HTTP/1.1" 200 554 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 Lightning/3.3.2" So because of that, I assume, the request will fail...
When disabling the "authfront.otp" Pydio Plugin, TB FileLink works again as expected (but that isn't what we want ...).
So because of this circumstance, I'm opening an issue here because I assume there's something wrong with processing of get/post api requests the TB plugin uses, when authfront.otp is activated (even when a certain account has no Google Auth or Yubikey parameter configured within dashboard).
Same problem.
Does not appear in AMO
https://pydio.com/en/products/downloads/thunderbird-filelink
https://addons.mozilla.org/en-US/thunderbird/addon/ajaxplorer-for-filelink/
New add-on from Diego Blanco @dbestevez
https://addons.mozilla.org/en-US/thunderbird/addon/pydio-for-filelink/
Source code:
https://github.com/dbestevez/pydio-for-filelink
Does not appear in the Preference Window / Attachments Tab
https://github.com/dbestevez/pydio-for-filelink/issues/1

I can help with the new version. :+1:
Hi guys what's the status here?