[users at bb.net] Need help testing BitbucketAuth and "team" privilege scope

[Craig Rodrigues]

Hi,

The problem is the Buildbot code in this area doesn't report errors very
well from Bitbucket REST API calls.  It's a bit difficult to figure out
what is going on without instrumenting the code with print ().

--
Craig

On Thursday, June 29, 2017, Bill Deegan <bill at baddogconsulting.com> wrote:

> Alternatively, does Buildbot really need to know if the user is member of
> a team?
> If not, or if it's optional, then perhaps either handle a failure calling
> that endpoint, or add a flag  to require, or skip checking?
>
> -Bill
>
> On Thu, Jun 29, 2017 at 1:13 AM, Pierre Tardy <tardyp at gmail.com
> <javascript:_e(%7B%7D,'cvml','tardyp at gmail.com');>> wrote:
>
>> can we document that?
>>
>>
>> On Thu, Jun 29, 2017 at 9:53 AM Craig Rodrigues <rodrigc at crodrigues.org
>> <javascript:_e(%7B%7D,'cvml','rodrigc at crodrigues.org');>> wrote:
>>
>>> That was the missing information that I needed.
>>> I clicked on the checkbox for "Team membership:  Read".
>>>
>>> Then I tried to log into Bitbucket from buildbot, and it worked.
>>>
>>> Thanks!!!
>>>
>>> --
>>> Craig
>>>
>>>
>>> On Wed, Jun 28, 2017 at 10:06 PM, Bill Deegan <bill at baddogconsulting.com
>>> <javascript:_e(%7B%7D,'cvml','bill at baddogconsulting.com');>> wrote:
>>>
>>>> Also I see a checkbox when creating a new oauth consumer for your
>>>> account for team here:
>>>> https://bitbucket.org/account/user/bdbaddog/oauth-consumers/new
>>>>
>>>>
>>>>    - Team membership
>>>>       - Read
>>>>       - Write
>>>>
>>>>
>>>> On Wed, Jun 28, 2017 at 10:03 PM, Bill Deegan <
>>>> bill at baddogconsulting.com
>>>> <javascript:_e(%7B%7D,'cvml','bill at baddogconsulting.com');>> wrote:
>>>>
>>>>> Craig,
>>>>>
>>>>> It's curious that it needs that.
>>>>>
>>>>> From the docs:
>>>>>
>>>>> team
>>>>>
>>>>> Grants the ability to get a list of teams of which the current user is
>>>>> a member. This is covered by the teams endpoint.
>>>>>
>>>>>    - information about all the groups and teams I am a member or
>>>>>    admin of
>>>>>
>>>>> (https://confluence.atlassian.com/bitbucket/oauth-on-bitbuck
>>>>> et-cloud-238027431.html)
>>>>>
>>>>> Looks like this line is trying to query for what teams the user is a
>>>>> member of...
>>>>>
>>>>> orgs = self.get(c, '/teams?role=member')
>>>>>
>>>>> https://github.com/buildbot/buildbot/blob/master/master/buildbot/www/oauth2.py#L377
>>>>>
>>>>> If there's a way to wrap that to handle the error you're seeing and continue?
>>>>>
>>>>> Is your user a member of a team on bitbucket?
>>>>>
>>>>> -Bill
>>>>>
>>>>>
>>>>> On Wed, Jun 28, 2017 at 8:33 PM, Craig Rodrigues <
>>>>> rodrigc at crodrigues.org
>>>>> <javascript:_e(%7B%7D,'cvml','rodrigc at crodrigues.org');>> wrote:
>>>>>
>>>>>> I am using bitbucket.org
>>>>>>
>>>>>> --
>>>>>> Craig
>>>>>>
>>>>>> On Wed, Jun 28, 2017 at 8:30 PM, Bill Deegan <
>>>>>> bill at baddogconsulting.com
>>>>>> <javascript:_e(%7B%7D,'cvml','bill at baddogconsulting.com');>> wrote:
>>>>>>
>>>>>>> Is this for bitbucket.org, or the bitbucket server?
>>>>>>>
>>>>>>> -Bill
>>>>>>>
>>>>>>> On Wed, Jun 28, 2017 at 3:38 PM, Craig Rodrigues <
>>>>>>> rodrigc at crodrigues.org
>>>>>>> <javascript:_e(%7B%7D,'cvml','rodrigc at crodrigues.org');>> wrote:
>>>>>>>
>>>>>>>> Hi,
>>>>>>>>
>>>>>>>> I am trying to test BitbucketAuth, and am running into some
>>>>>>>> problems.
>>>>>>>>
>>>>>>>> I followed the instructions at:
>>>>>>>>
>>>>>>>> http://docs.buildbot.net/latest/manual/cfg-www.html#authenti
>>>>>>>> cation-plugins
>>>>>>>>
>>>>>>>> and set up my Bitbucket account to authorize my Bitbucket instance.
>>>>>>>> I took my client id and client secret and put it in my master.cfg:
>>>>>>>>
>>>>>>>> c['www'] = dict(port=8010,
>>>>>>>>     auth=util.BitbucketAuth("myclientid", "myclientsecret"),
>>>>>>>>     plugins=dict(waterfall_view={}, console_view={}))
>>>>>>>>
>>>>>>>> From buildbot, I was able to Log into Bitbucket,
>>>>>>>> but then it doesn't work.  After some debugging, I
>>>>>>>> found this message is coming back from Bitbucket:
>>>>>>>>
>>>>>>>> {'type': 'error', 'error': {'message': 'Your credentials lack one
>>>>>>>> or more required privilege scopes.', 'detail': {'granted': ['pullrequest',
>>>>>>>> 'account'], 'required': ['team']}}}
>>>>>>>>
>>>>>>>> Does anyone know how to set the "team" privilege scope?
>>>>>>>>
>>>>>>>> I'm not familiar with the Bitbucket UI so don't know where to set it
>>>>>>>> --
>>>>>>>> Craig
>>>>>>>>
>>>>>>>> _______________________________________________
>>>>>>>> users mailing list
>>>>>>>> users at buildbot.net
>>>>>>>> <javascript:_e(%7B%7D,'cvml','users at buildbot.net');>
>>>>>>>> https://lists.buildbot.net/mailman/listinfo/users
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>
>>> _______________________________________________
>>> users mailing list
>>> users at buildbot.net <javascript:_e(%7B%7D,'cvml','users at buildbot.net');>
>>> https://lists.buildbot.net/mailman/listinfo/users
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.buildbot.net/pipermail/users/attachments/20170629/538b59aa/attachment.html>