[JIRA] (JENKINS-59187) node-sharing-plugin: fails to use crumb correctly since Jenkins 2.176

[james.dingwall@zynstra.com (JIRA)]

James Dingwall created an issue

Jenkins / JENKINS-59187 node-sharing-plugin: fails to use crumb correctly since Jenkins 2.176 Issue Type: Bug Assignee: Scott Hebert Components: node-sharing-plugin Created: 2019-09-02 13:38 Environment: node-sharing-plugin 2.0.4  jenkins 2.176.3 Labels: plugin Priority: Minor Reporter: James Dingwall In the jenkins log: WARNING: No valid crumb was included in request for /cloud/NodeSharing-<id>/api/reportUsage by nsp-user. Returning 403. I believe this is being triggered by https://jenkins.io/doc/upgrade-guide/2.176/#SECURITY-626 The crumb that is issued can only be used in a single session but no session handling is present in the nsp code. Add Comment

This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)

[james.dingwall@zynstra.com (JIRA)]

James Dingwall updated an issue

Jenkins / JENKINS-59187 node-sharing-plugin: fails to use crumb correctly since Jenkins 2.176

Change By: James Dingwall

In the jenkins log: WARNING: No valid crumb was included in request for /cloud/NodeSharing-<id>/api/reportUsage by nsp-user. Returning 403. I believe this is being triggered by [ https://jenkins.io/doc/upgrade-guide/2.176/#SECURITY-626 ] The crumb that is issued can only be used in a single session but no session handling is present in the nsp code.

This also affects the 'Test connection' from the executor to the orchestrator.

Add Comment