Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-59187

node-sharing-plugin: fails to use crumb correctly since Jenkins 2.176

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Minor Minor
    • node-sharing-plugin
    • node-sharing-plugin 2.0.4
       jenkins 2.176.3

      In the jenkins log:

      WARNING: No valid crumb was included in request for /cloud/NodeSharing-<id>/api/reportUsage by nsp-user. Returning 403.

      I believe this is being triggered by https://jenkins.io/doc/upgrade-guide/2.176/#SECURITY-626

      The crumb that is issued can only be used in a single session but no session handling is present in the nsp code.

      This also affects the 'Test connection' from the executor to the orchestrator.

            scoheb Scott Hebert
            jkdingwall James Dingwall
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: