{"action":"created","issue":{"url":"https://api.github.com/repos/mozilla/normandy/issues/1398","repository_url":"https://api.github.com/repos/mozilla/normandy","labels_url":"https://api.github.com/repos/mozilla/normandy/issues/1398/labels{/name}","comments_url":"https://api.github.com/repos/mozilla/normandy/issues/1398/comments","events_url":"https://api.github.com/repos/mozilla/normandy/issues/1398/events","html_url":"https://github.com/mozilla/normandy/pull/1398","id":329717284,"node_id":"MDExOlB1bGxSZXF1ZXN0MTkyOTA0NTkw","number":1398,"title":"Fix OIDC authorization","user":{"login":"rehandalal","id":987136,"node_id":"MDQ6VXNlcjk4NzEzNg==","avatar_url":"https://avatars2.githubusercontent.com/u/987136?v=4","gravatar_id":"","url":"https://api.github.com/users/rehandalal","html_url":"https://github.com/rehandalal","followers_url":"https://api.github.com/users/rehandalal/followers","following_url":"https://api.github.com/users/rehandalal/following{/other_user}","gists_url":"https://api.github.com/users/rehandalal/gists{/gist_id}","starred_url":"https://api.github.com/users/rehandalal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rehandalal/subscriptions","organizations_url":"https://api.github.com/users/rehandalal/orgs","repos_url":"https://api.github.com/users/rehandalal/repos","events_url":"https://api.github.com/users/rehandalal/events{/privacy}","received_events_url":"https://api.github.com/users/rehandalal/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"peterbe","id":26739,"node_id":"MDQ6VXNlcjI2NzM5","avatar_url":"https://avatars2.githubusercontent.com/u/26739?v=4","gravatar_id":"","url":"https://api.github.com/users/peterbe","html_url":"https://github.com/peterbe","followers_url":"https://api.github.com/users/peterbe/followers","following_url":"https://api.github.com/users/peterbe/following{/other_user}","gists_url":"https://api.github.com/users/peterbe/gists{/gist_id}","starred_url":"https://api.github.com/users/peterbe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/peterbe/subscriptions","organizations_url":"https://api.github.com/users/peterbe/orgs","repos_url":"https://api.github.com/users/peterbe/repos","events_url":"https://api.github.com/users/peterbe/events{/privacy}","received_events_url":"https://api.github.com/users/peterbe/received_events","type":"User","site_admin":false},"assignees":[{"login":"peterbe","id":26739,"node_id":"MDQ6VXNlcjI2NzM5","avatar_url":"https://avatars2.githubusercontent.com/u/26739?v=4","gravatar_id":"","url":"https://api.github.com/users/peterbe","html_url":"https://github.com/peterbe","followers_url":"https://api.github.com/users/peterbe/followers","following_url":"https://api.github.com/users/peterbe/following{/other_user}","gists_url":"https://api.github.com/users/peterbe/gists{/gist_id}","starred_url":"https://api.github.com/users/peterbe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/peterbe/subscriptions","organizations_url":"https://api.github.com/users/peterbe/orgs","repos_url":"https://api.github.com/users/peterbe/repos","events_url":"https://api.github.com/users/peterbe/events{/privacy}","received_events_url":"https://api.github.com/users/peterbe/received_events","type":"User","site_admin":false}],"milestone":null,"comments":0,"created_at":"2018-06-06T05:37:28Z","updated_at":"2018-06-06T14:33:19Z","closed_at":null,"author_association":"MEMBER","pull_request":{"url":"https://api.github.com/repos/mozilla/normandy/pulls/1398","html_url":"https://github.com/mozilla/normandy/pull/1398","diff_url":"https://github.com/mozilla/normandy/pull/1398.diff","patch_url":"https://github.com/mozilla/normandy/pull/1398.patch"},"body":"@peterbe I wrote a failing test to help demonstrate the issue in #1397.\r\n\r\nr?"},"comment":{"url":"https://api.github.com/repos/mozilla/normandy/issues/comments/395090183","html_url":"https://github.com/mozilla/normandy/pull/1398#issuecomment-395090183","issue_url":"https://api.github.com/repos/mozilla/normandy/issues/1398","id":395090183,"node_id":"MDEyOklzc3VlQ29tbWVudDM5NTA5MDE4Mw==","user":{"login":"peterbe","id":26739,"node_id":"MDQ6VXNlcjI2NzM5","avatar_url":"https://avatars2.githubusercontent.com/u/26739?v=4","gravatar_id":"","url":"https://api.github.com/users/peterbe","html_url":"https://github.com/peterbe","followers_url":"https://api.github.com/users/peterbe/followers","following_url":"https://api.github.com/users/peterbe/following{/other_user}","gists_url":"https://api.github.com/users/peterbe/gists{/gist_id}","starred_url":"https://api.github.com/users/peterbe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/peterbe/subscriptions","organizations_url":"https://api.github.com/users/peterbe/orgs","repos_url":"https://api.github.com/users/peterbe/repos","events_url":"https://api.github.com/users/peterbe/events{/privacy}","received_events_url":"https://api.github.com/users/peterbe/received_events","type":"User","site_admin":false},"created_at":"2018-06-06T14:33:19Z","updated_at":"2018-06-06T14:33:19Z","author_association":"CONTRIBUTOR","body":"The HTTP POST fails because of CSRF, not because of authz.\r\n\r\nE.g. \r\n```\r\n▶ curl 'http://localhost:8000/api/v2/recipe/' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:62.0) Gecko/20100101 Firefox/62.0' -H 'Accept: application/json' -H 'Accept-Language: en-US,en;q=0.5' --compressed -H 'Referer: http://localhost:3000/recipe/new/' -H 'content-type: application/json' -H 'x-csrftoken: undefined' -H 'authorization: Bearer SJrw517T_W-0qEMH8bRgJQYBHkwxQ-iG' -H 'origin: http://localhost:3000' -H 'DNT: 1' -H 'Connection: keep-alive' -H 'Pragma: no-cache' -H 'Cache-Control: no-cache' --data '{\"action_id\":\"1\",\"name\":\"SOmething\",\"identicon_seed\":\"v1:az11tsaydlb\",\"extra_filter_expression\":\"true\",\"arguments\":{\"message\":\"Hi\"}}'\r\n{\"detail\":\"CSRF Failed: CSRF cookie not set.\"}%\r\n```\r\n\r\nI used the \"Copy as cURL\" from the Network panel when I tried to make a recipe. "}}
{"actor":{"display_login":"peterbe"}}