ApiUsageException: The authorization headers in your request are not valid: Invalid signature
Open, MediumPublicPRODUCTION ERROR
Actions

Description

Error

service.version: 1.43.0-wmf.9
trace.id: cb4798a7-8aba-495d-a843-913cbedcf182
Find trace.id in Logstash

labels.normalized_message

[{reqId}] {exception_url}   ApiUsageException: The authorization headers in your request are not valid: Invalid signature

error.stack_trace

from /srv/mediawiki/php-1.43.0-wmf.9/includes/api/ApiUsageException.php(73)
#0 /srv/mediawiki/php-1.43.0-wmf.9/includes/session/SessionProvider.php(742): ApiUsageException::newWithMessage(NULL, MediaWiki\Message\Message)
#1 /srv/mediawiki/php-1.43.0-wmf.9/includes/HookContainer/HookContainer.php(159): MediaWiki\Session\SessionProvider::MediaWiki\Session\{closure}(ApiMain)
#2 /srv/mediawiki/php-1.43.0-wmf.9/includes/HookContainer/HookRunner.php(692): MediaWiki\HookContainer\HookContainer->run(string, array)
#3 /srv/mediawiki/php-1.43.0-wmf.9/includes/api/ApiEntryPoint.php(144): MediaWiki\HookContainer\HookRunner->onApiBeforeMain(ApiMain)
#4 /srv/mediawiki/php-1.43.0-wmf.9/includes/MediaWikiEntryPoint.php(200): MediaWiki\Api\ApiEntryPoint->execute()
#5 /srv/mediawiki/php-1.43.0-wmf.9/api.php(44): MediaWiki\MediaWikiEntryPoint->run()
#6 /srv/mediawiki/w/api.php(3): require(string)
#7 {main}

Impact

Notes

Noticed a handful of these during log triage. Seems like something that shouldn't be hitting error logs.

Details

Request URL: https://mg.wiktionary.org/w/api.php

Event Timeline

brennen created this task.Jun 13 2024, 3:48 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 13 2024, 3:48 PM

brennen added a project: User-brennen.Jun 13 2024, 3:49 PM

brennen moved this task from Backlog to Logs/Train on the User-brennen board.

Aklapper added a project: MediaWiki-Core-AuthManager.Jun 14 2024, 8:09 AM

Restricted Application added a project: MediaWiki-Platform-Team. · View Herald TranscriptJun 14 2024, 8:09 AM

This is user error (invalid OAuth signature). The problem on our side is that it ends up in the exception channel which should not happen for an ApiUsageException. It should be handled by ApiMain::handleApiBeforeMainException() which AFAICS does not log there (unfortunately since the stack trace reflects where the exception was created, not where it was logged, it's hard to be sure what's going on).

Tgr added a project: MW-Interfaces-Team.Jun 17 2024, 2:34 PM

Tgr moved this task from Inbox, needs triage to Blocked/waiting on the MediaWiki-Platform-Team board.

Tgr moved this task from Blocked/waiting to Radar on the MediaWiki-Platform-Team board.

Tgr edited projects, added MediaWiki-Platform-Team (Radar); removed MediaWiki-Platform-Team.

BPirkle triaged this task as Medium priority.Jun 20 2024, 3:09 PM

BPirkle moved this task from Incoming (Needs Triage) to Backlog (Triaged and Ready) on the MW-Interfaces-Team board.

aaron claimed this task.Jun 20 2024, 3:09 PM

Krinkle moved this task from Untriaged to Jun 2024 on the Wikimedia-production-error board.Jul 25 2024, 4:07 PM