Navigation Menu

Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

enable_framed_allow_write_admin_token_auth not working #16993

Closed
jisse44 opened this issue Dec 21, 2020 · 5 comments
Closed

enable_framed_allow_write_admin_token_auth not working #16993

jisse44 opened this issue Dec 21, 2020 · 5 comments
Labels
answered For when a question was asked and we referred to forum or answered it.

Comments

@jisse44
Copy link

jisse44 commented Dec 21, 2020 •
edited

Matomo 3.14.1 to 4.0.5 :

We have hundreds of Wordpress websites using Matomo 3.14.1, with a custom plugin displaying an iFrame in dashboard with Widget iframed:
https://website.url/piwik/index.php?module=Widgetize&action=iframe&widget=1&moduleToWidgetize=VisitsSummary&actionToWidgetize=getSparklines&idSite=1&period=day&date=2020-12-20&disableLink=1&widget=1&token_auth=xxxxx

With the update to 4.0.5, we have the error message
"This user has super user access. For embedding widgets super user token auths are not allowed. See our faq for more information."

OK, so the FAQ says:

"And if you are using Matomo 4 or above, and want to be able to use token_auths of users with write or admin access with your iframe URLs, you will have to add the setting:

enable_framed_allow_write_admin_token_auth=1
"

But when configured to 1 , enable_framed_allow_write_admin_token_auth doesn't seems to work.

I know it's not recommended, and for new installations we will create special user with view only, but as I said, we don't want to do this for the hundred existing sites.
@tsteur tsteur added this to the 4.0.x milestone Dec 21, 2020
@tsteur
Copy link
Member

tsteur commented Dec 21, 2020

@jisse44 I just tried to reproduce this. I think it's actually supposed to work like this that it only allows embedding widgets for write and admin access, but never for super user access. Are the websites all using the same user? Would it be easily possible to change that user to an admin maybe?

@tsteur tsteur removed this from the 4.0.x milestone Dec 21, 2020
@tsteur tsteur added the Waiting for user feedback Indicates the Matomo team is waiting for feedback from the author or other users. label Dec 21, 2020
@jisse44
Copy link
Author

jisse44 commented Dec 23, 2020

OK, that is the trick, my user is "super user", not "admin" ...

Is it possible to create and get token for user from console ?

@tsteur
Copy link
Member

tsteur commented Dec 23, 2020

Hi @jisse44 It's currently only possible through the UsersManager.createAppSpecificTokenAuth API. You could write a bash script that calls the API if that helps?

@jisse44
Copy link
Author

jisse44 commented Jan 27, 2021

Hi,

sorry for the delay, but yes I finally managed migration with a bash script, by getting read only user token_auth in DB before the upgrade.

@jisse44 jisse44 closed this as completed Jan 27, 2021
@tsteur tsteur added answered For when a question was asked and we referred to forum or answered it. and removed Waiting for user feedback Indicates the Matomo team is waiting for feedback from the author or other users. labels Jan 27, 2021
@tsteur
Copy link
Member

tsteur commented Jan 27, 2021

Great to hear @jisse44 thanks for letting us know 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
answered For when a question was asked and we referred to forum or answered it.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@tsteur @jisse44