482 lines
18 KiB
Plaintext
482 lines
18 KiB
Plaintext
{
|
||
"cells": [
|
||
{
|
||
"cell_type": "markdown",
|
||
"id": "050a107f",
|
||
"metadata": {},
|
||
"source": [
|
||
"# 🔍 XMPP Client Upload Authentication Diagnosis\n",
|
||
"\n",
|
||
"**Problem Analysis:** Dino and Gajim can't upload after restart, Android works after reconnection\n",
|
||
"\n",
|
||
"**Network Setup:**\n",
|
||
"- Desktop: WLAN + Ethernet → Router → HMAC File Server\n",
|
||
"- Mobile: Android XMPP client → Router → HMAC File Server\n",
|
||
"\n",
|
||
"**Date:** August 26, 2025"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "markdown",
|
||
"id": "b6a2684e",
|
||
"metadata": {},
|
||
"source": [
|
||
"## 🎯 Problem Identification\n",
|
||
"\n",
|
||
"### Symptoms:\n",
|
||
"- ❌ **Dino (Desktop):** Upload fails after restart\n",
|
||
"- ❌ **Gajim (Desktop):** Upload fails after restart \n",
|
||
"- ✅ **Android:** Upload works after disconnect/reconnect\n",
|
||
"\n",
|
||
"### Network Context:\n",
|
||
"- Notebook with WLAN + Ethernet (dual interface)\n",
|
||
"- Router provides access to HMAC File Server\n",
|
||
"- Fixed connections vs mobile reconnection behavior"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "code",
|
||
"execution_count": null,
|
||
"id": "b04688cd",
|
||
"metadata": {},
|
||
"outputs": [],
|
||
"source": [
|
||
"# Check current server status and configuration\n",
|
||
"import subprocess\n",
|
||
"import json\n",
|
||
"from datetime import datetime\n",
|
||
"\n",
|
||
"print(\"🔍 HMAC File Server Status Check\")\n",
|
||
"print(\"=\" * 40)\n",
|
||
"\n",
|
||
"# Check if server is running\n",
|
||
"try:\n",
|
||
" result = subprocess.run(['ps', 'aux'], capture_output=True, text=True)\n",
|
||
" if 'hmac-file-server' in result.stdout:\n",
|
||
" print(\"✅ HMAC File Server is running\")\n",
|
||
" \n",
|
||
" # Extract server process info\n",
|
||
" for line in result.stdout.split('\\n'):\n",
|
||
" if 'hmac-file-server' in line and 'grep' not in line:\n",
|
||
" print(f\"📊 Process: {line.split()[1]} {' '.join(line.split()[10:])}\")\n",
|
||
" else:\n",
|
||
" print(\"❌ HMAC File Server not running\")\n",
|
||
"except Exception as e:\n",
|
||
" print(f\"⚠️ Could not check server status: {e}\")\n",
|
||
"\n",
|
||
"print(f\"\\n🕐 Check time: {datetime.now()}\")"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "markdown",
|
||
"id": "86dc3450",
|
||
"metadata": {},
|
||
"source": [
|
||
"## 🔍 Root Cause Analysis\n",
|
||
"\n",
|
||
"### Likely Issues:\n",
|
||
"\n",
|
||
"#### 1. **Token Expiration vs Session Management**\n",
|
||
"- Desktop clients (Dino/Gajim) may cache expired tokens after restart\n",
|
||
"- Android reconnection triggers fresh token generation\n",
|
||
"- Grace periods may not apply to cached tokens\n",
|
||
"\n",
|
||
"#### 2. **Network Interface Detection**\n",
|
||
"- Dual interface (WLAN + Ethernet) may confuse IP detection\n",
|
||
"- Desktop clients may use different IP after restart\n",
|
||
"- Router NAT may assign different internal IPs\n",
|
||
"\n",
|
||
"#### 3. **Client Behavior Differences**\n",
|
||
"- Desktop clients: Restore session from disk cache\n",
|
||
"- Mobile clients: Fresh authentication after reconnect\n",
|
||
"- Token validation may be stricter for cached sessions"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "code",
|
||
"execution_count": null,
|
||
"id": "1bcfae8c",
|
||
"metadata": {},
|
||
"outputs": [],
|
||
"source": [
|
||
"# Check network configuration and IP detection\n",
|
||
"print(\"🌐 Network Configuration Analysis\")\n",
|
||
"print(\"=\" * 40)\n",
|
||
"\n",
|
||
"# Check network interfaces\n",
|
||
"try:\n",
|
||
" result = subprocess.run(['ip', 'addr', 'show'], capture_output=True, text=True)\n",
|
||
" interfaces = []\n",
|
||
" current_interface = None\n",
|
||
" \n",
|
||
" for line in result.stdout.split('\\n'):\n",
|
||
" if ': ' in line and ('wlan' in line or 'eth' in line or 'eno' in line or 'wlp' in line):\n",
|
||
" current_interface = line.split(':')[1].strip().split('@')[0]\n",
|
||
" interfaces.append(current_interface)\n",
|
||
" elif current_interface and 'inet ' in line and '127.0.0.1' not in line:\n",
|
||
" ip = line.strip().split()[1].split('/')[0]\n",
|
||
" print(f\"📡 Interface {current_interface}: {ip}\")\n",
|
||
" \n",
|
||
" print(f\"\\n🔌 Total network interfaces found: {len(interfaces)}\")\n",
|
||
" if len(interfaces) > 1:\n",
|
||
" print(\"⚠️ Multiple interfaces detected - potential IP confusion for clients\")\n",
|
||
" \n",
|
||
"except Exception as e:\n",
|
||
" print(f\"⚠️ Could not analyze network interfaces: {e}\")\n",
|
||
"\n",
|
||
"# Check routing table\n",
|
||
"try:\n",
|
||
" result = subprocess.run(['ip', 'route', 'show'], capture_output=True, text=True)\n",
|
||
" print(\"\\n🛣️ Default routes:\")\n",
|
||
" for line in result.stdout.split('\\n'):\n",
|
||
" if 'default' in line:\n",
|
||
" print(f\" {line}\")\n",
|
||
"except Exception as e:\n",
|
||
" print(f\"⚠️ Could not check routing: {e}\")"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "markdown",
|
||
"id": "44dabca1",
|
||
"metadata": {},
|
||
"source": [
|
||
"## 📊 Bearer Token Analysis\n",
|
||
"\n",
|
||
"Let's examine how the HMAC File Server handles different client scenarios:"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "code",
|
||
"execution_count": null,
|
||
"id": "bbfe7fe4",
|
||
"metadata": {},
|
||
"outputs": [],
|
||
"source": [
|
||
"# Analyze Bearer token validation logic\n",
|
||
"print(\"🔐 Bearer Token Validation Analysis\")\n",
|
||
"print(\"=\" * 40)\n",
|
||
"\n",
|
||
"# Check if the enhanced validation function exists\n",
|
||
"try:\n",
|
||
" with open('/root/hmac-file-server/cmd/server/main.go', 'r') as f:\n",
|
||
" content = f.read()\n",
|
||
" \n",
|
||
" # Look for mobile client detection\n",
|
||
" if 'isMobileXMPP' in content:\n",
|
||
" print(\"✅ Mobile XMPP client detection enabled\")\n",
|
||
" \n",
|
||
" # Extract mobile detection logic\n",
|
||
" lines = content.split('\\n')\n",
|
||
" in_mobile_section = False\n",
|
||
" for i, line in enumerate(lines):\n",
|
||
" if 'isMobileXMPP.*:=' in line or 'isMobileXMPP =' in line:\n",
|
||
" in_mobile_section = True\n",
|
||
" print(\"\\n📱 Mobile client detection logic:\")\n",
|
||
" elif in_mobile_section and 'conversations' in line.lower():\n",
|
||
" print(f\" - Conversations: {'✅' if 'conversations' in line else '❌'}\")\n",
|
||
" elif in_mobile_section and 'dino' in line.lower():\n",
|
||
" print(f\" - Dino: {'✅' if 'dino' in line else '❌'}\")\n",
|
||
" elif in_mobile_section and 'gajim' in line.lower():\n",
|
||
" print(f\" - Gajim: {'✅' if 'gajim' in line else '❌'}\")\n",
|
||
" elif in_mobile_section and 'android' in line.lower():\n",
|
||
" print(f\" - Android: {'✅' if 'android' in line else '❌'}\")\n",
|
||
" elif in_mobile_section and ('}' in line or 'if ' in line):\n",
|
||
" in_mobile_section = False\n",
|
||
" \n",
|
||
" # Check grace period configuration\n",
|
||
" if 'gracePeriod' in content:\n",
|
||
" print(\"\\n⏰ Grace period configuration:\")\n",
|
||
" for line in content.split('\\n'):\n",
|
||
" if 'gracePeriod.*=' in line and ('28800' in line or '43200' in line or '86400' in line or '259200' in line):\n",
|
||
" if '28800' in line:\n",
|
||
" print(\" - Base grace: 8 hours (28800s)\")\n",
|
||
" elif '43200' in line:\n",
|
||
" print(\" - Mobile grace: 12 hours (43200s)\")\n",
|
||
" elif '86400' in line:\n",
|
||
" print(\" - Network resilience: 24 hours (86400s)\")\n",
|
||
" elif '259200' in line:\n",
|
||
" print(\" - Ultra grace: 72 hours (259200s)\")\n",
|
||
" \n",
|
||
"except Exception as e:\n",
|
||
" print(f\"⚠️ Could not analyze Bearer token validation: {e}\")"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "markdown",
|
||
"id": "5527fdcc",
|
||
"metadata": {},
|
||
"source": [
|
||
"## 🎯 Specific Problem: Desktop vs Mobile Client Behavior\n",
|
||
"\n",
|
||
"### The Issue:\n",
|
||
"1. **Desktop clients (Dino/Gajim)** restore sessions from cache after restart\n",
|
||
"2. **Cached tokens may be expired** or tied to old IP addresses\n",
|
||
"3. **Mobile clients get fresh tokens** when reconnecting\n",
|
||
"4. **Grace periods may not apply** to restored cached sessions"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "code",
|
||
"execution_count": null,
|
||
"id": "dcfb3356",
|
||
"metadata": {},
|
||
"outputs": [],
|
||
"source": [
|
||
"# Check server logs for authentication failures\n",
|
||
"print(\"📋 Recent Authentication Activity\")\n",
|
||
"print(\"=\" * 40)\n",
|
||
"\n",
|
||
"log_files = [\n",
|
||
" '/var/log/hmac-file-server-mobile.log',\n",
|
||
" '/var/log/hmac-file-server.log',\n",
|
||
" '/tmp/server.log'\n",
|
||
"]\n",
|
||
"\n",
|
||
"for log_file in log_files:\n",
|
||
" try:\n",
|
||
" result = subprocess.run(['tail', '-20', log_file], capture_output=True, text=True)\n",
|
||
" if result.returncode == 0 and result.stdout.strip():\n",
|
||
" print(f\"\\n📝 Last 20 lines from {log_file}:\")\n",
|
||
" lines = result.stdout.strip().split('\\n')\n",
|
||
" for line in lines[-10:]: # Show last 10 lines\n",
|
||
" if any(keyword in line.lower() for keyword in ['error', 'fail', 'invalid', 'expired', 'bearer', 'auth']):\n",
|
||
" print(f\"🔍 {line}\")\n",
|
||
" break\n",
|
||
" except:\n",
|
||
" continue\n",
|
||
" \n",
|
||
"print(\"\\n💡 Look for patterns like:\")\n",
|
||
"print(\" - 'Invalid Bearer token' (expired cached tokens)\")\n",
|
||
"print(\" - 'expired beyond grace period' (old sessions)\")\n",
|
||
"print(\" - User-Agent differences between clients\")"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "markdown",
|
||
"id": "41f66318",
|
||
"metadata": {},
|
||
"source": [
|
||
"## 🔧 Solution Strategy\n",
|
||
"\n",
|
||
"### Immediate Fixes:\n",
|
||
"\n",
|
||
"#### 1. **Clear Client Caches**\n",
|
||
"- Dino: `~/.local/share/dino/` \n",
|
||
"- Gajim: `~/.local/share/gajim/`\n",
|
||
"\n",
|
||
"#### 2. **Extend Grace Periods for Desktop Clients**\n",
|
||
"- Treat Dino/Gajim as mobile clients for grace period calculation\n",
|
||
"- Add specific detection for desktop XMPP clients\n",
|
||
"\n",
|
||
"#### 3. **Enhanced Session Recovery**\n",
|
||
"- Implement session recovery for cached tokens\n",
|
||
"- Allow IP changes for restored sessions"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "code",
|
||
"execution_count": null,
|
||
"id": "c3054967",
|
||
"metadata": {},
|
||
"outputs": [],
|
||
"source": [
|
||
"# Generate client cache clearing commands\n",
|
||
"print(\"🧹 Client Cache Clearing Commands\")\n",
|
||
"print(\"=\" * 40)\n",
|
||
"\n",
|
||
"import os\n",
|
||
"home_dir = os.path.expanduser('~')\n",
|
||
"\n",
|
||
"cache_locations = {\n",
|
||
" 'Dino': [\n",
|
||
" f'{home_dir}/.local/share/dino/',\n",
|
||
" f'{home_dir}/.cache/dino/',\n",
|
||
" f'{home_dir}/.config/dino/'\n",
|
||
" ],\n",
|
||
" 'Gajim': [\n",
|
||
" f'{home_dir}/.local/share/gajim/',\n",
|
||
" f'{home_dir}/.cache/gajim/',\n",
|
||
" f'{home_dir}/.config/gajim/'\n",
|
||
" ]\n",
|
||
"}\n",
|
||
"\n",
|
||
"print(\"🔍 Check these locations for cached data:\")\n",
|
||
"for client, locations in cache_locations.items():\n",
|
||
" print(f\"\\n📱 {client}:\")\n",
|
||
" for location in locations:\n",
|
||
" if os.path.exists(location):\n",
|
||
" print(f\" ✅ {location} (exists)\")\n",
|
||
" # List important files\n",
|
||
" try:\n",
|
||
" for root, dirs, files in os.walk(location):\n",
|
||
" for file in files:\n",
|
||
" if any(keyword in file.lower() for keyword in ['token', 'session', 'cache', 'upload']):\n",
|
||
" print(f\" 🔍 {os.path.join(root, file)}\")\n",
|
||
" except:\n",
|
||
" pass\n",
|
||
" else:\n",
|
||
" print(f\" ❌ {location} (not found)\")\n",
|
||
"\n",
|
||
"print(\"\\n🚨 MANUAL STEPS TO TRY:\")\n",
|
||
"print(\"1. Close Dino and Gajim completely\")\n",
|
||
"print(\"2. Clear application caches (backup first!)\")\n",
|
||
"print(\"3. Restart clients and test upload\")\n",
|
||
"print(\"4. If still failing, check server logs for specific errors\")"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "markdown",
|
||
"id": "6dcc992f",
|
||
"metadata": {},
|
||
"source": [
|
||
"## 🛠️ Enhanced Server Configuration\n",
|
||
"\n",
|
||
"Let's create an enhanced configuration that treats desktop XMPP clients with the same grace as mobile clients:"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "code",
|
||
"execution_count": null,
|
||
"id": "6efe0490",
|
||
"metadata": {},
|
||
"outputs": [],
|
||
"source": [
|
||
"# Check current mobile client detection and suggest improvements\n",
|
||
"print(\"🔧 Desktop Client Enhancement Strategy\")\n",
|
||
"print(\"=\" * 40)\n",
|
||
"\n",
|
||
"# Read current configuration\n",
|
||
"try:\n",
|
||
" with open('/root/hmac-file-server/config-mobile-resilient.toml', 'r') as f:\n",
|
||
" config = f.read()\n",
|
||
" \n",
|
||
" print(\"📄 Current grace period settings:\")\n",
|
||
" for line in config.split('\\n'):\n",
|
||
" if 'grace' in line.lower() and '=' in line:\n",
|
||
" print(f\" {line.strip()}\")\n",
|
||
" \n",
|
||
" print(\"\\n💡 Recommended enhancement:\")\n",
|
||
" print(\" - Treat Dino and Gajim as 'mobile' clients for grace periods\")\n",
|
||
" print(\" - Add 'desktop_xmpp_grace_period = 24h' for cached session recovery\")\n",
|
||
" print(\" - Enable session_restoration = true for desktop clients\")\n",
|
||
" \n",
|
||
"except Exception as e:\n",
|
||
" print(f\"⚠️ Could not read config: {e}\")\n",
|
||
"\n",
|
||
"# Show the enhanced mobile detection logic needed\n",
|
||
"print(\"\\n🔍 Enhanced Client Detection Logic Needed:\")\n",
|
||
"print(\"```go\")\n",
|
||
"print(\"// Enhanced XMPP client detection (both mobile and desktop)\")\n",
|
||
"print(\"isXMPPClient := strings.Contains(strings.ToLower(userAgent), \\\"conversations\\\") ||\")\n",
|
||
"print(\" strings.Contains(strings.ToLower(userAgent), \\\"dino\\\") ||\")\n",
|
||
"print(\" strings.Contains(strings.ToLower(userAgent), \\\"gajim\\\") ||\")\n",
|
||
"print(\" strings.Contains(strings.ToLower(userAgent), \\\"android\\\") ||\")\n",
|
||
"print(\" strings.Contains(strings.ToLower(userAgent), \\\"xmpp\\\")\")\n",
|
||
"print(\"\")\n",
|
||
"print(\"// Desktop XMPP clients need same grace as mobile for session restoration\")\n",
|
||
"print(\"if isXMPPClient {\")\n",
|
||
"print(\" gracePeriod = int64(86400) // 24 hours for all XMPP clients\")\n",
|
||
"print(\"}\")\n",
|
||
"print(\"```\")"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "markdown",
|
||
"id": "6cdcf458",
|
||
"metadata": {},
|
||
"source": [
|
||
"## 🎯 Immediate Action Plan\n",
|
||
"\n",
|
||
"### Step 1: Quick Client Fix\n",
|
||
"1. **Close Dino and Gajim completely**\n",
|
||
"2. **Clear their caches/sessions** (backup first)\n",
|
||
"3. **Restart clients** - they should get fresh tokens\n",
|
||
"\n",
|
||
"### Step 2: Server Enhancement \n",
|
||
"1. **Modify mobile client detection** to include desktop XMPP clients\n",
|
||
"2. **Extend grace periods** for all XMPP clients (not just mobile)\n",
|
||
"3. **Add session restoration** logic for cached tokens\n",
|
||
"\n",
|
||
"### Step 3: Network Optimization\n",
|
||
"1. **Check for IP conflicts** between WLAN/Ethernet\n",
|
||
"2. **Verify router configuration** for consistent NAT\n",
|
||
"3. **Monitor upload endpoints** for client-specific issues"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "code",
|
||
"execution_count": null,
|
||
"id": "d1f7580d",
|
||
"metadata": {},
|
||
"outputs": [],
|
||
"source": [
|
||
"# Generate immediate fix commands\n",
|
||
"print(\"⚡ IMMEDIATE FIX COMMANDS\")\n",
|
||
"print(\"=\" * 40)\n",
|
||
"\n",
|
||
"print(\"1️⃣ STOP XMPP CLIENTS:\")\n",
|
||
"print(\" pkill -f dino\")\n",
|
||
"print(\" pkill -f gajim\")\n",
|
||
"print(\" # Wait 5 seconds\")\n",
|
||
"\n",
|
||
"print(\"\\n2️⃣ BACKUP AND CLEAR CACHES:\")\n",
|
||
"print(\" # Backup first (optional)\")\n",
|
||
"print(\" cp -r ~/.local/share/dino ~/.local/share/dino.backup\")\n",
|
||
"print(\" cp -r ~/.local/share/gajim ~/.local/share/gajim.backup\")\n",
|
||
"print(\" \")\n",
|
||
"print(\" # Clear session caches\")\n",
|
||
"print(\" rm -rf ~/.cache/dino/\")\n",
|
||
"print(\" rm -rf ~/.cache/gajim/\")\n",
|
||
"print(\" \")\n",
|
||
"print(\" # Clear specific upload-related files (if they exist)\")\n",
|
||
"print(\" find ~/.local/share/dino -name '*upload*' -delete 2>/dev/null || true\")\n",
|
||
"print(\" find ~/.local/share/gajim -name '*upload*' -delete 2>/dev/null || true\")\n",
|
||
"\n",
|
||
"print(\"\\n3️⃣ RESTART CLIENTS:\")\n",
|
||
"print(\" # Start Dino\")\n",
|
||
"print(\" dino &\")\n",
|
||
"print(\" \")\n",
|
||
"print(\" # Start Gajim\")\n",
|
||
"print(\" gajim &\")\n",
|
||
"\n",
|
||
"print(\"\\n4️⃣ TEST UPLOAD:\")\n",
|
||
"print(\" # Try uploading a small file in both clients\")\n",
|
||
"print(\" # Check server logs for any authentication issues\")\n",
|
||
"print(\" tail -f /var/log/hmac-file-server-mobile.log\")\n",
|
||
"\n",
|
||
"print(\"\\n🔍 If this doesn't work, the issue is in the server's client detection logic.\")\n",
|
||
"print(\"The server may not be treating Dino/Gajim with sufficient grace periods.\")"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "markdown",
|
||
"id": "75e3eac8",
|
||
"metadata": {},
|
||
"source": [
|
||
"## 📋 Diagnosis Summary\n",
|
||
"\n",
|
||
"### 🎯 **Root Cause**: Session Cache vs Fresh Authentication\n",
|
||
"\n",
|
||
"- **Desktop clients (Dino/Gajim)**: Restore cached sessions with potentially expired tokens\n",
|
||
"- **Mobile clients**: Get fresh authentication after reconnection\n",
|
||
"- **Server**: May not apply sufficient grace periods to cached/restored sessions\n",
|
||
"\n",
|
||
"### ✅ **Solution Priority**:\n",
|
||
"1. **Immediate**: Clear client caches to force fresh authentication\n",
|
||
"2. **Short-term**: Enhance server to treat desktop XMPP clients with mobile-level grace\n",
|
||
"3. **Long-term**: Implement proper session restoration for all XMPP clients\n",
|
||
"\n",
|
||
"### 🔧 **Next Steps**:\n",
|
||
"Execute the immediate fix commands above, then monitor server logs for authentication patterns."
|
||
]
|
||
}
|
||
],
|
||
"metadata": {
|
||
"language_info": {
|
||
"name": "python"
|
||
}
|
||
},
|
||
"nbformat": 4,
|
||
"nbformat_minor": 5
|
||
}
|