Eventstore UI are not setting Authorization header

EventStoreDB
1

Hi,

I have setup a three node cluster. When I try to access a “$all” stream from a browser, an error ‘stream not exists’ appear. When i drill down a request using an inspect console, I don’t see a ‘Authentication’ header , but if i refresh a browser couple of times i do see a header.

/// without Authorization header ////

GET /streams/%24all?embed=tryharder HTTP/1.1

Host: :2113

Connection: keep-alive

Accept: application/json

Origin: http://:2113

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.118 Safari/537.36

Referer: http://:2113/web/index.html

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

/// with Authorization header ////

GET /streams/%24all?embed=tryharder HTTP/1.1

Host: :2113

Connection: keep-alive

Accept: application/json

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.118 Safari/537.36

ES-LongPoll: 5

Authorization: Basic YWRtaW46Y2hhbmdlaXQ=

Referer: http://:2113/web/index.html

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

2

Re When I try to access a “$all” stream from a browser, an error ‘stream not exists’ appear. Pleas send curl repro Willing to bet this is $all vs %24all

@pieter dunno on the rest any ideas?

Of course without an authorization wouldn’t you just get a login and then get your data?

Greg

3

Hi,

I try sending %24all using curl and I got 401 Unauthorized however, if i send a authorization header with a same call i.e. “Authorization: Basic YWRtaW46Y2hhbmdlaXQ=”, i got 200 OK.

4

$all requires authorization as it needs an admin priv by default this is expected behaviour

5

OK. but somehow it is not passing from eventstore UI.

6

As I mentioned we would need to see an actual exchange of this
happening or a way to reproduce with curl etc. A way to reproduce is
prefered though

7

Ok. Thx