[BUG] Unable to login to PrusaLink on Safari (macOS/iOS/iPadOS ) #3287

pyrho · 2023-09-20T23:32:15Z

Please, before you create a new bug report, please make sure you searched in open and closed issues and couldn't find anything that matches.

Printer type - [ALL]

Printer firmware version - [>= 5.0.0]

Original or Custom firmware - [Original]

Optional upgrades - [N/A]

USB drive or USB/Octoprint - USB drive

Describe the bug
The nonce generated by the backend for HTTP Digest authentication (used by PrusaLink) is only valid for 5 seconds (as defined in the code here).

Safari (contrary to the other browsers it seems) does not re-submit the credentials with a fresh nonce upon receiving a 401 response code. So each time Safari displays its Digest Auth modal window, you only have 5 seconds to provide valid credentials, after which the nonce will become stale and any login attempt will fail.

This seems to be specific to Safari, as it would seem like the other browsers work around this by re-submitting the authentication request when the nonce is stale (using the freshly provided one).

Short of submitting a feature request to Safari, our only hope (assuming we're sticking with Digest Auth), is to increase the nonce's lifetime to something more sensible. jvasileff mentioned in prusa3d/Prusa-Link-Web#386 that Apache's default nonce lifetime is 300. This document also states the following:

this should probably never be set to less than 10 seconds

This timeout is too short, especially on iOS where typing is slower than on a desktop, making it impossible to login in the 5 second time frame allowed.

How to reproduce
Try to connect to PrusaLink (FW >= 5.0.0) using Safari (iOS, macOS, or iPadOS), take more than 5 seconds to enter your login and password when prompted; the login attempt will fail.

Expected behavior
Users are able to log into PrusaLink using the Safari web browser.

How to fix

Patch provided by jvasileff in prusa3d/Prusa-Link-Web#386 (comment)

diff --git i/src/common/http/types.h w/src/common/http/types.h
index 2c8a42b4..e5ce21b8 100644
--- i/src/common/http/types.h
+++ w/src/common/http/types.h
@@ -148,7 +148,7 @@ using Url = std::array<char, MAX_URL_LEN>;
 // hopefully never gets stale nonce for request uploading a gcode, which
 // can cause an infinit upload loop, if the browser does not read errors
 // before sending the whole body.
-static const uint32_t valid_nonce_period = 5;
-static const uint32_t extended_valid_nonce_period = 8;
+static const uint32_t valid_nonce_period = 300;
+static const uint32_t extended_valid_nonce_period = 300;
 
 } // namespace http

G-code
N/A

Crash dump file
N/A

Video

Typing the credentials after 5 seconds demo (fail):

Typing the credentials within 5 seconds demo (success):

The text was updated successfully, but these errors were encountered:

amoose136 · 2023-09-22T14:36:45Z

Good find. Hopefully a fix is soon in the main release.

Claghorn · 2023-09-28T02:27:24Z

Just finished my MK4 kit build, loaded firmware 5.0.0, setup wifi, but I can't login with any browser. I just keep getting the login window over any over again.

pyrho · 2023-09-29T00:27:00Z

Just finished my MK4 kit build, loaded firmware 5.0.0, setup wifi, but I can't login with any browser. I just keep getting the login window over any over again.

I've seen many reports of people unable to use any Safari-based browser, but they were all able to login with Chrome or Firefox (on desktop that is, not on iOS).
Are you sure you are not mistyping your password ? 😅

Claghorn · 2023-10-04T13:00:09Z

Just finished my MK4 kit build, loaded firmware 5.0.0, setup wifi, but I can't login with any browser. I just keep getting the login window over any over again.

I've seen many reports of people unable to use any Safari-based browser, but they were all able to login with Chrome or Firefox (on desktop that is, not on iOS). Are you sure you are not mistyping your password ? 😅

For some reason, generating a new password made everything work. Don't know what it had against the original one, I checked it about a dozen times.

Prusa-Support · 2023-10-18T18:26:34Z

Thank you very much for the suggestion.

I'll make sure the developers will acknowledge this thread.

I wonder if this can be escalated as a Pull Request or if it can be closed as a duplicate of #3043 and prusa3d/Prusa-Link-Web#386.
In the first case though, the issue should be closed anyway to open a new Pull Request instead.

Michele Moramarco
Prusa Research

The initial valid period for the HTTP Digest Auth nonce was too low (at 5 seconds). This make it impossible to log into PrusaLink when using Safari, a saner value of 300 (chosen because it's Apache's default value) does not hinder security and fixes the issue with Safari-based browsers (macOS, ipadOS, iOS). See prusa3d#3287 for more details.

pyrho · 2023-10-18T20:37:11Z

Hi @Prusa-Support

Thank you for your reply, #3043 is definitely the same issue as this one (sorry I should have commented on it instead of opening this issue).

I've gone ahead and opened a PR: https://github.com/prusa3d/Prusa-Firmware-Buddy/pull/3371/files with the fix.

Please don't hesitate to close this, #3043 and prusa3d/Prusa-Link-Web#386 if you think it's best.

samirkouider · 2023-11-20T11:58:41Z

Just managed to replicate this on safari for mobile. Waited more than 5s and as usual credentials prompt just reappeared. Copied my password for next attempt, for less than 5s, pasted and logged in no problem

GRIFFCOMMca · 2023-11-20T17:31:10Z

Just upgraded to v5.0.1 (Mk4), seem to have the same issue in Windows

Windows 10
Edge, Chrome, Firefox

UPDATE
Just upgraded to v5.1.0 and now the username / password is working on Windows 10 Pro and Edge

srp3rd · 2023-11-25T03:44:16Z

I've run into the same problem. I can't consistently log in using Safari, which I was able to do before I upgraded the firmware. Upvote for this fix.

Prusa-Support · 2023-11-25T16:24:28Z

@GRIFFCOMMca I'm not sure if this issue affects Windows and Chrome as they are the most popular combination but I don't seem to see similar reports. Also, this issue is quite specific about Safari (macOS/iOS/iPadOS).
Please make sure your computer is connected to the same local network as your printer (Prusa Link is available only on the local network) and double check IP/key via Prusa Connect (the latter allows remote connection outside the local network).

@pyrho Thanks for your commitment and for opening the Pull Request.

This issue will be closed because opened after issue #3043.
Please monitor PR #3371 or feel free to comment on the initial issue mentioned above.

Michele Moramarco
Prusa Research

The initial valid period for the HTTP Digest Auth nonce was too low (at 5 seconds). This make it impossible to log into PrusaLink when using Safari, a saner value of 300 (chosen because it's Apache's default value) does not hinder security and fixes the issue with Safari-based browsers (macOS, ipadOS, iOS). See prusa3d#3287 for more details.

The initial valid period for the HTTP Digest Auth nonce was too low (at 5 seconds). This make it impossible to log into PrusaLink when using Safari, a saner value of 300 (chosen because it's Apache's default value) does not hinder security and fixes the issue with Safari-based browsers (macOS, ipadOS, iOS). See #3287 for more details.

The initial valid period for the HTTP Digest Auth nonce was too low (at 5 seconds). This make it impossible to log into PrusaLink when using Safari, a saner value of 300 (chosen because it's Apache's default value) does not hinder security and fixes the issue with Safari-based browsers (macOS, ipadOS, iOS). See prusa3d#3287 for more details.

emc02 · 2024-09-11T12:36:57Z

opened a new issue, because it's not related to Safari and only happens on opening the API-Sites, but I think it's related to this bug: #507

pyrho added the bug Something isn't working. label Sep 20, 2023

jvasileff mentioned this issue Sep 21, 2023

Safari PrusaLinlk Authentication with MK4 #3043

Closed

pyrho mentioned this issue Oct 4, 2023

Cannot login to PrusaLink on Ipad prusa3d/Prusa-Link-Web#423

Open

pyrho mentioned this issue Oct 18, 2023

fix(prusalink): increase nonce valid period #3371

Merged

Prusa-Support mentioned this issue Nov 15, 2023

Safari PrusaLinlk Authentication with MK4 prusa3d/Prusa-Link-Web#386

Open

Prusa-Support closed this as completed Nov 25, 2023

jmckeown2 mentioned this issue Dec 19, 2023

Login on Prusalink from Mac OSX Safari doesn't seem to work prusa3d/Prusa-Link#810

Open

emc02 mentioned this issue Sep 11, 2024

[BUG] wget: Prusalink needs to athenticate twice prusa3d/Prusa-Link-Web#507

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[BUG] Unable to login to PrusaLink on Safari (macOS/iOS/iPadOS ) #3287

[BUG] Unable to login to PrusaLink on Safari (macOS/iOS/iPadOS ) #3287

pyrho commented Sep 20, 2023

amoose136 commented Sep 22, 2023

Claghorn commented Sep 28, 2023

pyrho commented Sep 29, 2023

Claghorn commented Oct 4, 2023

Prusa-Support commented Oct 18, 2023

pyrho commented Oct 18, 2023

samirkouider commented Nov 20, 2023

GRIFFCOMMca commented Nov 20, 2023 •

edited

Loading

srp3rd commented Nov 25, 2023

Prusa-Support commented Nov 25, 2023

emc02 commented Sep 11, 2024

[BUG] Unable to login to PrusaLink on Safari (macOS/iOS/iPadOS ) #3287

[BUG] Unable to login to PrusaLink on Safari (macOS/iOS/iPadOS ) #3287

Comments

pyrho commented Sep 20, 2023

amoose136 commented Sep 22, 2023

Claghorn commented Sep 28, 2023

pyrho commented Sep 29, 2023

Claghorn commented Oct 4, 2023

Prusa-Support commented Oct 18, 2023

pyrho commented Oct 18, 2023

samirkouider commented Nov 20, 2023

GRIFFCOMMca commented Nov 20, 2023 • edited Loading

srp3rd commented Nov 25, 2023

Prusa-Support commented Nov 25, 2023

emc02 commented Sep 11, 2024

GRIFFCOMMca commented Nov 20, 2023 •

edited

Loading