Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(meetings): handle getMe error due to insufficient privileges #4011

Open
wants to merge 1 commit into
base: next
Choose a base branch
from

Conversation

sreenara
Copy link
Contributor

@sreenara sreenara commented Nov 27, 2024

COMPLETES # ADHOC

This pull request addresses

a blocker to join meetings when the spark:people_read scope is missing from an access token. The issue was found on the Control Hub while they were joining meetings.
This issue is being caused by #3908 which doesn't handle a failure while calling the getMe() function. Due to this, the entire webex.meetings.register() function stops executing and a developer cannot proceed with registration and joining a meeting.
Due to this, any developers who upgrade to v3.6.0 and don't have the spark:people_read scope will get blocked from joining meetings.

Error:

logger.js:396 wx-js-sdk Meetings:index#register --> ERROR, Unable to register, The server understood the request, but refused to fulfill it because the access token is missing required scopes or the user is missing required roles or licenses.
undefined https://hydra-a.wbx2.com/v1/people/me

by making the following changes

Added a catch to ensure the registration doesn't get blocked due to the failure to get user information.

Change Type

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)
  • Documentation update
  • Tooling change
  • Internal code refactor

The following scenarios were tested

  1. Created an integration with only limited scopes "spark:calls_write", "spark:telephony_config_write", "spark:kms", "spark:webrtc_calling", "spark:calls_read", "spark:xsi", "spark:telephony_config_read"
  2. Generated an access token from the integration above.
  3. Tried to use this access token to register and join a meeting in the kitchen sink without the fix. Registration failed. Please see the console logs attached.
  4. Used the access token after adding the fix initialize webex in the kitchen sink page and join a meeting.
  5. Was able to join the meeting successfully with audio and video
  6. Added UT to ensure we are testing the catch block

Logs.zip

I certified that

  • I have read and followed contributing guidelines

  • I discussed changes with code owners prior to submitting this pull request

  • I have not skipped any automated checks

  • All existing and new tests passed

  • I have updated the documentation accordingly


Make sure to have followed the contributing guidelines before submitting.

@sreenara sreenara added the validated If the pull request is validated for automation. label Nov 27, 2024
@sreenara sreenara requested review from a team as code owners November 27, 2024 13:18
Copy link

coderabbitai bot commented Nov 27, 2024

Walkthrough

The changes in this pull request involve refactoring the fetchUserPreferredWebexSite method in the Meetings class to enhance readability and maintainability. The promise chain has been flattened, improving the flow of execution while retaining the original functionality. Additionally, error handling has been improved to log messages when user information retrieval fails. Corresponding unit tests have been updated to cover new error scenarios, ensuring robust testing of the method's functionality.

Changes

File Change Summary
packages/@webex/plugin-meetings/src/meetings/index.ts Refactored fetchUserPreferredWebexSite method for readability; enhanced error handling.
packages/@webex/plugin-meetings/test/unit/spec/meetings/index.js Added a test for error handling in fetchUserPreferredWebexSite; updated setup for stubbing.

Possibly related PRs

Suggested reviewers

  • marcin-bazyl
  • chburket
  • antsukanova
  • brycetham

🐰 In the meadow, where bunnies play,
A method's refactored in a clearer way.
With promises flattened, and errors logged,
Fetching preferences now feels like a jog!
Hopping through tests, we ensure it's right,
For a smoother experience, oh what a delight! 🌼

Warning

There were issues while running some tools. Please review the errors and either fix the tool’s configuration or disable the tool if it’s a critical failure.

🔧 eslint

If the error stems from missing dependencies, add them to the package.json file. For unrecoverable errors (e.g., due to private dependencies), disable the tool in the CodeRabbit configuration.

warning [email protected]: This version is no longer supported. Please see https://eslint.org/version-support for other options.
warning eslint > @humanwhocodes/[email protected]: Use @eslint/config-array instead
warning eslint > @humanwhocodes/config-array > @humanwhocodes/[email protected]: Use @eslint/object-schema instead
warning eslint > file-entry-cache > flat-cache > [email protected]: Rimraf versions prior to v4 are no longer supported
warning eslint > file-entry-cache > flat-cache > rimraf > [email protected]: Glob versions prior to v9 are no longer supported
warning eslint > file-entry-cache > flat-cache > rimraf > glob > [email protected]: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
warning eslint-import-resolver-typescript > [email protected]: Glob versions prior to v9 are no longer supported
warning [email protected]: Glob versions prior to v9 are no longer supported
warning intern > [email protected]: Glob versions prior to v9 are no longer supported
warning intern > glob > [email protected]: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
warning jasmine > [email protected]: Glob versions prior to v9 are no longer supported
warning jest > jest-cli > jest-config > [email protected]: Glob versions prior to v9 are no longer supported
warning jest > @jest/core > jest-runtime > [email protected]: Glob versions prior to v9 are no longer supported
warning jest > @jest/core > @jest/reporters > [email protected]: Glob versions prior to v9 are no longer supported
warning jest > @jest/core > @jest/transform > babel-plugin-istanbul > test-exclude > [email protected]: Glob versions prior to v9 are no longer supported
warning mocha > [email protected]: Glob versions prior to v9 are no longer supported
warning mocha > glob > [email protected]: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
warning [email protected]: 16.1.1
warning wd > [email protected]: request has been deprecated, see request/request#3142
warning wd > [email protected]: You or someone you depend on is using Q, the JavaScript Promise library that gave JavaScript developers strong feelings about promises. They can almost certainly migrate to the native JavaScript promise now. Thank you literally everyone for joining me in this bet against the odds. Be excellent to each other.

(For a CapTP with native promises, see @endo/eventual-send and @endo/captp)
warning wd > archiver > [email protected]: Glob versions prior to v9 are no longer supported
warning wd > request > [email protected]: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.
warning wd > request > [email protected]: this library is no longer supported
warning wd > archiver > archiver-utils > [email protected]: Glob versions prior to v9 are no longer supported
warning @babel/cli > [email protected]: Glob versions prior to v9 are no longer supported
warning @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-async-generator-functions instead.
warning @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-class-properties instead.
warning @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-export-namespace-from instead.
warning @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-nullish-coalescing-operator instead.
warning @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-object-rest-spread instead.
warning @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-optional-chaining instead.
warning @babel/[email protected]: 🚨 This package has been deprecated in favor of separate inclusion of a polyfill and regenerator-runtime (when needed). See the @babel/polyfill docs (https://babeljs.io/docs/en/babel-polyfill) for more information.
warning @babel/polyfill > [email protected]: core-js@<3.23.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Some versions have web compatibility issues. Please, upgrade your dependencies to the actual version of core-js.
warning @babel/runtime-corejs2 > [email protected]: core-js@<3.23.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Some versions have web compatibility issues. Please, upgrade your dependencies to the actual version of core-js.
warning babel-plugin-lodash > [email protected]: Glob versions prior to v9 are no longer supported
warning workspace-aggregator-31657709-dd86-42dc-9bdc-e7fb42989107 > [email protected]: This version is no longer supported. Please see https://eslint.org/version-support for other options.
warning workspace-aggregator-31657709-dd86-42dc-9bdc-e7fb42989107 > [email protected]: Glob versions prior to v9 are no longer supported
warning workspace-aggregator-31657709-dd86-42dc-9bdc-e7fb42989107 > [email protected]: 16.1.1
warning workspace-aggregator-31657709-dd86-42dc-9bdc-e7fb42989107 > @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-async-generator-functions instead.
warning workspace-aggregator-31657709-dd86-42dc-9bdc-e7fb42989107 > @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-class-properties instead.
warning workspace-aggregator-31657709-dd86-42dc-9bdc-e7fb42989107 > @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-export-namespace-from instead.
warning workspace-aggregator-31657709-dd86-42dc-9bdc-e7fb42989107 > @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-nullish-coalescing-operator instead.
warning workspace-aggregator-31657709-dd86-42dc-9bdc-e7fb42989107 > @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-object-rest-spread instead.
warning workspace-aggregator-31657709-dd86-42dc-9bdc-e7fb42989107 > @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-optional-chaining instead.
warning workspace-aggregator-31657709-dd86-42dc-9bdc-e7fb42989107 > @babel/[email protected]: 🚨 This package has been deprecated in favor of separate inclusion of a polyfill and regenerator-runtime (when needed). See the @babel/polyfill docs (https://babeljs.io/docs/en/babel-polyfill) for more information.
error [email protected]: The engine "node" is incompatible with this module. Expected version "^14 || ^16 || ^17 || ^18 || ^19". Got "22.9.0"
error Found incompatible module.


Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

❤️ Share
🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Generate unit testing code for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit testing code for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read src/utils.ts and generate unit testing code.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 0

🧹 Outside diff range and nitpick comments (2)
packages/@webex/plugin-meetings/src/meetings/index.ts (2)

1047-1093: Improve error handling for guest user check.

The error handling for the _getMe() call could be more specific to help with debugging. Consider catching specific error types and providing more detailed error messages.

Apply this diff to improve error handling:

 return this.webex.people
   ._getMe()
   .then((me) => {
     const isGuestUser = me.type === 'appuser';
     if (!isGuestUser) {
       return this.request.getMeetingPreferences()
         .then((res) => {
           // ... existing code ...
         });
     }
     return Promise.resolve();
   })
   .catch((error) => {
-    LoggerProxy.logger.error('Failed to retrieve user information. No site will be set');
+    LoggerProxy.logger.error(
+      'Failed to retrieve user information. No site will be set.',
+      {
+        errorName: error.name,
+        errorMessage: error.message,
+        errorStack: error.stack
+      }
+    );
+    // Re-throw specific errors that should be handled by the caller
+    if (error.name === 'NotAuthorizedError') {
+      throw error;
+    }
   });

1060-1083: Enhance the fallback mechanism for preferred site retrieval.

The current implementation has a good fallback strategy but could benefit from more detailed logging to track which source provided the preferred site.

Apply this diff to improve logging:

 if (!this.preferredWebexSite) {
+  LoggerProxy.logger.info('Falling back to user preferences for preferred site');
   return this.webex.internal.user
     .get()
     .then((user) => {
       const preferredWebexSite =
         user?.userPreferences?.userPreferencesItems?.preferredWebExSite;
       if (preferredWebexSite) {
+        LoggerProxy.logger.info(
+          `Retrieved preferred site from user preferences: ${preferredWebexSite}`
+        );
         this.preferredWebexSite = preferredWebexSite;
         this.webex.internal.services
           ._getCatalog()
           .addAllowedDomains([preferredWebexSite]);
       } else {
         throw new Error('site not found');
       }
     })
     .catch(() => {
       LoggerProxy.logger.error(
         'Failed to fetch preferred site from user - no site will be set'
       );
     });
 }
📜 Review details

Configuration used: CodeRabbit UI
Review profile: CHILL

📥 Commits

Reviewing files that changed from the base of the PR and between c4ba3e5 and 109a25a.

📒 Files selected for processing (2)
  • packages/@webex/plugin-meetings/src/meetings/index.ts (1 hunks)
  • packages/@webex/plugin-meetings/test/unit/spec/meetings/index.js (2 hunks)
🔇 Additional comments (3)
packages/@webex/plugin-meetings/src/meetings/index.ts (1)

1052-1058: 🛠️ Refactor suggestion

Verify the domain before adding it to allowed domains.

The code adds the preferred site to allowed domains without validating the domain format.

Run the following script to check for domain validation patterns in the codebase:

Apply this diff to add domain validation:

 if (res) {
   const preferredWebexSite = MeetingsUtil.parseDefaultSiteFromMeetingPreferences(res);
+  if (!MeetingsUtil.isValidDomain(preferredWebexSite)) {
+    LoggerProxy.logger.warn(
+      `Invalid domain format for preferred site: ${preferredWebexSite}`
+    );
+    return;
+  }
   this.preferredWebexSite = preferredWebexSite;
   this.webex.internal.services._getCatalog().addAllowedDomains([preferredWebexSite]);
 }
packages/@webex/plugin-meetings/test/unit/spec/meetings/index.js (2)

2080-2094: LGTM! Well-structured test case for error handling.

The test case properly verifies the error handling behavior when user information retrieval fails due to insufficient scopes. It checks both the state update (empty preferred site) and error logging.


2111-2111: LGTM! Good refactoring of test setup.

Moving the _getMe stub setup into the setup helper function improves code organization and maintainability.

Copy link

This pull request is automatically being deployed by Amplify Hosting (learn more).

Access this pull request here: https://pr-4011.d3m3l2kee0btzx.amplifyapp.com

return Promise.resolve();
})
.catch(() => {
LoggerProxy.logger.error('Failed to retrieve user information. No site will be set');
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
LoggerProxy.logger.error('Failed to retrieve user information. No site will be set');
LoggerProxy.logger.error('Failed to retrieve user information. No preferredWebexSite will be set');

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
validated If the pull request is validated for automation.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants