Superset API IMPORT throw into Login Redirect page #30713

illaaa · 2024-10-25T12:16:30Z

illaaa
Oct 25, 2024

Hi guys,
I'm trying to import a dashboard through the API but in the result I get a redirection to login page.
Superset version is 4.0.0

If I execute same requests from Postman, everything works fine.
Here is the requests I send from bash:

LOGIN_RESPONSE=$(curl -s -X POST "$SUPSERSET_URL/api/v1/security/login" \
  -H "Content-Type: application/json" \
  -d '{"username": "'"$USERNAME"'", "password": "'"$PASSWORD"'", "provider": "db", "refresh": "True"}')
ACCESS_TOKEN=$(echo $LOGIN_RESPONSE | jq -r '.access_token')

CSRF_RESPONSE=$(curl -s -X GET "$SUPSERSET_URL/api/v1/security/csrf_token/" \
  -H "Authorization: Bearer $ACCESS_TOKEN")
CSRF_TOKEN=$(echo $CSRF_RESPONSE | jq -r '.result')

#got that from comments under other github posts for the same issue, doesn't help
#curl -c cookies.txt -H "Authorization: Bearer $ACCESS_TOKEN" -L $SUPSERSET_URL"/api/v1/security/csrf_token/" >> csrf_token.json
#value=$(cat cookies.txt) && found=${value##*session} && export COOKIE=$(echo $found | sed -e 's/\t//g')

IMPORT_RESPONSE=$(curl -s -X POST "$SUPSERSET_URL/api/v1/dashboard/import/" \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "X-CSRFToken: $CSRF_TOKEN" \
  -H "Accept: application/json" \
  -F "formData=@$ZIP_FILE_PATH" \
  -F "passwords= $PASSWORDS" \
  -F "ssh_tunnel_passwords={}" \
  -F "ssh_tunnel_private_keys={}" \
  -F "ssh_tunnel_private_key_passwords={}" \
  -F "overwrite=true")
#  -H "Cookie: session=$COOKIE" \
#  -H "Referer: $SUPSERSET_URL" \

Response: <!doctype html>
<html lang=en>
<title>Redirecting...</title>
<h1>Redirecting...</h1>
<p>You should be redirected automatically to the target URL: <a href="/login/">/login/</a>. If not, click the link.

Also checked these comments for the same problem. Adding "Cookie" or "Referer" does not help.
#22407 (comment)
#16030 (comment)
#16030 (comment)

Would be grateful for any help and suggestions

@illaaa · 2024-10-25T12:18:30Z

dosubot[bot]
bot Oct 25, 2024

Hey there, @illaaa! I'm here to help you with any bugs, questions, or contributions you have in mind. Let's squash those bugs together! 😄

There are similar issues reported regarding the Superset API redirecting to the login page when trying to import a dashboard. Here are some key points and a potential solution:

Similar Issues:
- Users have reported similar problems where they successfully obtain an access token and CSRF token but still face redirection to the login page when making API calls from bash, while the same requests work in Postman ^[1]^[2].
Potential Solution:
- Ensure that both the access token and CSRF token are correctly included in your requests.
- You might need to manage session cookies explicitly. In some cases, using curl with the -c and -b options to handle cookies can help maintain the session.
- Consider using the workaround provided in a similar issue, which involves fetching the CSRF token with session cookies and then using those cookies in subsequent requests ^[2].

Here's a brief example of how you might adjust your script to handle cookies:

# Login and get access token
LOGIN_RESPONSE=$(curl -s -X POST "$SUPSERSET_URL/api/v1/security/login" \
  -H "Content-Type: application/json" \
  -d '{"username": "'"$USERNAME"'", "password": "'"$PASSWORD"'", "provider": "db", "refresh": "True"}')
ACCESS_TOKEN=$(echo $LOGIN_RESPONSE | jq -r '.access_token')

# Get CSRF token with cookies
curl -c cookies.txt -H "Authorization: Bearer $ACCESS_TOKEN" -L "$SUPSERSET_URL/api/v1/security/csrf_token/" > csrf_token.json
CSRF_TOKEN=$(jq -r '.result' csrf_token.json)

# Import dashboard using cookies
IMPORT_RESPONSE=$(curl -s -X POST "$SUPSERSET_URL/api/v1/dashboard/import/" \
  -b cookies.txt \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "X-CSRFToken: $CSRF_TOKEN" \
  -H "Accept: application/json" \
  -F "formData=@$ZIP_FILE_PATH" \
  -F "passwords= $PASSWORDS" \
  -F "ssh_tunnel_passwords={}" \
  -F "ssh_tunnel_private_keys={}" \
  -F "ssh_tunnel_private_key_passwords={}" \
  -F "overwrite=true")

This approach ensures that session cookies are maintained across requests, which might resolve the redirection issue.

To continue talking to Dosu, mention @dosu.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Superset API IMPORT throw into Login Redirect page #30713

{{title}}

Replies: 1 comment

{{title}}

Select a reply

Superset API IMPORT throw into Login Redirect page #30713

illaaa Oct 25, 2024

Replies: 1 comment

dosubot[bot] bot Oct 25, 2024

illaaa
Oct 25, 2024

dosubot[bot]
bot Oct 25, 2024