Undefined index _GLUED on test server

[zelitomas]

Stack trace:

1. Whoops\Exception\ErrorException->() /var/www/html/glued-skeleton/glued/Stor/Controllers/StorControllerApiV1.php:37
2. Whoops\Run->handleError() /var/www/html/glued-skeleton/glued/Stor/Controllers/StorControllerApiV1.php:37
3. Glued\Stor\Controllers\StorControllerApiV1->uploaderApiSave() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/Handlers/Strategies/RequestResponse.php:43
4. Slim\Handlers\Strategies\RequestResponse->__invoke() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/Routing/Route.php:384
5. Slim\Routing\Route->handle() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:81
6. Slim\MiddlewareDispatcher->handle() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:81
7. Slim\MiddlewareDispatcher->handle() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/Routing/Route.php:341
8. Slim\Routing\Route->run() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/Routing/RouteRunner.php:84
9. Slim\Routing\RouteRunner->handle() /var/www/html/glued-skeleton/vendor/slim/twig-view/src/TwigMiddleware.php:125
10. Slim\Views\TwigMiddleware->process() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:147
11. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:128$137->handle() /var/www/html/glued-skeleton/glued/Core/Middleware/TranslatorMiddleware.php:53
12. Glued\Core\Middleware\TranslatorMiddleware->process() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:209
13. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:167$138->handle() /var/www/html/glued-skeleton/glued/Core/Middleware/LocaleSessionMiddleware.php:26
14. Glued\Core\Middleware\LocaleSessionMiddleware->process() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:209
15. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:167$138->handle() /var/www/html/glued-skeleton/glued/Core/Middleware/Timer.php:15
16. Glued\Core\Middleware\Timer->process() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:209
17. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:167$138->handle() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/Middleware/BodyParsingMiddleware.php:68
18. Slim\Middleware\BodyParsingMiddleware->process() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:147
19. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:128$137->handle() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/Middleware/RoutingMiddleware.php:59
20. Slim\Middleware\RoutingMiddleware->process() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:147
21. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:128$137->handle() /var/www/html/glued-skeleton/vendor/middlewares/trailing-slash/src/TrailingSlash.php:57
22. Middlewares\TrailingSlash->process() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:147
23. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:128$137->handle() /var/www/html/glued-skeleton/glued/Core/Middleware/ValidationFormsMiddleware.php:26
24. Glued\Core\Middleware\ValidationFormsMiddleware->__invoke() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:209
25. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:167$138->handle() /var/www/html/glued-skeleton/glued/Core/Middleware/TwigFlashMiddleware.php:17
26. Glued\Core\Middleware\TwigFlashMiddleware->__invoke() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:313
27. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:294$139->handle() /var/www/html/glued-skeleton/vendor/middlewares/csp/src/Csp.php:53
28. Middlewares\Csp->process() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:147
29. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:128$137->handle() /var/www/html/glued-skeleton/glued/Core/Middleware/TwigCspMiddleware.php:28
30. Glued\Core\Middleware\TwigCspMiddleware->__invoke() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:313
31. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:294$139->handle() /var/www/html/glued-skeleton/vendor/tuupola/cors-middleware/src/CorsMiddleware.php:124
32. Tuupola\Middleware\CorsMiddleware->process() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:147
33. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:128$137->handle() /var/www/html/glued-skeleton/glued/Core/Middleware/HeadersMiddleware.php:24
34. Glued\Core\Middleware\HeadersMiddleware->process() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:147
35. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:128$137->handle() /var/www/html/glued-skeleton/glued/Core/Middleware/AuthorizationMiddleware.php:123
36. Glued\Core\Middleware\AuthorizationMiddleware->process() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:147
37. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:128$137->handle() /var/www/html/glued-skeleton/glued/Core/Middleware/SessionMiddleware.php:57
38. Glued\Core\Middleware\SessionMiddleware->process() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:147
39. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:128$137->handle() /var/www/html/glued-skeleton/vendor/tuupola/slim-jwt-auth/src/JwtAuthentication.php:178
40. Tuupola\Middleware\JwtAuthentication->process() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:147
41. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:128$137->handle() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/Middleware/MethodOverrideMiddleware.php:46
42. Slim\Middleware\MethodOverrideMiddleware->process() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:147
43. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:128$137->handle() /var/www/html/glued-skeleton/vendor/zeuxisoo/slim-whoops/src/Zeuxisoo/Whoops/Slim/WhoopsMiddleware.php:40
44. Zeuxisoo\Whoops\Slim\WhoopsMiddleware->process() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:147
45. class@anonymous/var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:128$137->handle() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/MiddlewareDispatcher.php:81
46. Slim\MiddlewareDispatcher->handle() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/App.php:215
47. Slim\App->handle() /var/www/html/glued-skeleton/vendor/slim/slim/Slim/App.php:199
48. Slim\App->run() /var/www/html/glued-skeleton/glued/bootstrap.php:33
49. require_once() /var/www/html/glued-skeleton/public/index.php:3

[killua-eu]

What uri produces this? $_GLUED is set by the auth middlewares and consumed onwards thougout glued. So this is some auth related issue. Obviously the problem falls to the uploaderApiSave() function in stor. What was the curl command?

[zelitomas]

Extracted from browser inspector:

Fetch:

fetch("https://japex01.vaizard.xyz/api/stor/v1/upload", {"credentials":"include","headers":{"authorization":"Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJpc3MiOiJqYXBleDAxLnZhaXphcmQueHl6IiwiaWF0IjoxNjEzMTI1NjE2LCJleHAiOjE2MTMxMjc0MTYsImp0aSI6IjYwMjY1N2YwZTg5MzIiLCJzdWIiOiJnbHVlZEB0b21hc3plbGluYS5jeiIsImdfdWlkIjozLCJnX2FpZCI6M30.EKkqDMyNtMo5vEHULd7ysHHJNCFuGmirWpkrevLhPe5xc-jSOJC-jiQpX99S85F8Oj14I94WuUUHwXto0M285A","content-type":"multipart/form-data; boundary=----WebKitFormBoundarylxK0analU1htLC2q","sec-fetch-dest":"empty"},"referrerPolicy":"no-referrer-when-downgrade","body":"------WebKitFormBoundarylxK0analU1htLC2q\r\nContent-Disposition: form-data; name=\"file[0]\"\r\n\r\nundefined\r\n------WebKitFormBoundarylxK0analU1htLC2q\r\nContent-Disposition: form-data; name=\"upload_type\"\r\n\r\ngeneral\r\n------WebKitFormBoundarylxK0analU1htLC2q\r\nContent-Disposition: form-data; name=\"actual_dir\"\r\n\r\nfin_costs/\r\n------WebKitFormBoundarylxK0analU1htLC2q--\r\n","method":"POST","mode":"cors"});

CURL:

curl 'https://japex01.vaizard.xyz/api/stor/v1/upload' -H 'authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJpc3MiOiJqYXBleDAxLnZhaXphcmQueHl6IiwiaWF0IjoxNjEzMTI1NjE2LCJleHAiOjE2MTMxMjc0MTYsImp0aSI6IjYwMjY1N2YwZTg5MzIiLCJzdWIiOiJnbHVlZEB0b21hc3plbGluYS5jeiIsImdfdWlkIjozLCJnX2FpZCI6M30.EKkqDMyNtMo5vEHULd7ysHHJNCFuGmirWpkrevLhPe5xc-jSOJC-jiQpX99S85F8Oj14I94WuUUHwXto0M285A' -H 'Origin: file://' -H 'Sec-Fetch-Dest: empty' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) ReactNativeDebugger/0.11.7 Chrome/80.0.3987.165 Electron/8.5.2 Safari/537.36' -H 'Content-Type: multipart/form-data; boundary=----WebKitFormBoundarylxK0analU1htLC2q' --data-binary $'------WebKitFormBoundarylxK0analU1htLC2q\r\nContent-Disposition: form-data; name="file[0]"\r\n\r\nundefined\r\n------WebKitFormBoundarylxK0analU1htLC2q\r\nContent-Disposition: form-data; name="upload_type"\r\n\r\ngeneral\r\n------WebKitFormBoundarylxK0analU1htLC2q\r\nContent-Disposition: form-data; name="actual_dir"\r\n\r\nfin_costs/\r\n------WebKitFormBoundarylxK0analU1htLC2q--\r\n' --compressed

[killua-eu]

Using your curl example yields

{"api":"stor\/upload","version":1,"response_ts":1613240298,"response_id":"602817ea76c55","status":"Internal server error","code":500,"data":[],"message":"Expected file(s), got none."}

no files were sent even if files were expected. I can't replicate a stack trace with the undefiend index. What exactly were you doing to achieve the undefined index?