← Back to issue list

trying to push with the wrong macaroon return non user-friendly error

View original Launchpad issue

Metadata

Project
snapcraft (launchpad)
Number
#1674124
Type
issue
State
open
Author
~elopio
Labels
bitesize store ui
Created
Updated
Closed

Current evaluation

Snapcraft push with a macaroon attenuated to a different snap returns a raw 403 JSON blob instead of a user-friendly error. Opened by maintainer elopio ~9.4 years ago, zero comments, no labels beyond bitesize/store/ui, no recorded fix.

Suggested action: needs triage

Reason: No maintainer has ever responded, labelled, or assigned this (0 comments, 3452 days old), so it has never been triaged. The 'bitesize' label suggests it was once considered a small, well-scoped UX fix (map the store's macaroon-permission-required 403 to a friendly message), but there is no evidence it was ever implemented or that the raw-JSON push error path still exists in current snapcraft, so a human should verify before closing.

Impact: 30 Quick Win: 22.5 Staleness: 92 Complexity: 25 Confidence: 55 Support Request: 10

Issue body

I used snapcraft enable-ci travis to get a macaroon for the bitcoin snap. I didn't know this macaroon was attenuated only to work with this snap, so I tried to use it to push also bitcoin-unlimited. It failed with a 403 error and the json returned from the store: Pushing 'bitcoin-unlimited/bitcoin-unlimited_master_amd64.snap' to the store. Received 403: '{"status": 403, "error_list": [{"message": "Permission is required: package_upload", "code": "macaroon-permission-required"}], "snap_id": "qXB7ybG8qAt0zbILzctSuWOKDUfjje8i", "title": "Macaroon missing required permission.", "permission": "package_upload", "type": "devportal:v1:macaroon-permission-required", "detail": "Permission is required: package_upload"}' It should return a user-friendly error message instead.

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.8-27b
Impact: 30
Quick Win: 22.5
Staleness: 92
Complexity: 25
Confidence: 55
Support Request: 10
needs triage Snapcraft push with a macaroon attenuated to a different snap returns a raw 403 JSON blob instead of a user-friendly error. Opened by maintainer elopio ~9.4 years ago, zero comments, no labels beyond bitesize/store/ui, no recorded fix.
qwen/qwen3.6-35b-a3b
Staleness: 98
Complexity: 15
Confidence: 90
Support Request: 5
close stale Raw JSON 403 error returned when using an attenuated macaroon for a different snap instead of a user-friendly message. Issue is over 9 years old with no maintainer interaction.
qwen/qwen3.6-35b-a3b
Staleness: 98
Complexity: 15
Confidence: 95
Support Request: 5
close stale Report of raw JSON 403 error when using an attenuated macaroon for the wrong snap, requesting a user-friendly message. Issue has been inactive for over 9 years with no maintainer response.
qwen3.6-35b-a3b-mtp-q6
Staleness: 98
Complexity: 20
Confidence: 85
Support Request: 10
close stale Reports raw JSON 403 error when using an attenuated macaroon for the wrong snap. Suggests implementing a user-friendly error message. No maintainer activity or comments in over 9 years.
qwen3.6-35b-a3b-mtp-q6
Staleness: 100
Complexity: 10
Confidence: 95
Support Request: 0
close stale Replace raw JSON 403 error with a user-friendly message when pushing a snap using an attenuated or incorrect macaroon. Open, unassigned, and awaiting triage or implementation.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#1834469 error messaging for invalid macaroon could be improved snapcraft (launchpad) open Snapcraft shows a confusing 'missing a valid macaroon' error when the store macaroon expires; suggests guiding users to snapcraft login. 7 years old, no labels, no comments, no maintainer response. Related craft-store#97 tracks the same problem class.
75%
#1930592 Handle macaroon-authorization-required error response snapcraft (launchpad) open snapcraft whoami shows a generic 'Store Error: whoami failed.' instead of prompting re-authentication when credentials are missing/expired (401 macaroon-authorization-required). Open since 2021, zero comments, no maintainer activity or labels.
72%
#1745264 error message for expired macaroon is not helpful snapcraft (launchpad) closed Closed without discussion or a formal fix. The report highlighted an unhelpful 401 error for an expired Travis CI macaroon during snap uploads, likely resolved by updating credentials or abandoned.
70%