snapcraft doesn't refresh the macaroon
Metadata
Current evaluation
Merged snapcore/snapcraft PR #805 as commit 60b7ef044, adding discharge-macaroon refresh so expired credentials are renewed and authorization errors are reduced.
Resolution: closed resolved
Reason: The linked snapcore/snapcraft PR #805 was merged as commit 60b7ef044, titled “Refresh discharge macaroon if necessary,” directly implementing the requested refresh behavior.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This was left as a todo when we implemented the macaroons.
If snapcraft refreshes the macaroon, we will get less authorization errors.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged snapcore/snapcraft PR #805 as commit 60b7ef044, adding discharge-macaroon refresh so expired credentials are renewed and authorization errors are reduced. | |
| stealth/space-bunny-alpha | — | closed resolved | Snapcraft gained automatic refresh of expired SSO discharge macaroons, reducing authorization errors; the fix merged via snapcore/snapcraft#805 (commit 60b7ef044). | |
| stealth/space-bunny-alpha | — | closed resolved | Snapcraft now refreshes an SSO discharge macaroon when needed, fixing authorization failures via merged snapcraft#805 (commit 60b7ef044). | |
| stealth/space-bunny-alpha | — | closed resolved | Macaroon refresh was added in canonical/snapcraft#805, commit 60b7ef044, refreshing the SSO discharge when the Store requests renewal. | |
| qwen/qwen3.6-35b-a3b | — | — | Abandoned due to inactivity. The macaroon refresh feature was never implemented, and no resolution or merge was applied. | |
| qwen/qwen3.6-35b-a3b | — | — | Snapcraft macaroon refresh to reduce authorization errors was closed without implementation. The request was abandoned with no resolution or follow-up provided. | |
| qwen/qwen3.6-35b-a3b | — | — | Abandoned. The macaroon refresh feature remains unimplemented, leaving snapcraft prone to authorization errors. No comments or resolution details were provided. |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Likely Fixed By:
snapcore/snapcraft#805
(confidence 100%)
The issue links this PR, and its merged commit 60b7ef044 refreshes the discharge macaroon when necessary.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #805 Refresh discharge macaroon if necessary | snapcraft | merged | Merged in snapcraft#805 (60b7ef044), refreshing the SSO discharge macaroon when WWW-Authenticate returns needs_refresh=1; addresses LP #1621171. | |
| #212 fix: update discharge macaroons | craft-store | merged | Merged craft-store#212 as f2cd40d, updating discharge macaroons for Pydantic 2 alias behavior and fixing Snapcraft credential refresh (#5048). | |
| #5048 Snapcraft 8.4 fails to refresh credentials | snapcraft | closed | Credential refresh was fixed in canonical/craft-store#212 (commit f2cd40d) by correcting a Pydantic 2 model_copy() alias regression affecting refreshed macaroons. | |
| #1586910 The communication with the servers is not authenticated with macaroons | snapcraft (launchpad) | closed | Snapcraft switched store communication from OAuth to macaroon auth. Fixed by merged PR canonical/snapcraft#532 (commit f1a678a07), released in snapcraft 2.10+16.10 and verified/fixed in 2.10.1; LP bug marked verification-done. | |
| #4226 snapcraft export-login ignores expires parameter | snapcraft | closed | Closed as stale without a Snapcraft fix. Maintainers attributed the short-lived macaroon to store-side refresh handling and later asked reporters to open a new ticket if the problem persisted. | |
| #532 Add macaroon support to login, upload and download. | snapcraft | merged | Merged PR #532 (commit f1a678a07) added macaroon authentication to snapcraft's login, upload and download commands, closing Launchpad bug LP #1586910; shipped in snapcraft 2.10/2.10.1. |