trying to push with the wrong macaroon return non user-friendly error
Metadata
Current evaluation
Legacy enable-ci should explain macaroon permission 403s, but the command is absent from the current codebase and the report needs reassessment against today's authentication flow.
Suggested action: close stale
Reason: The reported reproduction depends on the legacy `snapcraft enable-ci` workflow, but a current-tree search finds no `enable-ci` command or `macaroon-permission-required` handling. Although the original response was valid and included a clear 403 payload, that CI macaroon workflow has been removed, so this report is no longer directly actionable.
Evaluated by: mr-cal-bot
Impact:
30
Quick Win:
9
Complexity:
45
Confidence:
80
Actionability:
55
Issue body
I used snapcraft enable-ci travis to get a macaroon for the bitcoin snap. I didn't know this macaroon was attenuated only to work with this snap, so I tried to use it to push also bitcoin-unlimited. It failed with a 403 error and the json returned from the store:
Pushing 'bitcoin-unlimited/bitcoin-unlimited_master_amd64.snap' to the store.
Received 403: '{"status": 403, "error_list": [{"message": "Permission is required: package_upload", "code": "macaroon-permission-required"}], "snap_id": "qXB7ybG8qAt0zbILzctSuWOKDUfjje8i", "title": "Macaroon missing required permission.", "permission": "package_upload", "type": "devportal:v1:macaroon-permission-required", "detail": "Permission is required: package_upload"}'
It should return a user-friendly error message instead.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha |
Impact:
30
Quick Win:
9
Complexity:
45
Confidence:
80
Actionability:
55
|
close stale | Legacy enable-ci should explain macaroon permission 403s, but the command is absent from the current codebase and the report needs reassessment against today's authentication flow. | |
| qwen/qwen3.6-35b-a3b |
Impact:
30
Quick Win:
19
Complexity:
20
Confidence:
70
Actionability:
80
|
keep open | Pushing with wrong macaroon returns raw JSON error instead of user-friendly message. Issue is open, labeled bitesize, with no maintainer comments. | |
| qwen/qwen3.8-27b |
Impact:
30
Quick Win:
22
Staleness:
92
Complexity:
25
Confidence:
55
Support Request:
10
|
needs triage | Snapcraft push with a macaroon attenuated to a different snap returns a raw 403 JSON blob instead of a user-friendly error. Opened by maintainer elopio ~9.4 years ago, zero comments, no labels beyond bitesize/store/ui, no recorded fix. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
98
Complexity:
15
Confidence:
90
Support Request:
5
|
close stale | Raw JSON 403 error returned when using an attenuated macaroon for a different snap instead of a user-friendly message. Issue is over 9 years old with no maintainer interaction. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
98
Complexity:
15
Confidence:
95
Support Request:
5
|
close stale | Report of raw JSON 403 error when using an attenuated macaroon for the wrong snap, requesting a user-friendly message. Issue has been inactive for over 9 years with no maintainer response. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
98
Complexity:
20
Confidence:
85
Support Request:
10
|
close stale | Reports raw JSON 403 error when using an attenuated macaroon for the wrong snap. Suggests implementing a user-friendly error message. No maintainer activity or comments in over 9 years. |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Related To:
snapcraft#1765
(confidence 75%)
Commit/PR 1765 refactored attenuated macaroon acquisition for the legacy store flow, but the available evidence does not show that it implemented the requested error message.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1834469 error messaging for invalid macaroon could be improved | snapcraft (launchpad) | open | Expired legacy credentials can still yield a raw macaroon error or block login; newer 401s are actionable, but the legacy path and upstream craft-store report remain unresolved. |