starred/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2026-01-11 21:10:29 +01:00
Code Issues 273 Packages Projects Releases 10 Wiki Activity

API Requests Via Token WITH "Allowed IPs" Set Broken After Upgrade to 3.6.5 #8834

New Issue
Closed
opened 2025-12-29 20:41:51 +01:00 by adam · 1 comment
adam commented 2025-12-29 20:41:51 +01:00
Owner
Copy Link

Originally created by @bnerickson on GitHub (Nov 10, 2023).

Originally assigned to: @abhi1693 on GitHub.

NetBox version

v3.6.5

Python version

3.9

Steps to Reproduce

Unless otherwise noted, leave everything else default:

  1. Create a permission with "can view" selected and select every object type.
  2. Create a user with a password and the newly created permission assigned.
  3. Create an API token assigned to the new user with "Allowed IPs" set to ::/0,0.0.0.0/0 to allow all.
  4. Perform an API get request using the new token (should fail).
  5. Remove the "Allowed IPs" setting on the API token and retry the request (should succeed).

Expected Behavior

Setting AllowedIPs should not throw a 500 Internal Server Error.

Observed Behavior

500: Internal Server Error is raised. Setting debug logging for django and netbox yield the following:

2023-11-10 18:01:57,367 netbox.config DEBUG: No previous configuration found in database; proceeding with default values
2023-11-10 18:01:57,368 netbox.config DEBUG: Initialized configuration
2023-11-10 18:01:57,402 netbox.config DEBUG: Cleared configuration
2023-11-10 18:01:57,402 django.request ERROR: Internal Server Error: /api/ipam/vlans/
Originally created by @bnerickson on GitHub (Nov 10, 2023). Originally assigned to: @abhi1693 on GitHub. ### NetBox version v3.6.5 ### Python version 3.9 ### Steps to Reproduce Unless otherwise noted, leave everything else default: 1. Create a permission with "can view" selected and select every object type. 2. Create a user with a password and the newly created permission assigned. 3. Create an API token assigned to the new user with "Allowed IPs" set to `::/0,0.0.0.0/0` to allow all. 4. Perform an API get request using the new token (should fail). 5. Remove the "Allowed IPs" setting on the API token and retry the request (should succeed). ### Expected Behavior Setting AllowedIPs should not throw a 500 Internal Server Error. ### Observed Behavior 500: Internal Server Error is raised. Setting debug logging for django and netbox yield the following: ``` 2023-11-10 18:01:57,367 netbox.config DEBUG: No previous configuration found in database; proceeding with default values 2023-11-10 18:01:57,368 netbox.config DEBUG: Initialized configuration 2023-11-10 18:01:57,402 netbox.config DEBUG: Cleared configuration 2023-11-10 18:01:57,402 django.request ERROR: Internal Server Error: /api/ipam/vlans/ ```
adam added the type: bugstatus: acceptedseverity: medium labels 2025-12-29 20:41:51 +01:00
adam closed this issue 2025-12-29 20:41:52 +01:00
adam commented 2025-12-29 20:41:52 +01:00
Author
Owner
Copy Link

@tomryder-inspirenet commented on GitHub (Nov 12, 2023):

Observed a similar problem here, with IPv6 connections being denied (HTTP 403) for tokens with an ACL. I strongly suspect #14235 fixing #14085 is the culprit; it looks like it needs to be adjusted to handle parsing out the port for IPv6 connections.

@tomryder-inspirenet commented on GitHub (Nov 12, 2023): Observed a similar problem here, with IPv6 connections being denied (HTTP 403) for tokens with an ACL. I strongly suspect #14235 fixing #14085 is the culprit; it looks like it needs to be adjusted to handle parsing out the port for IPv6 connections.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
beta
breaking change
complexity: high
complexity: low
complexity: medium
needs milestone
netbox
pending closure
plugin candidate
pull-request
Mirrored from GitHub Pull Request
 severity: high
severity: low
severity: medium
status: accepted
status: backlog
status: blocked
status: duplicate
status: needs owner
status: needs triage
status: revisions needed
status: under review
topic: GraphQL
topic: Internationalization
topic: OpenAPI
topic: UI/UX
topic: cabling
topic: event rules
topic: htmx navigation
topic: industrialization
topic: migrations
topic: plugins
topic: scripts
topic: templating
topic: testing
type: bug
type: deprecation
type: documentation
type: feature
type: housekeeping
type: translation
No Label severity: medium status: accepted type: bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#8834
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?