Netlify Identity Role based Access control not working

kylesloper · January 28, 2021, 5:21pm

Hmmm that’s weird… can’t say the same for me.

jonsully · January 28, 2021, 5:24pm

Hm I logged out and now can’t access /cockpit or /chat so… it sure seems like everything’s working! Can you log out on both domains then try the process from scratch on the .ga domain exclusively? You can go ahead and use my account, the password is just testing!

kylesloper · January 28, 2021, 5:30pm

Still no luck … I signed out on both domains, logged in with your account and nope nothing.

jonsully · January 28, 2021, 5:41pm

I know this probably isn’t the most useful, but I did go ahead and run through the ‘happy path’ on CLI and everything looks great

Requesting path without logging in (no cookie)

Logging in then requesting /chat, getting 200 with page content

So I guess I’d just recommend trying it again after dumping your browser cache? When you logout with Netlify Identity (click the logout button) it should clear everything, but I’m not sure why your particular local browser isn’t working for the moonface.ga site.

kylesloper · January 28, 2021, 5:47pm

Thank you for your help.
Yeahhh it is strange… by any chance could this have anything to do with my ISP, I’ve been battling with them over fluctuating speeds. Did you notice any slow loading of moonface?

Once again, I really appreciate your efforts.

jonsully · January 28, 2021, 5:59pm

Not a problem happy to help. I wonder if you may even want to try downloading a new (so that it’s TOTALLY fresh) browser to test again with. Opera or Brave or Firefox, etc.

Definitely not an ISP issue here but no, everything loaded as fast as I typically expect Netlify Sites to

jen · January 29, 2021, 4:53pm

Alright another idea! Can you go into your browser’s local storage and manually delete the nf_jwt cookies on both custom domain and Netlify url? Then try logging in again?

kylesloper · January 29, 2021, 5:16pm

Looks like a result!

RBAC working on both Netlify and custom domain!

Thank you so much @jen @jonsully, I’ll be sure to update this thread if the problem persists in the future.

jonsully · January 29, 2021, 5:28pm

Weird. Hitting the logout button should clear the gotrue.user local storage key/value

But hey, if it works it works! Glad to mark that off

kylesloper · January 29, 2021, 5:56pm

Actually something that might be important to note is that this time, I logged out using the logout button in Netlify CMS on the Edit page of /cockpit not through /login.

Could this perhaps have an effect?

jonsully · January 29, 2021, 7:22pm

I just walked through that case and didn’t see any issues Netlify CMS uses the same login widget under the hood so… when you click the logout button in the CMS it should run the same code. I didn’t find any lingering gotrue.user key in local storage after logging out via CMS.

Might have to chalk it up to oddities. There’s no real reason you should have a lingering gotrue.user local storage key after logout but if you did, that probably explains the issues you were having.