cvat-cli

[torsteinelv]

any reason why I get this error message with cvat-cli, self hosted cvat v2.48, cvat-cli 2.47.

If i enter incorrect passowrd I get error i get 400 bad request. so i know its not bad passord as said under.

Traceback (most recent call last):
  File "/home/torstein/cvat/venv/bin/cvat-cli", line 8, in <module>
    sys.exit(main())
             ^^^^^^
  File "/home/torstein/cvat/venv/lib/python3.12/site-packages/cvat_cli/__main__.py", line 35, in main
    with build_client(parsed_args, logger=logger) as client:
         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/torstein/cvat/venv/lib/python3.12/site-packages/cvat_cli/_internal/common.py", line 118, in build_client
    client.login(popattr(parsed_args, "auth")(client.api_client.configuration.host))
  File "/home/torstein/cvat/venv/lib/python3.12/site-packages/cvat_sdk/core/client.py", line 207, in login
    assert "sessionid" in self.api_client.cookies
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
AssertionError

[torsteinelv]

checked again with cvat cli 2.48 and cvat-sdk 2.48.

[zhiltsov-max]

Hi, could you check if the Set-Cookie response header is actually returned from the server? You can check it e.g. on the swagger page: http://localhost:8080/api/swagger/#/auth/auth_create_login. Some response headers will be stripped by swagger, so you'll need to check the full response in the browser devtools (key F12).

[torsteinelv]

Found this:
set-cookie: csrftoken=cookie; SameSite=Lax; Path=/; Max-Age=31449600; Expires=Thu, 29 Oct 2026 14:25:31 GMT

[torsteinelv]

No suggestions on what to check? I use NGINX Ingress Controller instead of Traefik, as shown in the documentation, if that matters.

[zhiltsov-max]

Hi, I assume something might filter out the cookie along the way from the server. If you're using NGINX as a proxy, please try to check its configuration for something like this: https://stackoverflow.com/questions/67548886/remove-specific-cookie-in-nginx-reverse-proxy.

[torsteinelv]

Found out that cloudflare proxy broke the cvat-cli. Works now