@atripp Hi, have you tried to set anonymous user with view package only and setup a user with download package permissions and try to restore a package with a private authenticated feed using dotnet restore (NuGet.Config with credentials in clear text)? I don't have anything special in the setup. The error on dotnet restore is the typical unauthorised error as when you type a wrong password. My setup is traefik docker container -> proget core docker container in ubuntu Linux host.

It's relevant to mention as well that in all versions, including mono I still get the below error when doing NuGet package restores. Usually, it occurs with full restores without any package cached but I guess it shouldn't happen anyway. This is only with a single client doing a restore.

An error occurred processing a GET request to http://myproget.blabla.com/nuget/feed-nuget/v3/flatcontainer/microsoft.extensions.dependencyinjection/index.json: Timeout expired. The timeout period elapsed prior to obtaining a connection from the pool. This may have occurred because all pooled connections were in use and max pool size was reached.

URL: http://...../nuget/feed-nuget/v3/flatcontainer/system.runtime.interopservices/index.json
Referrer: (not set)
User: (unknown)
User Agent: NuGet .NET Core MSBuild Task/5.7.0 (Microsoft Windows 10.0.19041)
Stack trace: at System.Data.ProviderBase.DbConnectionFactory.TryGetConnection (System.Data.Common.DbConnection owningConnection, System.Threading.Tasks.TaskCompletionSource1[TResult] retry, System.Data.Common.DbConnectionOptions userOptions, System.Data.ProviderBase.DbConnectionInternal oldConnection, System.Data.ProviderBase.DbConnectionInternal& connection) [0x0024d] in <0864334e7e474248b37afca9b637daa9>:0 at System.Data.ProviderBase.DbConnectionInternal.TryOpenConnectionInternal (System.Data.Common.DbConnection outerConnection, System.Data.ProviderBase.DbConnectionFactory connectionFactory, System.Threading.Tasks.TaskCompletionSource1[TResult] retry, System.Data.Common.DbConnectionOptions userOptions) [0x00036] in <0864334e7e474248b37afca9b637daa9>:0
at System.Data.ProviderBase.DbConnectionClosed.TryOpenConnection (System.Data.Common.DbConnection outerConnection, System.Data.ProviderBase.DbConnectionFactory connectionFactory, System.Threading.Tasks.TaskCompletionSource1[TResult] retry, System.Data.Common.DbConnectionOptions userOptions) [0x00000] in <0864334e7e474248b37afca9b637daa9>:0 at System.Data.SqlClient.SqlConnection.TryOpen (System.Threading.Tasks.TaskCompletionSource1[TResult] retry) [0x0005d] in <0864334e7e474248b37afca9b637daa9>:0
at System.Data.SqlClient.SqlConnection.Open () [0x0003b] in <0864334e7e474248b37afca9b637daa9>:0
at Inedo.Data.SqlServerDatabaseContext.CreateConnection () [0x0006c] in <13a07e71a6964ed9849f50a505055a64>:0
at Inedo.Data.DatabaseContext.ExecuteInternal (System.String storedProcName, Inedo.Data.GenericDbParameter[] parameters) [0x00064] in <13a07e71a6964ed9849f50a505055a64>:0
at Inedo.Data.SqlServerDatabaseContext.ExecuteInternal (System.String storedProcName, Inedo.Data.GenericDbParameter[] parameters) [0x00005] in <13a07e71a6964ed9849f50a505055a64>:0
at Inedo.Data.DatabaseContext+<>c__DisplayClass29_01[TRow].<EnumerateTable>b__0 () [0x00000] in <13a07e71a6964ed9849f50a505055a64>:0 at Inedo.Data.StrongDataReader+<Read>d__111[TRow].MoveNext () [0x0003e] in <13a07e71a6964ed9849f50a505055a64>:0
at System.Linq.Enumerable.TryGetFirst[TSource] (System.Collections.Generic.IEnumerable1[T] source, System.Boolean& found) [0x00045] in <22384ee444974b39bb55b725de39c721>:0 at System.Linq.Enumerable.FirstOrDefault[TSource] (System.Collections.Generic.IEnumerable1[T] source) [0x00000] in <22384ee444974b39bb55b725de39c721>:0
at Inedo.ProGet.Data.DB+Context.Feeds_GetFeed (System.Nullable`1[T] Feed_Id, System.String Feed_Name) [0x0003d] in <9e25495e1bef4b848a026d26a04c0c9c>:0
at Inedo.ProGet.Feeds.Feed.GetFeed (System.String feedName, Inedo.ProGet.Data.DB+Context externalDbContext) [0x0000b] in <9e25495e1bef4b848a026d26a04c0c9c>:0
at Inedo.ProGet.WebApplication.FeedEndpoints.FeedEndpointHandler.GetHttpHandler (Inedo.Web.Handlers.GetHandlerParams args) [0x0017e] in <a8aace96ff954f2f8794684dd8c734d6>:0
at Inedo.Web.Handlers.DynamicHttpHandling.GetHandler (System.Web.HttpContext context, System.String requestType, System.String url, System.String pathTranslated) [0x0003b] in <13a07e71a6964ed9849f50a505055a64>:0
at Inedo.Web.InedoHttpModule.MapHandlerAndBeginRequestAsync (System.Web.HttpApplication app) [0x00029] in <13a07e71a6964ed9849f50a505055a64>:0
at Inedo.Web.InedoHttpModule.HandleBeginRequestInternalAsync (System.Web.HttpApplication app) [0x0000f] in <13a07e71a6964ed9849f50a505055a64>:0
at Inedo.Web.InedoHttpModule.ProcessBegin (System.Object sender, System.EventArgs e, System.AsyncCallback cb, System.Object extraData) [0x0000d] in <13a07e71a6964ed9849f50a505055a64>:0
at System.Web.HttpApplication+<RunHooks>d__217.MoveNext () [0x000a4] in <b4f0b153c02f4f0588d3f7549d75281b>:0
at System.Web.HttpApplication+<Pipeline>d__225.MoveNext () [0x0012c] in <b4f0b153c02f4f0588d3f7549d75281b>:0
at System.Web.HttpApplication.Tick () [0x00000] in <b4f0b153c02f4f0588d3f7549d75281b>:0

@atripp Hello atripp. Just to be clear, this occurs not only authenticating with docker but also with private NuGet authenticated feeds. I have just switched to progetmono and both private docker and NuGet feeds are authenticating correctly so the issue is related to the .NET Core release.

The setup is Traefik -> Proget -> SQL Server.
WebBaseUrl is set as it was in the previous version so should not be related either.

After upgrading docker 5.3.11 to 5.3.12 and fixing the case sensitive packages by renaming all packages/directories to lower case, everything seems to be working fine beside authentication. Both NuGet private feed authentication and docker login stopped working, however I can login from the proget UI.

Found the issue... Apparently, after the upgrade, any package needs to be in lower case, otherwise, it won't be found. That is actually a breaking change.

When upgrading from proget.inedo.com/productimages/inedo/proget:5.3.11 to proget.inedo.com/productimages/inedo/proget:5.3.12 or progetcore:5.3.11 and even the mono version, it doesn't find the NuGet packages on disk anymore and it throws the exception below, even though they are in the disk storage and the path specified in the feed is correct. Any idea what is the issue?

System.IO.FileNotFoundException: Unable to find the specified file.
at Inedo.ProGet.Extensions.FileSystems.CaseInsensitiveFileSystem.OpenFileAsync (System.String fileName, System.IO.FileMode mode, System.IO.FileAccess access, System.IO.FileShare share, System.Boolean requireRandomAccess) [0x0014f] in <9e25495e1bef4b848a026d26a04c0c9c>:0
at Inedo.ProGet.Feeds.NuGet.NuGetFeed.OpenLocalPackageAsync (System.String id, Inedo.ProGet.Feeds.NuGet.NuGetVersion version) [0x001bb] in <9e25495e1bef4b848a026d26a04c0c9c>:0
at Inedo.ProGet.WebApplication.FeedEndpoints.NuGet.NuGetApi+GetHandler.TransmitPackageAsync (System.Web.HttpContext context, Inedo.ProGet.Feeds.NuGet.INuGetPackage package, System.String packageFileName, System.Boolean includeSymbols, System.Boolean includeSource, System.Boolean includeSignature, Inedo.ProGet.Feeds.NuGet.NuGetFeed feed) [0x00070] in <a8aace96ff954f2f8794684dd8c734d6>:0
at Inedo.ProGet.WebApplication.FeedEndpoints.NuGet.NuGetApi+GetHandler.ProcessGetRequestAsync (System.Web.HttpContext context, Inedo.ProGet.WebApplication.FeedEndpoints.NuGet.NuGetApi+RequestData urlData, Inedo.ProGet.Feeds.NuGet.NuGetFeed feed) [0x00625] in <a8aace96ff954f2f8794684dd8c734d6>:0
at Inedo.ProGet.WebApplication.FeedEndpoints.NuGet.NuGetApi.ProcessRequestAsync (System.Web.HttpContext context, Inedo.ProGet.Feeds.NuGet.NuGetFeed feed, System.String relativeUrl) [0x00111] in <a8aace96ff954f2f8794684dd8c734d6>:0
at Inedo.ProGet.WebApplication.FeedEndpoints.FeedEndpointHandler+FeedRequestHandler.ProcessRequestAsync (System.Web.HttpContext context) [0x0018a] in <a8aace96ff954f2f8794684dd8c734d6>:0

@atripp I will try the progetcore when I manage to have some time but I can confirm the issue I reported was solved in proget v5.3.10. Thank you.

@rhessinger The issue was solved with v5.3.10 release. Thank you.

Thank you for the support. Looking forward for the fix.

Any feedback in regards to this issue? It looks related to the new localization feature added on v5.3.9

If I open any page like https://www.myinstance.com I get the exception.
If I open any other page like https://www.myinstance.com/feeds it works so it must be a problem with this v.5.3.9 version.

The exception above occurs in the home page but I saw other pages which also throws a similar exception like browsing package versions.
I have rolled back to v5.3.8.

Thank you and will be waiting for the release since its quite a security problem.

After I attempt an upgrade from the docker Linux container from v5.3.8 to v5.3.9 I am getting the following exception when loading the web UI.
In the docker container logs both for the SQL Server and Proget instance, everything seems to be working fine.

Any idea what might be the issue?

I have just bumped the version and did a docker-compose up.

Message: An error occurred in the web application: Object reference not set to an instance of an object
Stack trace: at Inedo.ProGet.WebApplication.RuntimeLocalizationDictionary.GetCurrent () [0x00006] in <2602fa8c19cc4155be9186cda413e6a1>:0
at Inedo.ProGet.WebApplication.RuntimeLocalizationDictionary.get_Current () [0x00000] in <2602fa8c19cc4155be9186cda413e6a1>:0
at Inedo.ProGet.WebApplication.LocalizationHelpers.GetValue (System.String key) [0x00000] in <2602fa8c19cc4155be9186cda413e6a1>:0
at Inedo.ProGet.WebApplication.Localization+RootPage+FeedsTable.get_Feeds () [0x00000] in <2602fa8c19cc4155be9186cda413e6a1>:0
at Inedo.ProGet.WebApplication.Pages.RootPage.CreateBottomPanels (Inedo.ProGet.Data.DB+Context db) [0x00243] in <2602fa8c19cc4155be9186cda413e6a1>:0
at Inedo.ProGet.WebApplication.Pages.RootPage.CreateChildControlsAsync () [0x00138] in <2602fa8c19cc4155be9186cda413e6a1>:0
at Inedo.ProGet.WebApplication.Pages.ProGetSimplePageBase.InitializeAsync () [0x0006c] in <2602fa8c19cc4155be9186cda413e6a1>:0
at Inedo.Web.PageFree.SimplePageBase.ExecutePageLifeCycleAsync () [0x0007c] in <8a0468ee94a94ef1b2bba97871f29990>:0
at Inedo.Web.PageFree.SimplePageBase.ProcessRequestAsync (System.Web.HttpContext context) [0x00080] in <8a0468ee94a94ef1b2bba97871f29990>:0
at System.Web.TaskAsyncResult.Wait (System.IAsyncResult result) [0x00032] in <b4f0b153c02f4f0588d3f7549d75281b>:0
at System.Web.HttpTaskAsyncHandler.System.Web.IHttpAsyncHandler.EndProcessRequest (System.IAsyncResult result) [0x00000] in <b4f0b153c02f4f0588d3f7549d75281b>:0
at Inedo.Web.Handlers.AsyncHandlerWrapper.EndProcessRequest (System.IAsyncResult result) [0x00000] in <8a0468ee94a94ef1b2bba97871f29990>:0
at System.Web.HttpApplication.async_handler_complete_cb (System.IAsyncResult ar) [0x00015] in <b4f0b153c02f4f0588d3f7549d75281b>:0

In the proget free version, in v5.8.3 (docker image), when an anonymous user has only ViewFeed permission, he can somehow still create feeds when he is not logged in. That does not make sense. Any idea why this behaviour ?

Any way I can allow the anonymous user to view feeds but not being able to create it.

If I go into proget.inedo.com I notice the correct behaviour. I am anonymous and if i try to create a feed it will redirect me to the login page.