Federation issue "Forbidden"

[MooCloud_Matt]

Hello,

we are using the federation option in rocketchat, but I was not able in cloudron to send messages with images to another server, also hosted with cloudron.

This is the error log, anyone has the same issue?

{
  "level":50,
  "time":"2022-01-28T08:56:39.208Z",
  "pid":1,
  "hostname":"XXXXXXXXXX",
  "name":"Federation",
  "section":"http",
  "msg":"[IGNORED] Error",
  "err":{
    "type":"Error",
    "message":"failed [400] {\"success\":false,\"error\":\"Forbidden [forbidden]\",\"errorType\":\"forbidden\"}",
    "stack":"Error: failed [400] {\"success\":false,\"error\":\"Forbidden [forbidden]\",\"errorType\":\"forbidden\"}\n at Object.exports.makeErrorByStatus (packages/http.js:177:10)\n at Request._callback (packages/http.js:141:24)\n at Request.self.callback (/app/code/bundle/programs/server/npm/node_modules/meteor/http/node_modules/request/request.js:185:22)\n at Request.emit (events.js:314:20)\n at Request.EventEmitter.emit (domain.js:483:12)\n at Request.<anonymous> (/app/code/bundle/programs/server/npm/node_modules/meteor/http/node_modules/request/request.js:1161:10)\n at Request.emit (events.js:314:20)\n at Request.EventEmitter.emit (domain.js:483:12)\n at IncomingMessage.<anonymous> (/app/code/bundle/programs/server/npm/node_modules/meteor/http/node_modules/request/request.js:1083:12)\n at Object.onceWrapper (events.js:420:28)\n at IncomingMessage.emit (events.js:326:22)\n at IncomingMessage.EventEmitter.emit (domain.js:483:12)\n at endReadableNT (_stream_readable.js:1241:12)\n at processTicksAndRejections (internal/process/task_queues.js:84:21)\n => awaited here:\n at Function.Promise.await (/app/code/bundle/programs/server/npm/node_modules/meteor/promise/node_modules/meteor-promise/promise_server.js:56:12)\n at app/federation/server/lib/http.js:42:9\n at /app/code/bundle/programs/server/npm/node_modules/meteor/promise/node_modules/meteor-promise/fiber_pool.js:43:40",
    "response":{
      "statusCode":400,
      "content":"{\"success\":false,\"error\":\"Forbidden [forbidden]\",\"errorType\":\"forbidden\"}",
      "headers":{
        "server":"nginx",
        "date":"Fri, 28 Jan 2022 08:56:39 GMT",
        "content-type":"application/json",
        "transfer-encoding":"chunked",
        "connection":"close",
        "x-frame-options":"sameorigin",
        "content-security-policy":"default-src 'self' ; connect-src *; font-src 'self' data:; frame-src *; img-src * data:; media-src * data:; script-src 'self' 'unsafe-eval' 'sha256-XXXXXXX=' ; style-src 'self' 'unsafe-inline'",
        "x-instance-id":"XXXXXX",
        "cache-control":"no-store",
        "pragma":"no-cache",
        "x-ratelimit-limit":"30",
        "x-ratelimit-remaining":"29",
        "x-ratelimit-reset":"1643360199877",
        "access-control-allow-origin":"*",
        "access-control-allow-headers":"Origin, X-Requested-With, Content-Type, Accept, X-User-Id, X-Auth-Token",
        "vary":"Accept-Encoding"
      },
      "data":{
        "success":false,
        "error":"Forbidden [forbidden]",
        "errorType":"forbidden"
      }
    }
  },
  "msg":"failed [400] {\"success\":false,\"error\":\"Forbidden [forbidden]\",\"errorType\":\"forbidden\"}"
}

[nebulon]

@moocloud_matt from the error it kinda sounds like some token or so needs to be exchanged, but I have never used the federation feature, have you managed to get this working outside a Cloudron app instance?

[MooCloud_Matt]

@nebulon
in one test, yes but I didn't deeply investigate it.

[nebulon]

So to update others here. It seems the federation in Rocket.Chat is still a work-in-progress showing a warning to not use in production systems. Also I hit a few rough edges while trying to set it up and I was also not succeeding. So I guess this needs to mature a bit more, but if anyone manages to set it up successfully, please update this thread.

[girish]

Out of curiosity, is the federation protocol based on matrix or does it federate only with other rocket.chat instances?

[MooCloud_Matt]

@girish
should be based on matrix.

[jdaviescoates]

@girish said in Federation issue "Forbidden":

does it federate only with other rocket.chat instances?

That's my impression

[MooCloud_Matt]

@jdaviescoates
by default yes, but there is an option to support IRC