Osu: Cloudflare is misconfigured for the registration and login APIs

Created on 18 Dec 2019 · 6Comments · Source: ppy/osu

Attempting to register gives me "Something happened... but we're not sure what.". Redirecting it to netcat listening locally did send me garbage.. I couldn't make that out. I'm running an unmodified release build on Linux.

I don't see any .log files anywhere but I did ~~reverse~~read the code enough to register manually, which did work. I've logged in on the site. But I cannot login in the game.

const x = new XMLHttpRequest();
x.open("POST", "https://osu.ppy.sh/users");
x.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
x.setRequestHeader("User-Agent", "osu!")
x.send("user[username]=USERNAME&user[user_email]=EMAIL_ADDRESS&user[password]=PASSWORD");

missing details online

Source

WildCryptoFox

All 6 comments

You "reverse the code" but couldn't find network.log? Please locate it in the osu! storage folder and include in your issue.

peppy on 18 Dec 2019

😄1

On Linux, logfiles can be located in ~/.local/share/osu/logs

jai-x on 18 Dec 2019

👍1

Thank you @jai-x. And yeah... my finding tools failed me .. heh.

Okay. With the network.log I can see Cloudflare is blocking both the /users and /oauth/token requests. Not routing the game through tor.. did allow me to login. But I did try this before for registering without success - but I cannot reproduce that failure now. shrugs

I wouldn't close this just yet; but it is now clear Cloudflare is the issue. Cloudflare has documentation on fixing this.

2019-12-18 15:40:09: ----------------------------------------------------------
2019-12-18 15:40:09: network Log for USERNAME (LogLevel: Verbose)
2019-12-18 15:40:09: osu 0.0.0.0
2019-12-18 15:40:09: Running on Unix 5.1.4.0, 2 cores
2019-12-18 15:40:09: ----------------------------------------------------------
2019-12-18 15:40:09: Request to https://osu.ppy.sh/users failed with System.Net.WebException: Forbidden.
2019-12-18 15:40:09: Response was: <!DOCTYPE html>
2019-12-18 15:40:09: <!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
2019-12-18 15:40:09: <!--[if IE 7]>    <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
2019-12-18 15:40:09: <!--[if IE 8]>    <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
2019-12-18 15:40:09: <!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]-->
2019-12-18 15:40:09: <head>
2019-12-18 15:40:09: <title>Attention Required! | Cloudflare</title>
2019-12-18 15:40:09: <meta name="captcha-bypass" id="captcha-bypass" />
2019-12-18 15:40:09: <meta charset="UTF-8" />
2019-12-18 15:40:09: <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
2019-12-18 15:40:09: <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" />
2019-12-18 15:40:09: <meta name="robots" content="noindex, nofollow" />
2019-12-18 15:40:09: <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1" />
2019-12-18 15:40:09: <link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" type="text/css" media="screen,projection" />
2019-12-18 15:40:09: <!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" type="text/css" media="screen,projection" /><![endif]-->
2019-12-18 15:40:09: <style type="text/css">
2019-12-18 15:40:09: (Response was trimmed)

WildCryptoFox on 18 Dec 2019

I forgot to note that when I did register, I registered over tor. So Cloudflare is just being inconsistent, which it frequently does.

WildCryptoFox on 18 Dec 2019

Since the primary issue is that Cloudflare is inconsistent when responding to TOR routed requests, I would say this issue is out of scope for fixing on the game client.

It may be more relevant to open an issue on the https://github.com/ppy/osu-web/ repository regarding TOR routed request support.

Alternatively, you may wait for (or help implement) support for routing game requests via proxy: https://github.com/ppy/osu-framework/issues/2871

jai-x on 18 Dec 2019

@jai-x Ah fair call. Migrating it over.

WildCryptoFox on 18 Dec 2019

👍1

Was this page helpful?

0 / 5 - 0 ratings