403 Forbidden: BinderHub with JupyterHub OAuth

Binder BinderHub
1

Hi,
I finally managed to get Binder to authenticate users with JupyterHub OAuth today.
When I try to access binderhub.myorg.com, I get redirected to JupyterHub for login and afterwards back to BinderHub (also the log messages say that everything’s fine).
Now, when I build a repo, BinderHub fails to start the start the server.
Logs from Binder:

binder-75ff4fc498-kwqph binder [E 200327 11:54:52 builder:561] Retrying launch after error: HTTP 403: Forbidden
    binder-75ff4fc498-kwqph binder [E 200327 11:55:16 web:1792] Uncaught exception GET /build/git/http%3A%2F%2Fgit.trivago.trv%2Fscm%2Fmpops%2Fpublic-notebooks.git/master (10.1.10.56)
binder-75ff4fc498-kwqph binder     HTTPServerRequest(protocol='http', host='binderhub.ds.trv.cloud', method='GET', uri='/build/git/http%3A%2F%2Fgit.trivago.trv%2Fscm%2Fmpops%2Fpublic-notebooks.git/master', version='HTTP/1.1', remote_ip='10.1.10.56')
binder-75ff4fc498-kwqph binder     Traceback (most recent call last):
binder-75ff4fc498-kwqph binder       File "/usr/local/lib/python3.7/site-packages/tornado/web.py", line 1703, in _execute
binder-75ff4fc498-kwqph binder         result = await result
binder-75ff4fc498-kwqph binder       File "/usr/local/lib/python3.7/site-packages/binderhub/builder.py", line 430, in get
binder-75ff4fc498-kwqph binder         await self.launch(kube, provider)
binder-75ff4fc498-kwqph binder       File "/usr/local/lib/python3.7/site-packages/binderhub/builder.py", line 532, in launch
binder-75ff4fc498-kwqph binder         extra_args=extra_args)
binder-75ff4fc498-kwqph binder       File "/usr/local/lib/python3.7/site-packages/binderhub/launcher.py", line 177, in launch
binder-75ff4fc498-kwqph binder         user_data = await self.get_user_data(username)
binder-75ff4fc498-kwqph binder       File "/usr/local/lib/python3.7/site-packages/binderhub/launcher.py", line 114, in get_user_data
binder-75ff4fc498-kwqph binder         method='GET',
binder-75ff4fc498-kwqph binder       File "/usr/local/lib/python3.7/site-packages/binderhub/launcher.py", line 90, in api_request
binder-75ff4fc498-kwqph binder         return await AsyncHTTPClient().fetch(req)
binder-75ff4fc498-kwqph binder     tornado.httpclient.HTTPClientError: HTTP 403: Forbidden

Logs from JupyterHub:

hub-6d5d97b4b8-pn8rk hub [W 2020-03-27 11:55:16.609 JupyterHub log:174] 403 GET /hub/api/users/<USER> (binder@10.1.10.56) 17.14ms

Any clue, what’s happening here? Debug-Logging is on, but I cannot figure out, what’s going on here :thinking: Does BinderHub miss any permissions?

Thanks in advance for any help :slight_smile:

2

Okay, I fixed this one by setting admin: true in the binder service configuration in JupyterHub :+1: