fails in 2025.1 HTTP 401

[r-cemper]

IRIS for UNIX (Ubuntu Server LTS for x86-64 Containers) 2025.1 (Build 223U) Tue Mar 11 2025 18:23:31 EDT

Installed with ZPM

[nikitaeverywhere]

Thanks for the report – please attach more evidence (any error messages? how to reproduce?)

[r-cemper]

I use Docker Desktop for Windows 11
Package: https://openexchange.intersystems.com/package/shvarov-persistent
NO webterminal in iris.script

%SYS>ZPM "list"
zpm 0.9.2 (DeveloperMode)
passwordless 1.0.5
%SYS>zpm "install webterminal"

[%SYS|webterminal] Reload START (/usr/irissys/mgr/.modules/%SYS/webterminal/4.9.6/)
[%SYS|webterminal] Reload SUCCESS
[webterminal] Module object refreshed.
[%SYS|webterminal] Validate START
[%SYS|webterminal] Validate SUCCESS
[%SYS|webterminal] Compile START
Installing WebTerminal application to %SYS
Creating WEB application "/terminal"...
WEB application "/terminal" is created.
Assigning role %DB_IRISSYS to a web application; resulting roles: :%DB_IRISSYS
Creating WEB application "/terminalsocket"...
WEB application "/terminalsocket" is created.
Mapping %WebTerminal package into all namespaces: %All
WebTerminal package successfully mapped into all namespaces.
[%SYS|webterminal] Compile SUCCESS
[%SYS|webterminal] Activate START
[%SYS|webterminal] Configure START
[%SYS|webterminal] Configure SUCCESS
[%SYS|webterminal] Activate SUCCESS
%SYS>h

SMP works OK
REST Setup looks fine

but http://localhost:52773/terminal/ replies with HTTP ERROR 401

Setting Unauthenticated to YES replies HTTP ERROR 403

FINALLY: granting %ALL to unauthenticated User makes it work.

Though this is kind of a Workaround for me
This affects ALL packages in OEX using Webterminal from Docker:

In fact: previous versions launched a %CSP.Login page for authentication
THIS is broken for whatever reason

Regards, Robert

[r-cemper]

I did a quick check:
Removing ZPM package "passwordless" didn't fix it.
It's more serious
my personal workaround (unauthenticated User) excluded the issue

[nikitaeverywhere]

Thanks for all the details and your report.

This affects ALL packages in OEX using Webterminal from Docker:

Can you name a few? (I'm not aware of any packages dependant on webterminal besides this)

On the topic, webterminal assigns %DB_IRISSYS role to a web application upon installation. I can't test it (not maintaining webterminal actively at the moment), but so far it was enough. It might be in your system there's a stricter RBAC? Hence the %ALL role solves it.

[r-cemper]

I have seen WebTerminal in various packages in past.
No other RBAC as the default intersystensdc distributions
Out of my 83 packages, I use it in at least 20.
Especially on the DEMO platform, where no other command line exists
And they used to work perfectly.

I could not test them all. Just a few I have at hand local,
https://openexchange.intersystems.com/package/ZPretty-upd
https://openexchange.intersystems.com/package/Row-Storage-vs--Columnar-in-IRIS-native
https://openexchange.intersystems.com/package/IRIS-internal-WebSocket-Client
Most of them used to have videos as well to proof working.

Just let me know if there is no fix expected in near future.
If not I'll just change to Dmitry's iTERM .
Which is also a good reason to review old code.

[r-cemper]

Additional observation:
I can run WebTerminal 4.9.5 fine on Caché (in Docker) IF I have a valid multi-user license
, but without it, it looks similar to IRIS community version.
I suspect something of those IRIS licenses or in SECURITY (wherever) was changed and causes the problem

[nikitaeverywhere]

Just let me know if there is no fix expected in near future.

I'm not actively maintaining this project at the moment. However, we're also in discussions with my manager from InterSystems about whether we can allocate some budget toward it – though currently, no resolution is expected (realistically feels like it's unlikely). I’ve long dreamed of combining Dmitry’s solution with this one into a new terminal app that supports open-source plugins etc. :)

For now, I’m happy to help release a new version if a fix is already known. The issue you reported seems to require a deeper dive. If you're able to identify the root cause (or if someone else can reproduce and confirm it), I’d be happy to help merge and publish the fix.

[r-cemper]

Hi,
I just detected that a function that used to work excellently 2 years ago
now breaks my code with <PROTECT>
it is ##class(%Net.DB.Iris).Function() used for Native API access
As I have seen some <PROTECT> also during my tests with Webterminal
I fear that this may have a common source.
BUT: ##class(%Net.DB.Iris).ClassMethodValue() works and a workaround for my case.
This was just COS. I still have to check for JS, Java, Py.

• • • maybe a starting point for you - - -