A FedWiki row action or API delete answers a failed database read as "Site not found" #310
Open
opened 2026-10-31 01:01:36 +00:00 by cgalo5758
·
0 comments
Labels
Clear labels
accessibility
area/billing
area/catalog
area/discourse
area/domains
area/entitlements
area/fedwiki
area/identity
area/integrations
area/licensing
area/member-ui
area/meta
area/operator-ui
area/ops
area/testing
duplicate
good-first-issue
invalid
privacy
security
upstream
wontfix
A barrier for people using assistive technology or a keyboard alone.
The Stripe mirror, checkout, subscriptions, invoices, fulfillment.
Products, prices, plan ladders, purchasability.
The Discourse integration.
The domains registry, claims, placements, the certificate ask.
Entitlement sets, rules, grants, pools, provisioning.
The Federated Wiki integration and farm sync.
Sign-in, sessions, persons, organizations, workspaces, roles.
The provider registry, outbox and webhooks in general.
Licenses, the contributor agreement, SPDX headers.
Member pages.
The repository itself, its contributing guide, CI, the tracker and the workflow.
Operator pages, forms, lists, the design system.
Deployment, configuration, migrations, workflows, instance settings.
The test stack, screens, lint, walkthroughs.
Closed because another issue already covers it.
Small, self-contained, and explained enough to be a first contribution.
Closed because it is not a ticket for this repository.
Touches what a person's data reveals.
Touches authentication, authorization, secrets or data exposure.
Waits on another repository or project before it can move.
Closed because it will not be done, with the reason in the last comment.
kind
bug
The software does something other than what it promises; closed when it again does what it promises.
kind
debt
Code, tests or tooling to clean up with nothing visible changing; closed when they are cleaner.
kind
design
A question to settle before work can be defined; closed when the decision is written down.
kind
docs
Documentation that is wrong or missing; closed when it says the right thing.
kind
enhancement
Something the software does not do yet; closed when it does.
priority
critical
Blocks the active milestone or harms members now.
priority
high
Next in line inside the active milestone.
priority
low
Inside the active milestone, when nothing else is left.
priority
medium
Inside the active milestone, after the high ones.
Milestone
No items
No Milestone
Projects
Clear projects
No projects
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: wiki-cafe/member-console#310
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
What happens
On the FedWiki sites list, the row actions (Archive, Restore, Keep active, Delete) first look up the site by its name. When that lookup fails because the database cannot answer, the member sees the line shown for a site that does not exist: "Site not found". The JSON API's delete (
DELETE /api/fedwiki/sites/{domain}) answers the same failure with 404 "Site not found". Neither logs the error.The API's 404 has a stated meaning: a delete sent without
instanceandgenerationis answered 404 once the site is gone, so a client that repeats its delete reads this 404 as "deleted" and stops.Both handlers already treat a failed lookup of the request itself, a few lines earlier, as an error and log it: "Couldn't update the site. Try again." on the list, 500 from the API.
What should happen
Only a missing row answers "Site not found". Any other error is logged and answered as the failed request lookup is: "Couldn't update the site. Try again." on the list, 500 "Failed to initiate site deletion" from the API. A site that belongs to another organization still answers "Site not found", so the answer does not reveal which names other organizations use.
Where
internal/integrations/fedwiki/web/site_actions.go(beginRowAction),internal/integrations/fedwiki/web/api.go(DeleteSite)Why it matters
During a database fault a member is told one of their own sites does not exist, an API client can stop retrying a delete that never started, and the log records nothing.
Related: #197, #207, #298.