UI white screen on UI need restart Core

[priprd]

Expected behavior and actual behavior:
Harbor Core stop working when User push Docker Image, without permissions to project.
These only on via docker cli from local computer.
When this same user push docker image via podman cli.
Steps to reproduce the problem:
User without permission to project try push via docker cli ( v27) to harbor new docker image to project.

Versions:
Habor:

• harbor version: v2.10.2-1a741cb7
  Client:
• docker cli version: 27

Additional context:
User logen via token from UI. Users has OIDC group to allow projects. OIDC has Entra backend.

Logs are empty :(

[Vad1mo]

I don't understand the question, can you elaborate more in detail and precision?

• A clear and specific title summarizing the key issue
• A detailed description of the problem at hand and the steps that were taken to reproduce the bug
• The expected outcome vs the actual outcome during testing
• Screenshots, videos and logs, which make the bug report easier to understand
• The severity of the issue i.e., how bad is it and how soon should it be fixed?
• Software details such as the operating system or browser version on which the bug was found

[wy65701436]

can you share the core.log?

[priprd]

Hi logs:
2025-01-10 15:25:38.391 _p=F log="2025-01-10T14:25:38Z [INFO] [/core/main.go:116]: all shutdown jobs done" stream=stdout 2025-01-10 15:25:38.391 _p=F log="2025-01-10T14:25:38Z [INFO] [/core/main.go:111]: Goroutines exited normally" stream=stdout 2025-01-10 15:25:38.391 _p=F log="2025-01-10T14:25:38Z [INFO] [/controller/registry/controller.go:252]: Stop registry health checker" stream=stdout 2025-01-10 15:25:38.391 _p=F log="2025-01-10T14:25:38Z [INFO] [/core/main.go:103]: capture system signal terminated, to close \"closing\" channel" stream=stdout 2025-01-10 15:24:02.249 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:394]: Unable to get groups from claims, claims: map[email:<redacted> family_name:<redacted> given_name:Kryštof name:Kryštof <redacted> picture:https://graph.microsoft.com/v1.0/me/photo/$value sub:<redacted>], groups claims key: groups" stream=stdout 2025-01-10 15:24:02.239 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:394]: Unable to get groups from claims, claims: map[email:<redacted> family_name:<redacted> given_name:Kryštof name:Kryštof <redacted> picture:https://graph.microsoft.com/v1.0/me/photo/$value sub:<redacted>], groups claims key: groups" stream=stdout 2025-01-10 15:24:02.239 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:394]: Unable to get groups from claims, claims: map[email:<redacted> family_name:<redacted> given_name:Kryštof name:Kryštof <redacted> picture:https://graph.microsoft.com/v1.0/me/photo/$value sub:<redacted>], groups claims key: groups" stream=stdout 2025-01-10 15:24:02.103 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:394]: Unable to get groups from claims, claims: map[email:<redacted> family_name:<redacted> given_name:Kryštof name:Kryštof <redacted> picture:https://graph.microsoft.com/v1.0/me/photo/$value sub:<redacted>], groups claims key: groups" stream=stdout 2025-01-10 15:24:02.092 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:394]: Unable to get groups from claims, claims: map[email:<redacted> family_name:<redacted> given_name:Kryštof name:Kryštof <redacted> picture:https://graph.microsoft.com/v1.0/me/photo/$value sub:<redacted>], groups claims key: groups" stream=stdout 2025-01-10 15:24:02.091 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:394]: Unable to get groups from claims, claims: map[email:<redacted> family_name:<redacted> given_name:Kryštof name:Kryštof <redacted> picture:https://graph.microsoft.com/v1.0/me/photo/$value sub:<redacted>], groups claims key: groups" stream=stdout 2025-01-10 15:24:02.087 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:394]: Unable to get groups from claims, claims: map[email:<redacted> family_name:<redacted> given_name:Kryštof name:Kryštof <redacted> picture:https://graph.microsoft.com/v1.0/me/photo/$value sub:<redacted>], groups claims key: groups" stream=stdout 2025-01-10 15:24:02.083 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:394]: Unable to get groups from claims, claims: map[email:<redacted> family_name:<redacted> given_name:Kryštof name:Kryštof <redacted> picture:https://graph.microsoft.com/v1.0/me/photo/$value sub:<redacted>], groups claims key: groups" stream=stdout 2025-01-10 15:24:02.075 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:394]: Unable to get groups from claims, claims: map[email:<redacted> family_name:<redacted> given_name:Kryštof name:Kryštof <redacted> picture:https://graph.microsoft.com/v1.0/me/photo/$value sub:<redacted>], groups claims key: groups" stream=stdout 2025-01-10 15:24:02.075 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:394]: Unable to get groups from claims, claims: map[email:<redacted> family_name:<redacted> given_name:Kryštof name:Kryštof <redacted> picture:https://graph.microsoft.com/v1.0/me/photo/$value sub:<redacted>], groups claims key: groups" stream=stdout 2025-01-10 15:24:02.055 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:367]: OIDC. Failed to recover Username from claim. Claim 'name' is invalid or not a string" stream=stdout 2025-01-10 15:24:02.040 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:367]: OIDC. Failed to recover Username from claim. Claim 'name' is invalid or not a string" stream=stdout 2025-01-10 15:24:02.039 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:367]: OIDC. Failed to recover Username from claim. Claim 'name' is invalid or not a string" stream=stdout 2025-01-10 15:24:02.037 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:367]: OIDC. Failed to recover Username from claim. Claim 'name' is invalid or not a string" stream=stdout 2025-01-10 15:24:02.034 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:367]: OIDC. Failed to recover Username from claim. Claim 'name' is invalid or not a string" stream=stdout 2025-01-10 15:24:02.034 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:367]: OIDC. Failed to recover Username from claim. Claim 'name' is invalid or not a string" stream=stdout 2025-01-10 15:24:02.032 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:367]: OIDC. Failed to recover Username from claim. Claim 'name' is invalid or not a string" stream=stdout 2025-01-10 15:24:02.026 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:367]: OIDC. Failed to recover Username from claim. Claim 'name' is invalid or not a string" stream=stdout 2025-01-10 15:24:02.021 _p=F log="2025-01-10T14:24:02Z [WARNING] [/pkg/oidc/helper.go:367]: OIDC. Failed to recover Username from claim. Claim 'name' is invalid or not a string" stream=stdout 2025-01-10 15:24:01.966 _p=F log="2025-01-10T14:24:01Z [WARNING] [/pkg/oidc/helper.go:367]: OIDC. Failed to recover Username from claim. Claim 'name' is invalid or not a string" stream=stdout 2025-01-10 15:24:01.687 _p=F log="2025-01-10T14:24:01Z [WARNING] [/pkg/oidc/helper.go:394]: Unable to get groups from claims, claims: map[email:<redacted> family_name:<redacted> given_name:Kryštof name:Kryštof <redacted> picture:https://graph.microsoft.com/v1.0/me/photo/$value sub:<redacted>], groups claims key: groups" stream=stdout 2025-01-10 15:24:01.632 _p=F log="2025-01-10T14:24:01Z [WARNING] [/pkg/oidc/helper.go:367]: OIDC. Failed to recover Username from claim. Claim 'name' is invalid or not a string" stream=stdout 2025-01-10 15:23:39.123 _p=F log="2025-01-10T14:23:39Z [WARNING] [/pkg/oidc/helper.go:394]: Unable to get groups from claims, claims: map[email:[email protected] family_name:Bitter given_name:Zdenek name:Zdenek Bitter picture:https://graph.microsoft.com/v1.0/me/photo/$value sub:AWGxxOCHqNtb6CzoqRNkNGxW3DQzr9c1SQ3zJkD9xFw], groups claims key: groups" stream=stdout 2025-01-10 15:23:38.990 _p=F log="2025-01-10T14:23:38Z [WARNING] [/pkg/oidc/helper.go:367]: OIDC. Failed to recover Username from claim. Claim 'name' is invalid or not a string" stream=stdout 2025-01-10 15:23:23.260 _p=F log="2025-01-10T14:23:23Z [ERROR] [/core/controllers/oidc.go:118]: Failed to exchange token, error: oauth2: \"invalid_grant\" \"AADSTS54005: OAuth2 Authorization code was already redeemed, please retry with a new valid code or use an existing refresh token. Trace ID: 2b2f071c-34b7-4772-b119-daf086a02a00 Correlation ID: 65a15c23-50f1-4d7e-b1bd-cb9cc0e3503e Timestamp: 2025-01-10 14:23:23Z\"" stream=stdout 2025-01-10 15:23:18.067 _p=F log="2025-01-10T14:23:18Z [INFO] [/server/middleware/security/robot.go:71][requestID=\"bae98dbdeb0040ce4e7ac23b3b046bef\"]: a robot security context generated for request GET /service/token" stream=stdout 2025-01-10 15:23:17.948 _p=F log="2025-01-10T14:23:17Z [INFO] [/server/middleware/security/robot.go:71][requestID=\"5426e3dda82ee4c267a6f111bb1adecc\"]: a robot security context generated for request GET /api/version" stream=stdout 2025-01-10 15:22:54.740 _p=F log="2025-01-10T14:22:54Z [INFO] [/server/middleware/security/robot.go:71][requestID=\"d946e13db39cf8feac40bb0e14f2efb9\"]: a robot security context generated for request GET /service/token" stream=stdout 2025-01-10 15:22:53.836 _p=F log="2025-01-10T14:22:53Z [INFO] [/server/middleware/security/robot.go:71][requestID=\"ea09e824d35e7f6d0e64af076ef4273f\"]: a robot security context generated for request GET /service/token" stream=stdout 2025-01-10 15:22:44.606 _p=F log="2025-01-10T14:22:44Z [INFO] [/server/middleware/security/robot.go:71][requestID=\"ec03403764ec36a76b90b2a8674e5f44\"]: a robot security context generated for request GET /service/token" stream=stdout 2025-01-10 15:20:45.644 _p=F log="2025-01-10T14:20:45Z [INFO] [/server/middleware/security/robot.go:71][requestID=\"c132fa8e420f2ce4c51cdbce8d67b038\"]: a robot security context generated for request GET /service/token" stream=stdout 2025-01-10 15:18:37.123 _p=F log="2025-01-10T14:18:37Z [INFO] [/controller/registry/controller.go:222]: Start regular health check for registries with interval 5m0s" stream=stdout 2025-01-10 15:18:18.050 _p=F log="2025-01-10T14:18:18Z [INFO] [/server/middleware/security/robot.go:71][requestID=\"192a8cbf8197350dcca80f3e4e7104c6\"]: a robot security context generated for request GET /service/token" stream=stdout 2025-01-10 15:18:17.940 _p=F log="2025-01-10T14:18:17Z [INFO] [/server/middleware/security/robot.go:71][requestID=\"688454683b718841f2eafd209d6fa36f\"]: a robot security context generated for request GET /api/version" stream=stdout 2025-01-10 15:17:47.804 _p=F log="2025-01-10T14:17:47Z [INFO] [/server/middleware/security/robot.go:71][requestID=\"817ead203b2c02706937da2556d5d06d\"]: a robot security context generated for request GET /service/token" stream=stdout 2025-01-10 15:17:47.700 _p=F log="2025-01-10T14:17:47Z [INFO] [/server/middleware/security/robot.go:71][requestID=\"ec3f5afb6c5a7a98695d6d85932dadeb\"]: a robot security context generated for request GET /service/token" stream=stdout 2025-01-10 15:17:42.580 _p=F log="2025-01-10T14:17:42Z [INFO] [/server/middleware/security/robot.go:71][requestID=\"b8f02ddc70341d8e9539d69b05124e59\"]: a robot security context generated for request GET /service/token" stream=stdout 2025-01-10 15:16:10.363 _p=F log="2025-01-10T14:16:10Z [INFO] [/pkg/task/dao/execution.go:512]: refresh outdate execution status done, 1 succeed, 0 failed" stream=stdout 2025-01-10 15:16:10.315 _p=F log="2025-01-10T14:16:10Z [INFO] [/pkg/task/dao/execution.go:471]: scanned out 1 executions with outdate status, refresh status to db" stream=stdout 2025-01-10 15:15:54.588 _p=F log="2025-01-10T14:15:54Z [INFO] [/controller/gc/callback.go:72]: received garbage collection task status update event: task-2344094, status-Running" stream=stdout 2025-01-10 15:15:36.816 _p=F log="2025-01-10T14:15:36Z [INFO] [/server/middleware/security/robot.go:71][requestID=\"d173e19341d1bec0a934551b35339a2b\"]: a robot security context generated for request GET /service/token" stream=stdout 2025-01-10 15:15:13.387 _p=F log="2025-01-10T14:15:13Z [WARNING] [/lib/cache/helper.go:66]: failed to save value to cache, error: context canceled" stream=stdout 2025-01-10 15:14:41.011 _p=F log="2025/01/10 14:14:41.011 [I] [server.go:281] http server Running on http://:8080" stream=stdout 2025-01-10 15:14:41.003 _p=F log="2025-01-10T14:14:41Z [INFO] [/pkg/oidc/fix.go:37]: Not found any records with empty subiss, good to go." stream=stdout 2025-01-10 15:14:40.991 _p=F log="2025-01-10T14:14:40Z [INFO] [/core/main.go:260]: Fix empty subiss for meta info data." stream=stdout 2025-01-10 15:14:40.991 _p=F log="2025-01-10T14:14:40Z [INFO] [/core/main.go:258]: Version: v2.10.2, Git commit: 1a741cb7" stream=stdout 2025-01-10 15:14:40.173 _p=F log="2025-01-10T14:14:40Z [INFO] [/pkg/notification/notification.go:77]: notification initialization completed" stream=stdout 2025-01-10 15:14:40.173 _p=F log="2025-01-10T14:14:40Z [INFO] [/core/main.go:239]: initializing notification..." stream=stdout 2025-01-10 15:14:40.173 _p=F log="2025-01-10T14:14:40Z [ERROR] [/pkg/audit/forward.go:44]: failed to create audit log, error dial tcp: missing address" stream=stdout 2025-01-10 15:14:40.173 _p=F log="2025-01-10T14:14:40Z [INFO] [/pkg/scan/init.go:79]: Skipped setting Trivy as the default scanner. The default scanner is already set to http://harbor-trivy:8080" stream=stdout 2025-01-10 15:14:40.163 _p=F log="2025-01-10T14:14:40Z [INFO] [/core/main.go:340]: Setting Trivy as default scanner" stream=stdout 2025-01-10 15:14:40.163 _p=F log="2025-01-10T14:14:40Z [INFO] [/pkg/scan/init.go:64]: Scanner registration already exists: http://harbor-trivy:8080" stream=stdout 2025-01-10 15:14:40.085 _p=F log="2025-01-10T14:14:40Z [INFO] [/core/main.go:318]: Registering Trivy scanner" stream=stdout 2025-01-10 15:14:40.083 _p=F log="2025-01-10T14:14:40Z [INFO] [/core/main.go:95]: User id: 1 already has its encrypted password." stream=stdout 2025-01-10 15:14:40.059 _p=F log="2025-01-10T14:14:40Z [INFO] [/lib/encrypt/encrypt.go:60]: the path of key used by key provider: /etc/core/key" stream=stdout 2025-01-10 15:14:40.039 _p=F log="2025-01-10T14:14:40Z [INFO] [/core/main.go:201]: The database has been migrated successfully" stream=stdout 2025-01-10 15:14:40.039 _p=F log="2025-01-10T14:14:40Z [INFO] [/common/dao/pgsql.go:138]: No change in schema, skip." stream=stdout 2025-01-10 15:14:39.995 _p=F log="2025-01-10T14:14:39Z [INFO] [/common/dao/pgsql.go:135]: Upgrading schema for pgsql ..." stream=stdout 2025-01-10 15:14:39.671 _p=F log="2025-01-10T14:14:39Z [INFO] [/common/dao/base.go:72]: Register database completed" stream=stdout 2025-01-10 15:14:39.548 _p=F log="2025-01-10T14:14:39Z [INFO] [/lib/metric/server.go:37]: Prometheus metric server running on port 8001" stream=stdout 2025-01-10 15:14:39.547 _p=F log="2025-01-10T14:14:39Z [INFO] [/common/dao/base.go:67]: Registering database: type-PostgreSQL <redacted>.eu-central-1.rds.amazonaws.com port-5432 database-harbor_registry sslmode-\"disable\"" stream=stdout 2025-01-10 15:14:39.547 _p=F log="2025-01-10T14:14:39Z [INFO] [/core/main.go:163]: configurations initialization completed" stream=stdout 2025-01-10 15:14:39.547 _p=F log="2025-01-10T14:14:39Z [INFO] [/lib/config/config.go:92]: init secret store" stream=stdout 2025-01-10 15:14:39.547 _p=F log="2025-01-10T14:14:39Z [INFO] [/lib/config/systemconfig.go:178]: key path: /etc/core/key" stream=stdout 2025-01-10 15:14:39.547 _p=F log="2025-01-10T14:14:39Z [INFO] [/core/main.go:161]: initializing configurations..." stream=stdout 2025-01-10 15:14:39.535 _p=F log="2025-01-10T14:14:39Z [INFO] [/core/main.go:142]: initializing cache ..." stream=stdout 2025-01-10 15:14:39.535 _p=F log="2025-01-10T14:14:39Z [INFO] [/core/controllers/base.go:159]: Config path: /etc/core/app.conf" stream=stdout 2025-01-10 15:14:39.534 _p=F log="2025-01-10T14:14:39Z [INFO] [/pkg/reg/adapter/harbor/adaper.go:31]: the factory for adapter harbor registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/pkg/reg/adapter/tencentcr/adapter.go:55]: the factory for adapter tencent-tcr registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/pkg/reg/adapter/quay/adapter.go:53]: the factory of Quay adapter was registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/pkg/reg/adapter/jfrog/adapter.go:42]: the factory of jfrog artifactory adapter was registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/pkg/reg/adapter/huawei/huawei_adapter.go:40]: the factory of Huawei adapter was registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/pkg/reg/adapter/googlegcr/adapter.go:37]: the factory for adapter google-gcr registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/pkg/reg/adapter/gitlab/adapter.go:33]: the factory for adapter gitlab registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/pkg/reg/adapter/githubcr/adapter.go:43]: the factory for adapter github-ghcr registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/pkg/reg/adapter/dtr/adapter.go:36]: the factory of dtr adapter was registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/pkg/reg/adapter/dockerhub/adapter.go:40]: Factory for adapter docker-hub registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/pkg/reg/adapter/azurecr/adapter.go:29]: Factory for adapter azure-acr registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/pkg/reg/adapter/awsecr/adapter.go:44]: the factory for adapter aws-ecr registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/pkg/reg/adapter/aliacr/adapter.go:44]: the factory for adapter ali-acr registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/pkg/reg/adapter/native/adapter.go:36]: the factory for adapter docker-registry registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/controller/artifact/processor/processor.go:59]: the processor to process media type application/vnd.wasm.config.v1+json registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/controller/artifact/processor/processor.go:59]: the processor to process media type application/vnd.docker.container.image.v1+json registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/controller/artifact/processor/processor.go:59]: the processor to process media type application/vnd.oci.image.config.v1+json registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/controller/artifact/processor/processor.go:59]: the processor to process media type application/vnd.docker.distribution.manifest.v1+prettyjws registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/controller/artifact/processor/processor.go:59]: the processor to process media type application/vnd.docker.distribution.manifest.list.v2+json registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/controller/artifact/processor/processor.go:59]: the processor to process media type application/vnd.oci.image.index.v1+json registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/controller/artifact/processor/processor.go:59]: the processor to process media type application/vnd.cnab.manifest.v1 registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/controller/artifact/processor/processor.go:59]: the processor to process media type application/vnd.cncf.helm.config.v1+json registered" stream=stdout 2025-01-10 15:14:39.533 _p=F log="2025-01-10T14:14:39Z [INFO] [/controller/artifact/annotation/parser.go:85]: the annotation parser to parser artifact annotation version v1alpha1 registered" stream=stdout 2025-01-10 15:14:39.385 _p=F log="2025/01/10 14:14:39.384 [D] init global config instance failed. If you do not use this, just ignore it. open conf/app.conf: no such file or directory" stream=stdout 2025-01-10 15:14:39.349 _p=F log="Internal tls trust CA appending is Done." stream=stdout 2025-01-10 15:14:39.348 _p=F log="find: '/etc/harbor/ssl': No such file or directory" stream=stderr 2025-01-10 15:14:39.334 _p=F log="Appending internal tls trust CA to ca-bundle ..." stream=stdout