ODK Cental returns 500 if encrypted submission export is called multiple times with incorrect passphrase

[Thalie]

Thanks @Florian_May

@Florian_May

2. What app or server are you using and on what device and operating system? Include version numbers.
ODK Central versions - @Thalie?

DigitalOcean 4 GB Memory
client v1.1.2
server v1.1.0-7-ga33bc6f (not sure why not v1.1.1 as the other ODK Central instances I am using... as I thought I had done all required updates - I may have to check this into more details...)

@Florian_May

4. What steps can we take to reproduce the problem?
Thalie reports this behaviour from ruODK::submission_export being called with an incorrect passphrase against an encrypted form.

These are the unit tests for ruODK::submission_export with encrypted forms: https://github.com/ropensci/ruODK/blob/main/tests/testthat/test-submission_export.R#L104
I do not have tests with an incorrect passphrase which then crash the server.

I have just checked the query outside of ruODK and get
code 400.12 - Could not perform decryption. Double check your passphrase and your data and try again.

@Florian_May

What are the server logs at the time of the crashes?

I was not very precise when I said "crash", the web interface is still online, but you can no longer visualise content (e.g., projects), the backend becomes unresponsive, requests do not work any more, and the services need to be restarted.

The behaviour is not absolutely reproducible (I had to run the request 3-4 times to get the server unresponsive), so I would suspect timeout due to overwhelming memory resources? (sorry servers are really out of my field)