AutoWeb token refresh contains body and query string

Discussion in 'AutoApps' started by sezuan, Feb 24, 2019.

  1. sezuan

    sezuan New Member

    Joined:
    Feb 24, 2019
    Messages:
    2
    Likes Received:
    0
    Hi,

    I'm configuring the sipgate v2 REST api. It appears that AutoWeb sends the payload as body and in the query string, too:

    POST /auth/realms/third-party/protocol/openid-connect/token?code=2881967d-5856-453d-a9af-142a8ef928ad.fbaf3f64-341c-4368-bb86-c06112de6263.d3006c12-8b30-4071-8442-1fda6ece3de8&grant_type=authorization_code&redirect_uri=https%3A%2F%2Fjoaoapps.com%2Fautoweb&client_secret=<snip>&client_id=1745719-0-66beeb6b-3745-11e9-8e4f-7900cfcc1bfc HTTP/1.1.
    Content-Type: application/x-www-form-urlencoded.
    User-Agent: Dalvik/2.1.0 (Linux; U; Android 9; ONEPLUS A6013 Build/PKQ1.180716.001).
    Host: login.sipgate.com.
    Connection: Keep-Alive.
    Accept-Encoding: gzip.
    Content-Length: 303.

    code=2881967d-5856-453d-a9af-142a8ef928ad.fbaf3f64-341c-4368-bb86-c06112de6263.d3006c12-8b30-4071-8442-1fda6ece3de8&grant_type=authorization_code&redirect_uri=https%3A%2F%2Fjoaoapps.com%2Fautoweb&client_secret=<snip>&client_id=1745719-0-66beeb6b-3745-11e9-8e4f-7900cfcc1bfc


    It turns out that the sipgate api gets confused. It returns "Missing form parameter: grant_type". When I remove the query string the requests succeeds.

    Is it possible to turn this off?

    Best regards,
    Matthias
     
  2. joaomgcd

    joaomgcd Administrator Staff Member

    Joined:
    Feb 3, 2015
    Messages:
    9,479
    Likes Received:
    806
    Just to clarify, that's still in the auth phase, correct?
     
  3. sezuan

    sezuan New Member

    Joined:
    Feb 24, 2019
    Messages:
    2
    Likes Received:
    0
    Exactly.
     

Share This Page