Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Auth issues when using API key #1129

Closed
ljdelight opened this issue Jun 2, 2024 · 2 comments
Closed

Auth issues when using API key #1129

ljdelight opened this issue Jun 2, 2024 · 2 comments
Labels

Comments

@ljdelight
Copy link
Contributor

Requests using the API fail when using the apiKey for authN/Z. This was caused by the upgrade to Play 2.9 because the Play Application secret was also (and unknowingly) used on the backend's side for encrypting certain backend-private data.

An example API call using the apiKey header:

curl -H "apiKey:<TODO_APIKEY>" -X GET https://maproulette.org/api/v2/user/whoami | jq
@ljdelight ljdelight added the bug label Jun 2, 2024
@ljdelight
Copy link
Contributor Author

The resolution is described in #1128 : Play 2.9 introduced a change where its application key must be 32 bytes or longer, and this impacted MapRoulette's cryptography with its own internal items. It's easier to manage these separately, similar to how the OSM secrets are not used to encrypt data stored within MapRoulette.

@ljdelight
Copy link
Contributor Author

This was resolved in v4.5.1 and deployed. Closing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant