Integrating with service Made in Spain. 1) Dev SOAP service has expired cert, 2) it throws 500s, 3) web UI uses SHA1 intermediate cert. Joy.
-
This is getting better. Turns out the 500s were an authentication error. Because I'm not supposed to use my user/pw, but a *shared one*.
Then you call the "log-in" API, which doesn't take credentials. Then the actual *operation* API takes the real user/pw. WTF?
-
-
Though I haven't gotten that far yet, because now instead of 500s the server is throwing NullPointerExceptions at me.
-
That's all kinds of screwed up.
End of conversation
New conversation -
-
-
Working on something worse right now. First call "login" where you send user/pw, then call "checkLogin" where you get true/false. No token.
-
So if someone log, everyone is logged.
- Show replies
New conversation -
-
-
Two-phase login sounds like some sort of anti-CSRF mechanism. I seem to remember MediaWiki API doing the same.
-
This isn't two-phase login. It's just stupid enterprisy consultancy bullshit. Someone told them they needed "security"...
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.