Integrating with service Made in Spain. 1) Dev SOAP service has expired cert, 2) it throws 500s, 3) web UI uses SHA1 intermediate cert. Joy.
-
... so they decided to use WS-security (it has security in the name!) with a hardcoded username and password, because SECURITY!!1!
All WS-Security with user/password auth does is stick the username/password in the message header.
-
-
Then they decided they needed sessions, so you "log in" but the only secret needed is an OID they assign. Which you pass to every req anyway
-
But then they wind up requiring the username/password used for humans to log in too... in the actual API that does stuff (not login).
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.