REST API – This token has no "digest" attribute

Hi guys,

I’m trying to get some info using REST Api. I followed all the steps from “How to use WSSE authentication“.

First point. I think this is outdated because it doesn’t accept username. Only the API KEY:php app/console oro:wsse:generate-header username

app/console oro:wsse:generate-header my_username [InvalidArgumentException] API key "my_username" does not exists

1 2 3

app/console oro:wsse:generate-header my_username   [InvalidArgumentException]         API key "my_username" does not exists

So, using the API Key:
crm-enterprise-application$ app/console oro:wsse:generate-header 20cb1b48abc8d305de31aeca2791d829d0b0a33a

To use WSSE authentication add following headers to the request:
Authorization: WSSE profile=”UsernameToken”
X-WSSE: UsernameToken Username=”my_username”, PasswordDigest=”HdUCOD9LeX+wDSx2hCRp3jv8oMo=”, Nonce=”ZTZlOGEzNDE0ZDI3YzY1ZA==”, Created=”2014-12-09T14:15:04-05:00″

crm-enterprise-application$
curl -i -H “Accept: application/json” -H ‘Authorization: WSSE profile=”UsernameToken”‘ -H ‘X-WSSE: UsernameToken Username=”my_username”, PasswordDigest=”HdUCOD9LeX+wDSx2hCRp3jv8oMo=”, Nonce=”ZTZlOGEzNDE0ZDI3YzY1ZA==”, Created=”2014-12-09T14:15:04-05:00″‘ http://oro-production.local/app_dev.php/api/rest/latest/users

HTTP/1.1 500 Internal Server Error
Date: Tue, 09 Dec 2014 19:15:29 GMT
Server: Apache/2.2.26 (Unix) mod_fastcgi/2.4.6 mod_wsgi/3.4 Python/2.7.6 PHP/5.5.14 mod_ssl/2.2.26 OpenSSL/0.9.8za DAV/2 mod_perl/2.0.8 Perl/v5.18.2
X-Powered-By: PHP/5.5.14
Cache-Control: no-cache
X-Debug-Token: f23608
Connection: close
Transfer-Encoding: chunked
Content-Type: application/json

{“status”:”error”,”status_code”:500,”status_text”:”Internal Server Error”,”current_content”:””,”message”:”This token has no \”digest\” attribute.“}

crm-enterprise-application$

Thanks!

My version:
Oro: 1.4.2/1.6.2

Topic

[Alexandr SmagaParticipant]

Hello @rbandeira !

Thanks for highlighting this! Doc is updated and waiting for review.
Did you have any customization around security level on your CRM instance ? I’ve just tried to get data through the API and it works for me.
Also I took a look to code and it seems that it should not generate wsse token if digest not found in header.

[RodolfoParticipant]

Hi @asmaga !

Thank you for your answer.

The problem here is the version of my EscapeWSSEAuthenticationBundle. My vendor folder has the Listener.php from the master branch and not from v1.1.0 as you show me. This version doesn’t have:

$token->setAttribute('digest', $wsseHeaderInfo['PasswordDigest']);

1	$token->setAttribute('digest', $wsseHeaderInfo['PasswordDigest']);

https://github.com/escapestudios/EscapeWSSEAuthenticationBundle/blob/master/Security/Http/Firewall/Listener.php

[RodolfoParticipant]

@asmaga
Do I have to change this line?

https://github.com/orocrm/platform/blob/1.4.2/composer.json#L52

[Alexandr SmagaParticipant]

Ah sorry!
Unfortunately changes in wsse bundle broke BC, it’s known issue and we already fix version of wsse on 1.0.2. Yes, please update it in you composer.

[RodolfoParticipant]

Thank you @asmaga !

Now it’s working fine here!

I just have one more question. Why in my default OroCRM installation I have two vendor folders with the escapestudios?

vendor/escapestudios/wsse-authentication-bundle vendor/oro/platform/vendor/escapestudios/wsse-authentication-bundle

1 2	vendor/escapestudios/wsse-authentication-bundle vendor/oro/platform/vendor/escapestudios/wsse-authentication-bundle

To make it working I had to change this composer: vendor/oro/platform/composer.json and then copy the folder: “vendor/oro/platform/escapestudios/wsse-authentication-bundle” to “vendor/escapestudions”.

[Alexandr SmagaParticipant]

It’s strange, because composer should download all dependencies for all packages in ROOT/vendor and it only reads composer file that placed in root folder. Did you run composer install twice in root and in vendor/oro/platform/ ?

[Author]

Replies