[OTDev] Problem with token

Thu Mar 17 17:03:16 CET 2011

Druzhilovsky wrote on 03/17/2011 04:58 PM:
> Dear Andreas and All,
>
> Could you tell me one thing. I use for authentication
>
> curl -i -d username=OTLogin -d password=OTPassword
> http://opensso.in-silico.ch/opensso/identity/authenticate?uri=service=openldap.
>
>
> And sometimes I receive such token
> token.id=AQIC5wM2LY4SfcxvtOkO8ZJhenmHC6yh0f1YJPwezyJoSe8=@AAJTSQACMDE=#
> <mailto:token.id=AQIC5wM2LY4SfcxvtOkO8ZJhenmHC6yh0f1YJPwezyJoSe8=@AAJTSQACMDE=#>
> but sometimes such token
> token.id=AQIC5wM2LY4Sfczz7TWZMlPJOvkdAtLVv+X7VlCr1k5Kyp4=@AAJTSQACMDE=#
> <mailto:token.id=AQIC5wM2LY4Sfczz7TWZMlPJOvkdAtLVv+X7VlCr1k5Kyp4=@AAJTSQACMDE=#>.
> The difference between these tokens is "+"

No, the difference is larger.

> But when I send request curl
> -X GET -H
> subjectid:AQIC5wM2LY4SfcxvtOkO8ZJhenmHC6yh0f1YJPwezyJoSe8=@AAJTSQACMDE=#
> http://195.178.207.160/OpenTox/MakeMNA7 I quietly receive MakeMNA RDF.
> But if I use token with "+" like:
>
> curl -X GET -H
> subjectid:AQIC5wM2LY4SfcxO2S4wUc1k40+HpaKzQEH67RU44gBcHug=@AAJTSQACMDE=#
> http://195.178.207.160/OpenTox/MakeMNA7
>
> I receive:
>
> html><head><title>Apache Tomcat/6.0.26 - Error
> report</title><style><!--H1 {font-family:Tahoma,Arial,sans-serif;color:w
>
> hite;background-color:#525D76;font-size:22px;} H2
> {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525
>
> D76;font-size:16px;} H3
> {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:14px;}
> BODY
>
> {font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;} B
> {font-family:Tahoma,Arial,sans-serif;color:w
>
> hite;background-color:#525D76;} P
> {font-family:Tahoma,Arial,sans-serif;background:white;color:black;font-size:12px;}A
> {c
>
> olor : black;}A.name {color : black;}HR {color : #525D76;}--></style>
> </head><body><h1>HTTP Status 401 - exception.name=
>
> com.sun.identity.idsvcs.TokenExpired Invalid session
> ID.AQIC5wM2LY4SfcxO2S4wUc1k40 HpaKzQEH67RU44gBcHug=@AAJTSQACMDE=#
>
> </h1><HR size="1" noshade="noshade"><p><b>type</b> Status
> report</p><p><b>message</b> <u>exception.name=com.sun.identity
>
> .idsvcs.TokenExpired Invalid session ID.AQIC5wM2LY4SfcxO2S4wUc1k40
> HpaKzQEH67RU44gBcHug=@AAJTSQACMDE=#
>
> </u></p><p><b>description</b> <u>This request requires HTTP
> authentication (exception.name=com.sun.identity.idsvcs.Token
>
> Expired Invalid session
> ID.AQIC5wM2LY4SfcxO2S4wUc1k40HpaKzQEH67RU44gBcHug=@AAJTSQACMDE=#
>
> ).</u></p><HR size="1" noshade="noshade"><h3>Apache
> Tomcat/6.0.26</h3></body></html
>
> I see Invalid session ID.AQIC5wM2LY4SfcxO2S4wUc1k40
> HpaKzQEH67RU44gBcHug=@AAJTSQACMDE=# but withoun “+”.
>
> What do you think? Why was this happening?

Please refer to the API (http://www.opentox.org/dev/apis/api-1.2/AA) to 
see how you must URI encode your token when talking to the AA service 
(general rule: when it is not in the header).

Best regards
Andreas