Unauthorized in HTTPApi after updating to v10

Remoting SDK
1

Hi,

After updating to SDK 10 we just get unauthorized messages after trying to log in to HTTPApi. Is this a bug or some breaking change?

Thanks,

2

Hello

Could you provide more details (or, even better, a send testcase to support@)?

Regards

3

Hi,

Here is the Delphi call to a test .NET app that calls the LoginService like in the Delphi examples.

image
image1327×799 86.5 KB

When I compile on another VM with the previous version (Think it was 9) it works. On version 10 the login method is not called and results in a 401 error.

Thanks,

4

Unfortunately these code screenshots are not enough to diagnose the issue.

Please provide a testcase.

5

Hi,

check the HttpApi Authentication sample.
it demonstrates how to allow to execute loginService.login w/o requirement of session

6

Hi,

We need a session to store values upon login.

I have removed most services from the project and the client too. There is a .NET test app that connects to the server at localhost to show the problem.

Thanks

7

Hi,

if you open your httpapi declaration in https://editor.swagger.io/ , you will see

untitled
untitled814×160 4.27 KB

it means that for executing this method, you should provide existing apiKey that should be present on server-side.

this behavior is incorrect.
check the HttpApi Authentication sample and add

procedure TServerDataModule.ROHttpApiSimpleAuthenticationManager1CanWriteMethodSecurity(
  aServiceName, aMethodName: string; var CanWrite: Boolean);
begin
  CanWrite := not((aServiceName = 'LoginService') and (aMethodName = 'Login'));
end;

after this,

untitled
untitled831×162 4.1 KB

and

>HttpApiTest.exe
Logged in: True

8

Thanks maybe that changed since the verion I have.