Convert Python REST API authentication script to curl command

Question

i've made successful authentication with the following python script to a REST API:

import requests, base64
import json

VendorId = "a"
VendorPassword = "b"
UserId = "c"
UserPassword = "d"
PropertyId = "e"
authurl = "https://url/api/auth"
usrPass = '' + VendorId + ":" + VendorPassword

b64Val = base64.b64encode(usrPass)
payload = { "UserId" : UserId, "UserPassword" : UserPassword, "PropertyId" : PropertyId}
r = requests.post(authurl, headers = {"Authorization":b64Val}, data = payload)

and i want to do it through curl (completely inexperienced). What i've figured out until now is the following:

curl -H "{'Authorization': 'abCdEfgHijKlmnop=='}" -X POST -v "https://url/api/auth" -d "batch={'PropertyId': 'e', 'UserId': 'c', 'UserPassword': 'd'}";

but i get the following 502 error from the REST API...

If i don't use a header i have the following error:

< X-SERVICENAME-Auth-Error: Missing vendor credentials in HTTP auth header

I just want an insight on what i'm missing here, does the header syntax is wrong, or maybe the curl arguments misplaced?

Thanks in advance for any idea/tutorial/advice!

Sabuj Hassan · Accepted Answer · 2014-04-18 06:30:03Z

1

Your header setting is wrong, it will be:

-H "Authorization: abCdEfgHijKlmnop=="

Also, if you have the authorization user:password then you can use:

-u user:password

answered Apr 18, 2014 at 6:30

Sabuj Hassan

39.7k14 gold badges83 silver badges88 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Lopofsky Over a year ago

Thank you for your correction! I actually get a 502 error with your suggestion and my previous curl command. The 403 error comes when i don't use the header, sorry for the misunderstanding! Also i can't use unencoded strings the api of the service declares it. I need to use base64 encoding.

digenishjkl · Accepted Answer · 2014-04-18 16:10:59Z

1

You already solved this in python and wrote a script that generates a successful request. I would definitely start from there. Since you only need a single request, comparing their outputs should suffice for a trivial protocol such as HTTP.

Try modifying the above scripts to make requests to 127.0.0.1 and some arbitrary ports as shown below. Adapt this to your preferred tools:

ncat --recv-only -l 8080 > desired &
ncat --recv-only -l 8081 > in_question &
python your_desired_auth_script.py 127.0.0.1 8080
curl 127.0.0.1:8081/api/auth "parameters not resulting in authorization..."
vimdiff desired in_question

Just modify your python script to accept host and port arguments or hardcode them. Don't forget the request path. If you don't instantly spot the mistake, reconstruct the exact request with curl while reading its documentation. After succeeding you can incrementally deviate until you find which difference causes it.

answered Apr 18, 2014 at 16:10

digenishjkl

1641 silver badge15 bronze badges

2 Comments

Lopofsky Over a year ago

Quite overkill methodology but still an interesting one, i'll try the "read curl's documentation" part :)

digenishjkl Over a year ago

I 'd call it an overkill only for more complex problems. For a single request, the diff output can orient you very fast. Know the difference the current result has from your goal.

Collectives™ on Stack Overflow

Convert Python REST API authentication script to curl command

2 Answers 2

1 Comment

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related