Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to configure the client_id in the testsuite #67

Open
christian-frei opened this issue Feb 17, 2025 · 4 comments
Open

How to configure the client_id in the testsuite #67

christian-frei opened this issue Feb 17, 2025 · 4 comments

Comments

@christian-frei
Copy link
Contributor

the gematik spec defines checks for the client_id in the HTTP request header.

on a missing or wrong client_id, the proxy shall reject the response with a status code 403

{
    "errcode": "M_FORBIDDEN",
    "error": "Keine Client ID im Header"
}

How can we configure the client_id in the testsuite?

For example, these checks fail with a 403

17:10:35.043 [main ] INFO  d.g.t.t.l.r.SerenityReportUtils - cURL   0: curl -v -H "Accept: */*" -H "Content-Type: application/json" -X GET "https://mst-one.ujumbe.io/.well-known/matrix/client" 
17:10:35.043 [main ] INFO  d.g.t.t.l.r.SerenityReportUtils - cURL   1: curl -v -H "Accept: */*" -H "Content-Type: application/json" -X GET "https://mst-one.ujumbe.io/_matrix/client/versions" 
@MidNight88
Copy link

Hi Christian,

thanks again for reaching out to us. I will talk to our testers and come back to you soon.

Best regards,
Julia

@MidNight88
Copy link

Hi Christian,

there is no Client-Id in Tim-Testsuite. The Client-Id is used in the Client -Server API from Matrix.
You should find more information about it in the TI-M-Specification and Matrix- Client -Server API.

Best regard,
Julia

@christian-frei
Copy link
Contributor Author

Hi Julia

Of course our client sends the correct client_id in the request header.
However, i debugged the testsuite and saw that the testsuite itself calls these endpoints:

curl -v -H "Accept: */*" -H "Content-Type: application/json" -X GET "https://mst-one.ujumbe.io/.well-known/matrix/client" 
curl -v -H "Accept: */*" -H "Content-Type: application/json" -X GET "https://mst-one.ujumbe.io/_matrix/client/versions" 

does this mean that these endpoints should be excluded from the proxy checks? if yes, can you please point me to the gematik spec that defines these exclusions?

@MidNight88
Copy link

Hi Christian,

it seems like you are trying to run Testcase 005 , is this correct? If your client is normaly able to connect to your homeserver ("https://mst-one.ujumbe.io") , this should work without any problems.

Best regards,
Julia

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants