anticorruzione / npa

16 stars 6 forks source link

[Consip] - Scheda S3 - 401 Unauthorized #1530

Open cosmin1ursache opened 1 week ago

cosmin1ursache commented 1 week ago

**A seguito della trasmissione della scheda S3, riscontriamo errore 401 Unauthorized

Con la stessa utenza sono state effettuati due test di trasmissione della scheda S3 a partire dalla scheda di indizione AD4.**

di seguito log: GovWay-Message-ID=[e9d1f1bc-eb83-4df7-b4f2-17b7c4009260] GovWay-Transaction-ID=[9e6c3f5d-3219-11ef-bd08-0050568e9679]

2024-06-24 14:07:21,642 ERROR (AbstractAnacUnhandledIntegrationService.java:217) - [[ACTIVE] ExecuteThread: '10' for queue: 'weblogic.kernel.Default (self-tuning)']: RequestBody = {"idAppalto":"49f7e557-d443-4f26-be39-dd9c070641fa","scheda":{"codice":{"idTipologica":"codiceScheda","codice":"S3"},"versione":"1.0","body":{"type":"SchedaS3Type","anacForm":{"elencoIncarichi":[{"cig":"I001F2F334"}]}}}} - requestUrl = https://apigw-test.anticorruzione.it/modi/rest/ComunicaPostPubblicazione/v2/crea-scheda - headers = {Authorization=[Bearer eyJ0eXAiOiJhdCtqd3QiLCJhbGciOiJSUzI1NiIsInVzZSI6InNpZyIsImtpZCI6IjMyZDhhMzIxLTE1NjgtNDRmNS05NTU4LWE5MDcyZjUxOWQyZCJ9.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.c1PXVwmCKOvqB1gLyKMxd4xjQQDHM_Wdz1w1qWNpzBX4bbwnp1vDnGKYAQ5k40NDfDne6k1Me6_jwIC3jbV9jPxYUXVOMeRPSrsmr2yXXTjqz5JysFyTImY9BdhrFEUi3tze9QpMFGqgUxxpkJx3E336sNN9OVNNLqrz3hqZa6cbxtNrNapCytI1Tw39rHnOA99O6vOQBY3_TJXOARygG_5Bx1gebTSZZLM1qyhLSLmV7owFEdQZrGjHIsWj66VleJf2l0lHzPY-iKvRQAANpOq0aztkPGRTSEY-1yzftT_KL6Rz8Wx5FFyPy7851UM4uTv-mLkv9PgWDUKYUf5N9g], Agid-JWT-TrackingEvidence=[eyJraWQiOiJvbjJVTmFCbGxQSlhaZDV4amdPMXoxV2QyeFVRYUItRHFtRFhaZEFiUlRBIiwiYWxnIjoiUlMyNTYiLCJ0eXAiOiJKV1QifQ.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.YBORfEDB0vANHC8j80I7YO3Ms3HbgU6XFalJ01UX6HcM-SHqy0jn00kPKX6HhGrwOyDdOJ88Vyk97gLSFQpoBqGEvTGfZbQjD4etzZCvfpGyOXATl6c1J1CMB2amDWLc1x98v90m3UK6NZaD_lLvHLT2QFKeKpqgIbx2cDHO2S872dbsNQTALLnhrunLMeJBFGgZ6iVH4wvoBGZGY9rHyjAloc6te7dG26ks5-YDT-QlWkAvfwtHjb8ZY8j71ku5KB1tVtzbnpOjiSCuXZwMWAwMNjIe6cE0inKXlNjuCqnFjvQHEpf48pa0IcMeVuQZjslS12O8tXmbRFBpkcEypQ], Content-Type=[application/json;charset=UTF-8], } - method = POST - Timestamp=1719230841436 - Taken=206 ms - Thread=85 - StatusCode = - 401 - ResponseFoundFromException = - - ResponseHeaders - {Server=[nginx], Date=[Mon, 24 Jun 2024 12:07:21 GMT], Content-Type=[application/json], Transfer-Encoding=[chunked], Connection=[keep-alive], expires=[0], cache-control=[no-cache, no-store, max-age=0, must-revalidate], x-xss-protection=[1; mode=block], pragma=[no-cache], GovWay-Message-ID=[e9d1f1bc-eb83-4df7-b4f2-17b7c4009260], x-frame-options=[DENY], GovWay-Transaction-ID=[9e6c3f5d-3219-11ef-bd08-0050568e9679], vary=[Access-Control-Request-Headers, Access-Control-Request-Method, Origin], x-content-type-options=[nosniff], strict-transport-security=[max-age=31536000 ; includeSubDomains, max-age=63072000], } - org.springframework.web.client.HttpClientErrorException: 401 Unauthorized Il JWS risulta essere valorizzato nel seguente modo:

{ "jti": "d230bbd9-5322-412d-94c8-0cca434bb40e", "aud": "https://apigw-test.anticorruzione.it/modi/rest/ComunicaPostPubblicazione/v2", "userCodiceFiscale": "MRTCLD96B52B696F", "userRole": "RP", "userLoa": "3", "userIdpType": "SPID", "SACodiceFiscale": "05359681003", "SAcodiceAUSA": "9000000008", "regCodicePiattaforma": "0000009", "regCodiceComponente": "0000010", "businessFlowID": "49f7e557-d443-4f26-be39-dd9c070641fa", "traceID": "503fe9ec-e1db-4b0f-a761-b13ca4e46e67", "spanID": "79bf5300-e976-4688-adaf-86da068f68ac", "purposeId": "6c2faee6-44f3-4f34-8a8a-0f8eca73a640", "iat": 1719230841, "exp": 1719234441, "nbf": 1719230841} Nel secondo test la trasmissione è invece andata a buon fine: "GovWay-Message-ID":["9c5eba8e-dae2-45b2-a5ce-c103126e938d"] "GovWay-Transaction-ID":["596d25c1-3237-11ef-8dc0-0050568e08b3"]

2024-06-24 17:04:02,081 INFO (AbstractAnacUnhandledIntegrationService.java:219) - [[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)']: RequestBody = {"idAppalto":"9c2bb6c7-0631-4f7b-9fc0-5cca2eeafa56","scheda":{"codice":{"idTipologica":"codiceScheda","codice":"S3"},"versione":"1.0","body":{"type":"SchedaS3Type","anacForm":{"elencoIncarichi":[{"cig":"I0069DC30D"}]}}}} - requestUrl = https://apigw-test.anticorruzione.it/modi/rest/ComunicaPostPubblicazione/v2/crea-scheda - headers = {Authorization=[Bearer eyJ0eXAiOiJhdCtqd3QiLCJhbGciOiJSUzI1NiIsInVzZSI6InNpZyIsImtpZCI6IjMyZDhhMzIxLTE1NjgtNDRmNS05NTU4LWE5MDcyZjUxOWQyZCJ9.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.L0TUXSDwvC2wHN9jORg1_7k2WSbwUpnTiHQeurcLnHBk_USqAR73rifbyg1j5dnHpZQaJjpjYJqZC75NacEDfihX-wdykNCnXgmbixSO_wBuzMtUGMikEiSECyHW2FU5b41rHJb-ZUwZRI7FBjcllkq1ulVRNaa3ficNMG3mHwXpbdokg7WrwWg5hI30XiQ8szhnW8bFlpvaiLTuETSf9Sm79GCp7QhGZCI3mbCsBT7AHo-k7Yblp550yj6q_22CqPrmM6zbDo344sM5nYqEEA8iu2Rgfhv1oe4o7aggSwK3Fo8isIFVq9OCQT6t5d_KXMd-l8nDY2QWMctOspdYJw], Agid-JWT-TrackingEvidence=[eyJraWQiOiJvbjJVTmFCbGxQSlhaZDV4amdPMXoxV2QyeFVRYUItRHFtRFhaZEFiUlRBIiwiYWxnIjoiUlMyNTYiLCJ0eXAiOiJKV1QifQ.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.mQ8FH_6RSZp6JvHDtroMyMsHupo-XmZAtlGTeW-_kbZIjOyiygIK1kDuDVTG2DBkwMWvV7s92IvHBsgxWtFblY_JVgbEHTIzbOlaFOF325l46Ao4zhXiRaFSzPDmwGxJq8-ysApYL20RLchv09rtWIzDueY15dhjVDl2Cv2IbQCloRaLRvscULU3iZaJGYDjZvWkcXBGx28_moIJrDOFQuSJlU3_6Y9JZbS1Ml0A7wW9WCaQpzFI22ioTpnqVisVpKyFKVSW3mtt6KFRg1WhrX-xxy-GLgH2VrAT9YjOnXW3sMIQuE7YfmSLzjJlgqluzdCcF2-gAq0tEPlIFgN5Dg], Content-Type=[application/json;charset=UTF-8], } - method = POST - Response = - {"body":"{\"status\":200,\"title\":\"Operazione Effettuata\",\"detail\":\"Creazione eseguita con successo\",\"type\":\"about:blank\",\"idScheda\":\"e11c4269-aa2d-403e-b52d-a70886c8f775\"}","headers":{"Server":["nginx"],"Date":["Mon, 24 Jun 2024 15:04:02 GMT"],"Content-Type":["application/json"],"Transfer-Encoding":["chunked"],"Connection":["keep-alive"],"expires":["0"],"cache-control":["no-cache, no-store, max-age=0, must-revalidate"],"x-xss-protection":["1; mode=block"],"pragma":["no-cache"],"GovWay-Message-ID":["9c5eba8e-dae2-45b2-a5ce-c103126e938d"],"x-frame-options":["DENY"],"GovWay-Transaction-ID":["596d25c1-3237-11ef-8dc0-0050568e08b3"],"vary":["Access-Control-Request-Headers","Access-Control-Request-Method","Origin"],"x-content-type-options":["nosniff"],"strict-transport-security":["max-age=31536000 ; includeSubDomains","max-age=63072000"]},"statusCode":"200","statusCodeValue":200} - Timestamp=1719241441983 - Taken=98 ms - Thread=45
Di seguito il JWS:

{ "jti": "e82f8fd8-707c-4046-8cae-e32b27ee978c", "aud": "https://apigw-test.anticorruzione.it/modi/rest/ComunicaPostPubblicazione/v2","userCodiceFiscale": "MRTCLD96B52B696F", "userRole": "RP", "userLoa": "3", "userIdpType": "SPID", "SACodiceFiscale": "05359681003", "SAcodiceAUSA": "9000000008", "regCodicePiattaforma": "0000009", "regCodiceComponente": "0000010", "businessFlowID": "9c2bb6c7-0631-4f7b-9fc0-5cca2eeafa56", "traceID": "4c560298-56de-416f-ba8e-7ada4bfd73d4", "spanID": "4f85bf66-d90c-4529-a8a6-2be830936156", "purposeId": "6c2faee6-44f3-4f34-8a8a-0f8eca73a640", "iat": 1719241441, "exp": 1719245041, "nbf": 1719241441 }

Non notiamo incongruenze nell'inoltro dei token o differenze tra un test e il successivo. Quindi non ci risulta corretto che per il primo test ANAC abbia restituito un 401.