network: when using API key & secret key drop params

apache / cloudstack-cloudmonkey

Apache Cloudstack Cloudmonkey

Apache License 2.0

91 stars 60 forks source link

network: when using API key & secret key drop params #150

Closed rohityadavcloud closed 3 months ago

rohityadavcloud commented 4 months ago

Params need to be dropped as apikey & secretkey based URL has all the params and it causes signature validation issues when the same params are also posted again. For example, add host API with username, password params.

rohityadavcloud commented 4 months ago

Steps to reproduce the issue:

Create profile with only apikey and secret key set
Try to add a host, it fails with HTTP 401, on deep dive - it appears signature fails to match

Fix: don't send both encoded params as part of the URL and also param that may be posted.