search

energywebfoundation / ocn-node

Apache License 2.0
5 stars 4 forks source link

OCPI responses are missing routing headers #15

Open ewf-devops opened 4 years ago

ewf-devops commented 4 years ago

Original report by Adam Staveley (Bitbucket: [Adam Staveley](https://bitbucket.org/Adam Staveley), GitHub: adamstaveley).

The OCN Node does not follow the OCPI Transport and Format documentation, which states that responses should also contain the following routing headers:

Currently only requests are required to contain such headers, but the node should also check that they are in response headers and forward them to the original sender.

ewf-devops commented 3 years ago

Original comment by Adam Staveley (Bitbucket: [Adam Staveley](https://bitbucket.org/Adam Staveley), GitHub: adamstaveley).

Bumped priority to major. This can be a blocker when using signatures, because the OCN Node will omit such headers when verifying the signature. As the signature contains the headers but the Node omits them, this causes signature verification to fail (signed values will not be the same). The only way around this for now is to not sign such headers on the client side.