search

igniterealtime / REST-API-Client

Java REST API Client for the Openfire to manage Openfire instances by sending an REST/HTTP request to the server
Apache License 2.0
102 stars 62 forks source link

restapi login filter #54

Open Heimerdingge opened 1 year ago

Heimerdingge commented 1 year ago

swagger ui retry is ok. postman and other http tool is fail; The fail content (lang=Chinese): <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

Openfire 管理界面

管理界面

Openfire, 版本: 4.7.5
Chancelife commented 1 year ago

Found the same issue here in 4.7.5 with the Restful API plugin-1.10.1.

Swagger and APITester in Chrome work well but Postman or the Java rest-api-client 1.1.5 will have this error:

"Error: You don't have JavaScript enabled. This tool uses JavaScript and much of it will not work correctly without it enabled. Please turn JavaScript back on and reload this page."

I guess this is because they're trying to patch https://github.com/igniterealtime/Openfire/security/advisories/GHSA-gw42-f939-fhvm, and the default way of binding admin console to network interface is changed. If this is correct, 4.7.5, (and maybe 4.6.8, 4.8.0) have this issue.

And in the comment of OF-2604

Note that various web-based functionality might piggy-back on this server. The REST-API plugin is an example of this. An inventory must be made to find all affected implementation

The REST API plugin is impacted.

Not sure how to fix it but downgraded to 4.7.4 at least can let me call the restful API in Postman and Java client.

Heimerdingge commented 1 year ago

Thks,Be testing Tigase, but docs is terrible。

baoxituo1 commented 9 months ago

thanks fix my question