ndejong / pfsense_fauxapi

REST based API interface for pfSense 2.3.x and 2.4.x to facilitate devops
Apache License 2.0
354 stars 61 forks source link

Hash is marked as invalid unless lowercase #82

Open aoeuidh opened 2 years ago

aoeuidh commented 2 years ago

I'm working on FauxAPI authentication from PowerShell, and discovered that the API rejects the hash unless it's lowercase.

Hexadecimal is a case-insensitive concept, and to reject a valid hash because of its case is counterintuitive, considering that both upper and lower cases represent the same binary data.

The workaround is simple, but this should be fixed or at least noted in the documentation.