search

rikulo / stomp

STOMP Dart Client for communicating with STOMP-compliant messaging servers.
http://rikulo.org
Other
30 stars 24 forks source link

Stomp makes TWO requests when using basic auth, causing Sec-WebSocket-Accept to be invalid #20

Open nyvelius opened 6 years ago

nyvelius commented 6 years ago

When connecting to a WebSocket I get the following error.

dart_sdk.js:92203 WebSocket connection to '...' failed: Error during WebSocket handshake: Incorrect 'Sec-WebSocket-Accept' header value

When I inspect the request and response headers in Chrome, it turns out that the value sent for "Sec-WebSocket-Key" is not what the server receives.

For example, for my last request according to Chrome DevTools the request header Sec-WebSocket-Key' was "tsP6wTNh8NMsyM0hUr+0FA==", but the header key actually received by the server was "p1b2ngpyCIq8d4OKrP/H+A==".

Looking at the traffic in Wireshark shows that stomp actually makes TWO requests. The first is received by the server. The second differs by including an Authorization header. This second request fails.

It looks like the stomp client expects a Sec-WebSocket-Accept generated from the second key, when the server generated one for the first key, thus making the Accept key invalid.

eshiett1995 commented 5 years ago

@jmnyv how did you connect your flutter app to your stomp springboot app, i am having some issues https://github.com/rikulo/stomp/issues/19

nyvelius commented 5 years ago

@eshiett1995

(from AngularDart) StompClient stompClient = await connect("ws://ip-address:port/websocket");

Perhaps the issue has something to do with Genymotion? It's been a while since I've used it and I don't recall how it handles networking. Might suggest posting on Stack Overflow though.

eshiett1995 commented 5 years ago

@jmnyv have u tried it on a flutter app before ?