Mirror-bot/open-madrid
1
0 Fork 0
mirror of https://github.com/fenleon/open-madrid.git synced 2026-10-22 16:12:35 +00:00
Code Issues Projects Releases Activity

gsa: prefpane V1 body keeps Basic auth (live 2026-10-13: V1 body without Basic → 401 UNAUTHORIZED; the closure's basic_auth needs no string constants)

Browse Source
This commit is contained in:
fenleon committed 2026-10-13 13:11:20 +02:00
1 parent 863a2d82cb
commit 3379a52d8c
2 files changed
+9 -6
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

registration/src/main/kotlin/dev/fenn/imessage/registration/GsaDelegateLogin.kt
+6 -4
View File
@@ -152,9 +152,11 @@ class GsaDelegateLoginClient(
)
// The vendored reference (open_absinthe, RE 2026-10-13) ships ONLY the V1 request
// shape on this endpoint: kebab-case `AuthRequest {apple-id, client-id, delegates,
// password}` with the PET in the body and NO Authorization header — the .so has no
// V2AuthRequest/protocolVersion/userInfo strings at all. The V2 wrapper is kept for
// the recorded v2 endpoint (§1.5 C59).
// password}` with the PET in the body — the .so has no V2AuthRequest/protocolVersion/
// userInfo strings at all. Basic `username:PET` still rides (the closure's
// basic_auth needs no string constants; live 2026-10-13: V1 body WITHOUT Basic →
// 401 UNAUTHORIZED, so the server reads Basic even on the V1 shape). The V2 wrapper
// is kept for the recorded v2 endpoint (§1.5 C59).
val prefpane = endpoint == PREFPANE_ENDPOINT
val body = if (prefpane) {
linkedMapOf<String, Any?>(
@@ -179,7 +181,7 @@ class GsaDelegateLoginClient(
}
val headers = buildMap {
putAll(request.anisette)
if (!prefpane) put("Authorization", "Basic $basic")
put("Authorization", "Basic $basic")
put(HEADER_NAS_QUALIFY, Base64.getEncoder().encodeToString(request.validationData))
put(HEADER_ADSID, request.adsid)
put(HEADER_CLIENT_INFO, request.clientInfo)
registration/src/test/kotlin/dev/fenn/imessage/registration/GsaDelegateLoginTest.kt
+3 -2
View File
@@ -100,7 +100,7 @@ class GsaDelegateLoginTest {
}
@Test
fun `prefpane endpoint posts the vendored V1 body without Basic auth`() = runBlocking {
fun `prefpane endpoint posts the vendored V1 body with Basic auth`() = runBlocking {
val http = ScriptedIdsHttp(listOf(IdsHttpResponse(200, emptyMap(), okResponse())))
GsaDelegateLoginClient(
http,
@@ -109,7 +109,8 @@ class GsaDelegateLoginTest {
val call = http.calls.single()
assertEquals(GsaDelegateLoginClient.PREFPANE_ENDPOINT, call.url)
assertNull(call.headers["Authorization"])
assertEquals("Basic " + Base64.getEncoder().encodeToString("[email protected]:pet-token".toByteArray()),
call.headers["Authorization"])
assertEquals(Base64.getEncoder().encodeToString(byteArrayOf(1, 2, 3)), call.headers["X-Mme-Nas-Qualify"])
val body = XmlPlist.decode(call.body) as Map<*, *>