Google OAuth exception - google-oauth

We encountered OAuth exception when opening authorization page from our website. It lasted for a few mins and impacted different customers. I am wondering if there is any known issue during that time (19:45- 19:59 PST time).
Error:
"Ajax error [411], error, <!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\http://www.w3.org/TR/html4/strict.dtd\>\r\n<HTML><HEAD><TITLE>Length Required</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Length Required</h2>\r\n<hr><p>HTTP Error 411. The request must be chunked or have a content length.</p>\r\n</BODY></HTML>\r\n"

Related

Postman API call 502.3 error when doing collection running, but works when run manually each API

I’m new in API testing please bear with me.
I’m using Postman to test our API. I run a bunch of request using run collection on the entire collection but it always returns 502.3 Error on a random POST request, but when I tried to request it standalone it has no issue and it returns the POST request that I’ve selected. It only happens when I run collection test on the entire collection and it returns 502.3 randomly.
502.3 Error when running collection test on the entire collection.
No Issue when run request individually
On the console it says
JSONError: Unexpected token ‘<’ at 1:1 <!DOCTYPE html PUBLIC
"-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/ ^
Checking the IIS Logs it shows that it is a 502.3 with Error code 12030. Upon doing research it means it is a ERROR_WINHTTP_CONNECTION_ERROR
“The connection with the server has been reset or terminated, or an incompatible SSL protocol was encountered. For example, WinHTTP version 5.1 does not support SSL2 unless the client specifically enables it.”
Any idea on how to fix this? Is this a connection issue? The server on which I’m requesting API is on a VPN.

Is there a way to differentiate the statuscode 401 of a page pre authentification and after closing the promtp?

so i have a webpage with a login section. Login is done with .htaccess and .htpasswd file. That works fine. Now i need to style or customize the "unauthorized" page that results after closing the authentification prompt.
Here is my problem: If I request the page, .htaccess kicks in and wants me to authenticate, resulting in a status code of 401. But if I close the promt, I get the "Unauthorized
This server could not verify that you are authorized..." response with an status code of also 401 back.
Question: Is there a way to differentiate the statuscode 401 of a page pre authentification and after closing the promtp?
You might want to look at the documentation for this.
perhaps also set the 401 document
ErrorDocument 401 "/login.shtml"

"HTTP ERROR 403" while executing script for clicking on search button which works fine with manual click

I am trying to click on Search button after entering data in some fields which has to show the results(list of flight available from city A to city B on t he selected date) according to the search in the same page.
When I run the Selenium - Java script for this scenario system is showing HTTP ERROR 403, while it works fine when I do it manually.
403 Forbidden
The HTTP 403 Forbidden client error status response code indicates that the server understood the request but refuses to authorize it.
This status is similar to 401, but in this case, re-authenticating will make no difference. The access is permanently forbidden and tied to the application logic, such as insufficient rights to a resource.
Status
403 Forbidden
Example response
HTTP/1.1 403 Forbidden
Date: Wed, 28 May 2019 07:28:00 GMT
Reason
You code trials and the error trace log would have helped us to debug the issue in a better way. Possibly the WebDriver controlled Browser Client is getting detected and hence the subsequent requests are getting blocked.
Outro
You can find similar discussions in:
Failed to load resource: the server responded with a status of 429 (Too Many Requests) and 404 (Not Found) with ChromeDriver Chrome through Selenium
Unable to use Selenium to automate Chase site login

Unable to obtain LinkedIn Access Token using Authorization Code

I am unable to obtain a LinkedIn Access Token. My setup is as follows:
I have setup an app on LI with this redirect URL http://localhost:5000/home
I request authorization from LI and get a response with the 'code'.
In under 10 seconds, I copy the code query param out of the URL bar and paste it into Postman.
In Postman, I have a setup as follows:
POST /oauth/v2/accessToken HTTP/1.1
Host: www.linkedin.com
Content-Type: application/x-www-form-urlencoded
grant_type=authorization_code&
client_id=<client id>&
client_secret=<client secret>&
redirect_uri=http%3A%2F%2Flocalhost%3A5000%2Fhome&
code=AQSbUzcWwSk_3sqQfusRZWEa4tZqU_x4fSQKub9c3eoeCzZwNO2ZH8uAzJc-T0T40WRv6qNxNpCDxckEjuXHqb56ZhKQqReB5mDjm1kZrCrLlBBYhzyymF5oRzwNgObylJukUVQ_0OiSuE0W0RQ
I have made multiple attempts but in response, I get the following error.
{"error":"invalid_request","error_description":"Unable to retrieve access token: appid/redirect uri/code verifier does not match authorization code. Or authorization code expired. Or external member binding exists"}
We have a LI login deployment that suddenly stopped working and started returning this error. On simplifying the use case, I find that Postman does the same.
What gives? What am I doing wrong? This used to work!

ASP.NET Core Auth0 - Unable to unprotect the message.State

We have Auth0 enabled for a site and it has been working well for quite some time.
All of a sudden when I enter the site and get redirected to Auth0 to enter my crendentials (and press login), I get faced with a screen with the following message.
An unhandled exception occurred while processing the request.
Exception: Unable to unprotect the message.State.
MoveNext AggregateException: Unhandled remote failure.
MoveNext
If I repeatedly refresh my site with /signin-auth0 at the end of the url the same error screen is shown.
Now when I repeated all steps from start (meaning entering my site) it all of a sudden work. What's this error anyway?
This was resolved by the Auth0 team as a bug in Auth0's transmission of the state parameter for social logins, notably Google. Things should be working normally again.