android - "Authenticity check failed" error on server -

-

i migrate 5.0.0.3 worklight application deployed on 5.0.0.3 worklight server worklight studio 5.0.6 , deployment done on ipas.

deployment successful on ipas , try execute android application tablet.

i have issues authentication:

in application descriptor, protected android application in application-descriptor.xml securitytest.

i defined realms, securitytest , loginmodules in authenticationconfig.xml. use formbasedauthenticator , nonvalidatingloginmodule.

all work challengehandler except when challengehandler.submitsuccess(). here, on server console have following error:

com.worklight.core.auth.ext.authenticityloginmodule login fwlse0127e: authenticity check failed.

securitytest use is: customercentricclientapp-strong-mobile-securitytest. here authenticationconfig.xml file:

<?xml version="1.0" encoding="utf-8" standalone="no"?> 

<securitytests>     <websecuritytest name="customercentricclientapp-web-securitytest">         <testuser realm="pushclientapprealm"/>     </websecuritytest>      <mobilesecuritytest name="customercentricclientapp-strong-mobile-securitytest">         <testappauthenticity/>          <testuser realm="pushclientapprealm"/>         <testdeviceid provisioningtype="none"/>     </mobilesecuritytest> </securitytests>  <realms>             <realm loginmodule="pushappclientloginmodule" name="pushclientapprealm">         <classname>com.worklight.core.auth.ext.formbasedauthenticator</classname>     </realm>      <realm loginmodule="requirelogin" name="worklightconsole">         <classname>com.worklight.core.auth.ext.formbasedauthenticator</classname>         <onloginurl>/console</onloginurl>     </realm> </realms>  <loginmodules>     <loginmodule name="pushappclientloginmodule">         <classname>com.worklight.core.auth.ext.nonvalidatingloginmodule</classname>     </loginmodule>      <loginmodule name="requirelogin">         <classname>com.worklight.core.auth.ext.singleidentityloginmodule</classname>     </loginmodule> </loginmodules>

here extract of application-descriptor:

<android securitytest="customercentricclientapp-strong-mobile-securitytest" version="1.0">     <worklightsettings include="true"/>     <pushsender key="xxx" senderid="xx"/>     <security>         <encryptwebresources enabled="false"/>         <testwebresourceschecksum enabled="false" ignorefileextensions="png, jpg, jpeg, gif, mp4, mp3"/>         <publicsigningkey>migfma0gcsqgsib3dqebaquaa4gnadcbiqkbgqcsw8rocroak0pely5dpyn0wkg2cava7ub8ksfdjbwofowia7aad1hlcjjpcrznffq8nqeq7jjahpuovmkxvvcrfj7shj3jzp0yavh0lte8dsq0masxwfyehmje9l/kiy5kwm6sdk+4oxcdj2j2u+mbivr9+msdtaqiofpp+pbteqidaqab</publicsigningkey>     </security> </android>

make sure <testappauthenticity/> part of custom securitytest.

in addition adding authenticity test above, need also:

  1. specify public signing key in application-descriptor.xml (add using "extract public signing key" in android environment's context menu)
  2. sign , export .apk (i assume we're talking android here) using same keystore used generating public signing key above

note relevant in consumer or enterprise editions of worklight, authenticity feature exist. if not case, suggest removing securitytest.


Comments

Post a Comment

Popular posts from this blog

android - getbluetoothservice() called with no bluetoothmanagercallback -

-
i getting getbluetoothservice() called no bluetoothmanagercallback error in android application. i have no idea causing or bluetooth manager callbacks. can give me idea of causing problem or start looking. by reading android source code, seems warning cannot about. source code shows if call bluetoothsocket#connect(); then call bluetoothadapter.getdefaultadapter().getbluetoothservice(null); the key here, null parameter passes in above line. due this, there no callback, , bluetoothsocket class throw out warning. since warning, not think need it. https://android.googlesource.com/platform/frameworks/base/+/master/core/java/android/bluetooth/bluetoothsocket.java line 306 https://android.googlesource.com/platform/frameworks/base/+/master/core/java/android/bluetooth/bluetoothadapter.java line 1610
Read more

sql - ASP.NET SqlDataSource, like on SelectCommand -

-
i'm working on asp.net. have sqldatasource query hardcoded on selectcommand: <asp:sqldatasource id="datasource1" runat="server" cancelselectonnullparameter="false" connectionstring="<%$ connectionstrings:s.properties.settings.connectionstring %>" selectcommand="select * [table] ([col1] case @col1_param when null col1 else @col1_param end) , ([col2] case @col2_param when null col2 else @col2_param end)" selectcommandtype="text"> <selectparameters> <asp:controlparameter controlid="textbox1" name="col1_param" propertyname="text" type="string" /> <asp:controlparameter controlid="textbox2" name="col2_param" propertyname="text" type="string" /> </selectparameters> what want if enter data on 1 textbox only, data display according textbox
Read more

ios - Undefined symbols for architecture armv7: "_OBJC_CLASS_$_SSZipArchive" -

-
i try using extractzipfile plugin @ this: https://github.com/phonegap/phonegap-plugins/tree/master/ios/extractzipfile but when compiler xcode 4.6.1 in sdk 6.1 throws error: undefined symbols architecture i386: "_objc_class_$_ssziparchive", referenced from: objc-class-ref in extractzipfileplugin.o ld: symbol(s) not found architecture i386 clang: error: linker command failed exit code 1 (use -v see invocation) i try issue @ here: undefined symbols architecture armv7 ssziparchive but shows error: /users/alienware/desktop/extractzipfile/ssziparchive/tests/ssziparchivetests.m:10:9: 'sentestingkit/sentestingkit.h' file not found i work phonegap , make app in ios, dump. update : try add ssziparchive.m compiler source , come new error: undefined symbols architecture i386: "_unzclose", referenced from: +[ssziparchive unzipfileatpath:todestination:overwrite:password:error:delegate:] in ssziparchive.o "_unzclosecurrentfil
Read more