[#1065] Bookin via API Error: Client authorization required

Migrated from Redmine #1065 | Author: Henning Künne
Status: Closed | Priority: High, I’m very impatient | Created: 2023-06-16


Hello,

on our Sandbox Account suddenly Bookings stopped to work. With a test account the exact same code does work. Could you please have a look why this is?

Here is the request:

* Preparing request to https://user-api.simplybook.me/
* Current time is 2023-06-16T14:58:30.954Z
* Enable automatic URL encoding
* Using default HTTP version
* Enable timeout of 30000ms
* Enable SSL validation
* Enable cookie sending with jar of 12 cookies
* Too old connection (464 seconds), disconnect it
* Connection 61 seems to be dead!
* Closing connection 61
* TLSv1.3 (OUT), TLS alert, close notify (256):
*   Trying 142.44.140.176:443...
* Connected to user-api.simplybook.me (142.44.140.176) port 443 (#62)
* ALPN, offering h2
* ALPN, offering http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server did not agree to a protocol
* Server certificate:
*  subject: CN=*.simplybook.me
*  start date: Feb  1 08:57:38 2023 GMT
*  expire date: Mar  4 08:57:37 2024 GMT
*  subjectAltName: host "user-api.simplybook.me" matched cert's "*.simplybook.me"
*  issuer: C=BE; O=GlobalSign nv-sa; CN=AlphaSSL CA - SHA256 - G4
*  SSL certificate verify ok.

> POST / HTTP/1.1
> Host: user-api.simplybook.me
> User-Agent: insomnia/2023.1.0
> content-type: application/json
> X-Company-Login: limbaecherb
> X-Token: 4942afade7dbf65xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx8a56b81dfd4b1177c8
> Accept: */*
> Content-Length: 269

| {
| 	"jsonrpc": "2.0",
| 	"id": 10,
| 	"method": "book",
| 	"params": [
| 		"2",
| 		"2",
| 		"2023-06-20",
| 		"15:30:00",
| 		{
| 			"name": "Horst Laukötter",
| 			"phone": "12345698764",
| 			"email": "horts@laukoetter.info"
| 		},
| 		{
| 			"9170f76ac1e9b33e151bb1c5982fe8f1": "Huba"
| 		}
| 	]
| }

* Mark bundle as not supporting multiuse

< HTTP/1.1 200 OK
< Server: nginx
< Date: Fri, 16 Jun 2023 14:58:31 GMT
< Content-Type: application/json; charset=UTF-8
< Content-Length: 103
< Keep-Alive: timeout=20
< Access-Control-Allow-Origin: *
< Access-Control-Allow-Methods: POST, GET, OPTIONS
< Access-Control-Allow-Headers: content-type, x-company-login, x-application-token, x-user-token, x-token, x-requested-with, x-csrf-token
< X-XSS-Protection: 1; mode=block
< X-IPLB-Request-ID: 1F11C196:CD8E_8E2C8CB0:01BB_648C7897_BEF17C7:BEC6
< Strict-Transport-Security: max-age=15768000
< X-IPLB-Instance: 45487


* Received 103 B chunk
* Connection #62 to host user-api.simplybook.me left intact

And this is the response:

{
	"error": {
		"code": -32068,
		"message": "Client authorization required",
		"data": []
	},
	"id": "10",
	"jsonrpc": "2.0"
}

Redmine Admin wrote:

it seems you enabled client login plugin which changes how client auth works with API. The simplest way to solve this is to disable this plugin

Henning Künne wrote:

Worked…

Thanks for your help.