wizelineacademy / sre-bootcamp Goto Github PK

Hi team, i agree with some other folks who have raised an issue related to the token creation function. The assertion in file: test_api.py, -> function - test_generate_token - , the first parameter in assertion (jwt token) seems to have different structure in comparison to the generated in function - generate_token - in file methods.py; In this last one, i have replaced values manually in payload and still show different output, this difference is in the 'header' structure of the token, if i use any decode64 tool to get the content i show the below differences:

assertion value header:
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9 ({"alg":"HS256","typ":"JWT"})
token generated with values manually replaced (payload):
eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9 ({"typ":"JWT","alg":"HS256"})

As you can see above, the 'header' values order are different, therefore unable to pass the assertion. i tried to find any articles related 'header' order manipulation to test the given value but i was not able to find any, therefore my assumption of this issue.

Please note, if i use the token generated from jwt.encode function and replace it in the assertion from function test_generate_token in test_api.py file, i can pass the test.

Thanks for your feedback....

Hi

I'm facing an issue when I try to log in CodeSignal to do the code challenge

Evidence:

I already tried to log in with my gmail account and also GitHub account

I hope you can help me

I get an error Error: getaddrinfo ENOTFOUND sre-bootcamp-selection-challenge.cabf3yhjqvmq.us-east-1.rds.amazonaws.com/ when trying to curl using the command curl -d "username=admin&password=secret" http://localhost:8000/login to query the aws rds.

When I use nslookup to query the domain name servers using the DB instance endpoint, the server can't find the endpoint.

nslookup sre-bootcamp-selection-challenge.cabf3yhjqvmq.us-east-1.rds.amazonaws.com/

The result is

Server:         172.31.144.1
Address:        172.31.144.1#53

** server can't find sre-bootcamp-selection-challenge.cabf3yhjqvmq.us-east-1.rds.amazonaws.com/: NXDOMAIN

I tried verifying my connection using telnet, running on port 8000, using:

telnet sre-bootcamp-selection-challenge.cabf3yhjqvmq.us-east-1.rds.amazonaws.com/ 8000

I get an error:

telnet: could not resolve sre-bootcamp-selection-challenge.cabf3yhjqvmq.us-east-1.rds.amazonaws.com//8000: Name or service not known

On testing the connectivity with nc and the command:

nc -zv sre-bootcamp-selection-challenge.cabf3yhjqvmq.us-east-1.rds.amazonaws.com/ 8000

The result:

nc: getaddrinfo for host "sre-bootcamp-selection-challenge.cabf3yhjqvmq.us-east-1.rds.amazonaws.com/" port 8000: Name or service not known

I'm trying to wonder if the URL is faulty or existent or if it's an issue on my end and if I should keep looking out for alternative solutions.

Hi Wizeline,

This provided token is not valid I decoded it using this page https://jwt.io/ and I have noticed the payload does not contain the "role".

In addition into the MethodsTest class we have a different JWT token for the same user (admin). so I would like to know which is the right token for the admin user?

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c

I am not understanding the second endpoint, it says i should return the message "You are under protected data"
should i return that message only for the "admin" role? What should i return if a wrong token is provided?
I am not clear about what kind of validations we should perform here.

The form at the end of the readme ask for permission, I haven't send any response yet

Hi Wizeline,

I am running the unit test but unfortunately both are failing, maybe you provided a wrong 256 bit secret to sign JWT tokens. I have created two additional test and they run successfully using my own data.