Sebastian Henschel

Results 20 issues of Sebastian Henschel

SHA1 has been shattered: http://shattered.it/ (https://shattered.it/static/shattered.pdf) `src/main/scala/code/api/oauth1.0.scala` allows the client to connect via SHA1. Maybe the API should be more restrictive and only allow SHA256?

question

Looks like another Elasticsearch-related issue: ``` Sat Jun 10 09:45:28 UTC 2017: java.net.URISyntaxException: Illegal character in query at index 58: http://localhost:9200/_search?q=product_family:%22personal loans%22 at java.net.URI$Parser.fail(URI.java:2848) at java.net.URI$Parser.checkChars(URI.java:3021) at java.net.URI$Parser.parseHierarchical(URI.java:3111) at java.net.URI$Parser.parse(URI.java:3053)...

question

This is the second exception which occasionally pops up at socgen-k: ``` 2017-06-07 11:38:31 qtp716143810-1640 Boot [ERROR] Exception being returned to browser when processing / ajax_request/F299427886484VSLBO5-20/ java.lang.RuntimeException: xxxxxxxxxxxxx, wrong userId,...

A few exceptions like this have popped up recently on https://bnpparibas-irb.openbankproject.com: ``` Sat Jun 10 09:50:42 UTC 2017: net.liftweb.json.JsonParser$ParseException: unknown token < Near:

@ichaib would love to know when our users have signed up, but we do not have a created date in our users tables yet. Currently, the workaround is to use...

stats

It looks like no issue was opened here when discovered a few months ago (see https://github.com/OpenBankProject/OBP-API-Scripts/blob/master/obp_api_scripts/generate_stats/stats.py#L161) so i will do it now: With the advent of function `elasticSearchWarehouseV300`, table `mappedmetric`...

Retrieving the list of all consumers (`getConsumers`) can be slow on busy sandboxes, e.g. https://apisandbox.openbankproject.com, which is crippling the experience using the API Manager, as @ichaib can confirm. It would...

API Manager currently uses a database to check if the user is logged and for general session management. Maybe this can be accomplished completely by cookies and no database is...

enhancement

It might be advantageous to use Django's model layer to handle the data retrieved from the API. Using that, common packages like `django-filters` could be used.

enhancement

@simonredfern requested: The API has a call to get connector metrics (https://apiexplorer.openbankproject.com/#2_2_0-getConnectorMetrics). Add this to the API Manager, make the current navigation item 'Metrics' a menu with two items: 'API...

enhancement
blocked