CODEWITHSUNDEEP
node.jspostaxiospostman
Zevgor
Zevgor

Reputation: 13

POST Request Basic Authorization - Not Working for Battle.net API in Node.js

I have formatted an axios post request as follows:

    var config = {
        method: 'post',
        url: 'https://us.battle.net/oauth/token',
        headers: { 
            'Authorization': 'Basic '+process.env.BATTLENET_CLIENT+':'+process.env.BATTLENET_SECRET, 
            ...data.getHeaders()
        },
        data : data
    };

This is getting rejected with a 401. However, when I generate the code snippet for this out of Postman, which functions, it is the same, except the Authorization is a seemingly random string that was generated:

var config = {
  method: 'post',
  url: 'https://us.battle.net/oauth/token',
  headers: { 
    'Authorization': 'Basic reallyRandomLongStringIsNotClientIDAndSecretKey=', 
    ...data.getHeaders()
  },
  data : data
};

Plugging this into my code made it work. I'm curious if there is something I'm missing when coding Basic Auth credentials, as it seems Postman has converted/encrypted it into something I can not figure out?

Upvotes: 1

Views: 238

Answers (2)

Andreas.Ludwig
Andreas.Ludwig

Reputation: 532

The Basic-Auth-Authentication-Scheme functions as follows:

  1. The client provides credentials in the form of a "username" and a "password".
  2. Username and password are concatenated with a colon: "username:password"
  3. The concatenated string is encoded in base64
  4. The header value is then the base64-encoded string prefixed with "Basic "

Below you can see a javascript implementation:

const userName = "username"
const password = "password"

const authenticationHeader = "Basic " + btoa(`${userName}:${password}`)

Upvotes: 0

Anatoly
Anatoly

Reputation: 22803

You just need to encode the string with username and password/secret to Base64 like this:

const encodedAuthorization = Buffer.from(`${process.env.BATTLENET_CLIENT}:${process.env.BATTLENET_SECRET}`).toString('base64')
 var config = {
        method: 'post',
        url: 'https://us.battle.net/oauth/token',
        headers: { 
            'Authorization': `Basic ${encodedAuthorization}`, 
            ...data.getHeaders()
        },
        data : data
    };

Upvotes: 1

Related Questions