-
Defect
-
Resolution: Done
-
Major
-
None
-
None
-
None
There is an inconsistency between the URIs that are used to create our authorization tokens and the URIs that are used to verify the validity of our authorization tokens.
When we create a token we are using a fully qualified URI:
http://www.earthsystemgrid.org/archive/request/f9101f1b-3df5-4ec4-89c9-dca5fe6f0d63/file/189281b8-fec2-451c-8148-181a343be01f
When we verify the requested URI we are currently only passing the path to the AuthorizationTokenService:
/archive/request/f9101f1b-3df5-4ec4-89c9-dca5fe6f0d63/file/189281b8-fec2-451c-8148-181a343be01f
When we create a token we are using a fully qualified URI:
http://www.earthsystemgrid.org/archive/request/f9101f1b-3df5-4ec4-89c9-dca5fe6f0d63/file/189281b8-fec2-451c-8148-181a343be01f
When we verify the requested URI we are currently only passing the path to the AuthorizationTokenService:
/archive/request/f9101f1b-3df5-4ec4-89c9-dca5fe6f0d63/file/189281b8-fec2-451c-8148-181a343be01f