Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

netrc may override authorization header. #156

Open
jmgurney opened this issue Nov 20, 2023 · 0 comments
Open

netrc may override authorization header. #156

jmgurney opened this issue Nov 20, 2023 · 0 comments

Comments

@jmgurney
Copy link

I got pywebpush working on one system, but then when I copied it over to another system, I had authorization issues.

It turns out that the other system has a .netrc file that requests was reading and overriding the authorization set by vapid. This is documented here: https://github.com/web-push-libs/pywebpush:

If no authentication method is given with the auth argument, Requests will attempt to get the authentication credentials for the URL’s hostname from the user’s netrc file. The netrc file overrides raw HTTP authentication headers set with headers=.

I think the best thing to do is add an auth=lambda: None to the post line to disable reading the netrc file. I cannot think of a reason why we'd want this, but I'm also not well versed enough w/ the web PUSH api and it's edge cases to determine that either.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant