In case anyone comes across the same problem the correct answer is that the 
uuid:signature portion needs to be base64 encoded as a whole to be 
compliant.

On Wednesday, November 16, 2016 at 11:51:59 AM UTC-8, [email protected] 
wrote:
>
> Hi,
>
> I am using akka-http in which I have implemented a custom authorization 
> scheme (based on AWS' auth) which takes the header form "Authorization: 
> CSTM uuid:signature"
>
> The problem is that I am getting a ton of log spam like the following:
>
> [WARN] [11/16/2016 11:43:37.341] [pwnd-akka.actor.default-dispatcher-20] 
> [akka.actor.ActorSystemImpl(pwnd)] Illegal request header: Illegal 
> 'authorization' header: Invalid input ':', expected token68-start, '=', 
> OWS, 'EOI', tchar or ws (line 1, column 41): CSTM 
> xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx:wArKQNT6Q7I148t/QGtX9zTfsHxkIZR4Rl77zxxZSD8=
>
> As far as I know there's nothing actually illegal about this format (not 
> recommended perhaps?). What is the recommended way to address this problem? 
> Should I reformat the header? Can I simply suppress these warnings? If 
> suppressing the warnings is the suggested route is there a way to only 
> suppress messages for the authorization header instead of a broad suppress.
>
> Thanks in advance,
>
> Jean-Philippe
>

-- 
>>>>>>>>>>      Read the docs: http://akka.io/docs/
>>>>>>>>>>      Check the FAQ: 
>>>>>>>>>> http://doc.akka.io/docs/akka/current/additional/faq.html
>>>>>>>>>>      Search the archives: https://groups.google.com/group/akka-user
--- 
You received this message because you are subscribed to the Google Groups "Akka 
User List" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/akka-user.
For more options, visit https://groups.google.com/d/optout.

Reply via email to