for me If Authorization header doesn't exist in th...
# pact-jsa
Abhishek
10/16/2022, 10:11 PMfor me If Authorization header doesn't exist in the pact then its adds value of the header from requestFilter. If Authorization header exists in the contract then I expect it to replace the value but it doesn't.
t
Timothy Jones
10/16/2022, 10:24 PMI don’t think I understand the question, sorry. Could you elaborate on what you’re trying to do?
a
Abhishek
10/17/2022, 6:55 AMHi Timothy, I want to replace the value of Authorization in header from requestFilter.
Abhishek
10/17/2022, 7:28 AMBut currently, It only adds the value of Authorization in header if its not present in the Contract. If authorization header exist in the contract it doesn't override it
t
Timothy Jones
10/17/2022, 7:32 AMWhat are you trying to do?
a
Abhishek
10/17/2022, 7:41 AMi am trying to override Authorization header value while doing provider side verification
t
Timothy Jones
10/17/2022, 7:51 AMAh, I think I understand. The request header filters aren’t supposed to be for overriding the contract
Timothy Jones
10/17/2022, 7:52 AMIf authorisation is part of the contract, it should be in the contract and not overridden.
If it isn’t, then you can override it
Timothy Jones
10/17/2022, 7:53 AMWhat I usually do is stub the auth, so in the contract I give a dummy token, which I control with a provider state
Timothy Jones
10/17/2022, 7:54 AMI usually use tokens like TOKEN or TOKEN_WITH_ADMIN_SCOPE
Timothy Jones
10/17/2022, 7:54 AMIf you don’t want to do that, then you can leave it out of the contract and inject it later
Timothy Jones
10/17/2022, 7:57 AMI like the stubbed token approach because it means the type of the token is not part of the contract. But what the token means is part of the contract
Timothy Jones
10/17/2022, 7:58 AMSo you might have a provider state that is
“TOKEN_WITH_ADMIN_SCOPE” is a valid token that has admin privilegesa
Abhishek
10/17/2022, 8:44 AMSo as I understood if we have, Authorization header in the contract we can't override it, right?
t
Timothy Jones
10/17/2022, 8:44 AMI believe that is correct
Timothy Jones
10/17/2022, 8:45 AMIf you could override the contract, then you could have a falsely passing verification
👍 1
8 Views