CESARBR / CESARBR/knot-cloud

Problem with node device authentication

Open
#68 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
9
Forks
14
PR merge metrics
No merged PRs in 30d

Description

During testing with the knot device, I found a problem with the thing-token authentication. The knot is confirming the device authentication message without re-verifying the thing token. My test:
My device sends the registration message and receives the confirmation along with a think token, then an authentication request is sent to the knot without informing the thing token, and the confirmation is received without errors. In the image the babeltower receives an authentication message without any token and confirms normally.
![Screenshot from 2022-03-10 10-11-53](https://user-images.githubusercontent.com/16996822/157674748-7809e5a8-b760-477e-b233-36a8ef9667c5.png)
![Screenshot from 2022-03-10 10-11-03](https://user-images.githubusercontent.com/16996822/157674752-99378c68-09f6-49b4-aa82-d035713226c7.png)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.