imperva / imperva/imperva-web-api-composer
Authentication issue for Cloud WAF
Open
- Dominant language
- JavaScript
- Stars
- 21
- Forks
- 8
- PR merge metrics
- No merged PRs in 30d
Description
For Cloud WAF, authentication is failing because the tool sends api_id and api_key using query parameters which seems to be not supported anymore. Now x-API-Key and x-API-Id should be set as http headers.
Contributor guide
Research direction
Start by locating the Cloud WAF authentication request construction in the JavaScript application and check where api_id and api_key are added. Verify the request uses x-API-Key and x-API-Id HTTP headers instead of query parameters, then confirm Cloud WAF authentication succeeds.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- api, authentication, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100