Skip to content

netrc may override authorization header. #156

@jmgurney

Description

@jmgurney

I got pywebpush working on one system, but then when I copied it over to another system, I had authorization issues.

It turns out that the other system has a .netrc file that requests was reading and overriding the authorization set by vapid. This is documented here: https://github.com/web-push-libs/pywebpush:

If no authentication method is given with the auth argument, Requests will attempt to get the authentication credentials for the URL’s hostname from the user’s netrc file. The netrc file overrides raw HTTP authentication headers set with headers=.

I think the best thing to do is add an auth=lambda: None to the post line to disable reading the netrc file. I cannot think of a reason why we'd want this, but I'm also not well versed enough w/ the web PUSH api and it's edge cases to determine that either.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions