Client Registration, undefined method `any?'

Development API development and support
1

Hey peeps,

I decided it might be fun to try to follow Diaspora’s API docs, and try to register a very basic application using the Postman app.

So, I’ve started with the Authentication instructions, and have started sending a POST request for the Client Registration step. However, I’m not sure I’m sending the request properly, and I’m a little lost on how to progress.

Here’s what I’m sending:

POST 0.0.0.0:3000/api/openid_connect/clients?client_name=Postman&redirect_uris=http://example.com/

What I end up getting is a NoMethodError, with the output:

undefined method `any?’ for “http://example.com/”:String

Basically, I’m following the instructions to the letter with a client_name value of Postman and redirect_uris value of http://example.com/

I’m almost certain this is just a failed understanding on my part, but I’m not quite sure how to progress yet.

2

Hmm, weirdly this seemed to work fine using curl:
curl http://localhost:3000/api/openid_connect/clients -d "redirect_uris[]=http://localhost:3000/&client_name=Postman"

Will continue to experiment.

3

Okay, in case anyone else got stumped on this, the thing I was missing was [] after the redirect_uris value when submitting from Postman.

4

Please note that our API works by POSTing JSON payloads, not by mapping the JSON to query parameters. Neither our spec, nor OpenIDs spec, allow for the use of query parameters, and the fact that this works at all is a side-effect of the way Rails deserializes incoming JSON.

Do not rely on that, because I can guarantee you it will randomly break one day, and that will cause you a lot of grief.

5

@denschub Good to know about the JSON only requirement.

When I have time I’ll have to revisit function “openid_grant_access_token_via_oauth_code()” to use JSON instead of URI encoding.

6

Instead of trying to build and maintain a library for OpenID, I strongly suggest that everyone uses libraries that already exist and that are maintained. There is way too much room to get things wrong here.

7

@denschub Agreed.

The stated goal of diaspora_client_example is to provide a demo that might useful for folks like me who were starting with no knowledge of OAuth or OpenID and just needed a simple example of how all the pieces fit together. So for anyone reading this - don’t use diaspora_client_example in production code, please!