IT29420: THE CONSECUTIVE SLASHES IN THE QUERY STRING OF AN API REQUEST WILL BE STRIPPED UNEXPECTEDLY

APAR status

• Closed as program error.

Error description

• For APIs secured with an OAuth Native provider with Access code
  grant, the URL for the redirect_uri is being stripped of one of
  the '/' ( https:/ instead of https://) if you use something
  different than Basic authentication (e.g. the Default HTML
  Form) for the Identity Extraction.
  As a result, the redirection might fail with the message
  "{"error":"invalid_request","error_description":"Redirect
  URI specified in the request is not configured in the client
  subscription"}"
  This is reproducible by creating a Native OAuth Provider using
  Access code grant, an Auth URL user registry (such as
  https://httpbin.org/basic-auth/user/pwd) and the Default HTML
  form for collecting the credentials in the Identity Extraction
  

Local fix

Problem summary

• The consecutive slashes in the query string of an API request
  URI will be stripped unexpectedly.
  

Problem conclusion

• Fix is available in 2018.4.1.7
  For a list of the latest fix packs available, please see:
  http://www-01.ibm.com/support/docview.wss?uid=swg21237631
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels