[ https://issues.apache.org/jira/browse/CLOUDSTACK-320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13564839#comment-13564839 ]
Min Chen commented on CLOUDSTACK-320: ------------------------------------- This is how UI used to invoke cloudstack API. By checking our ApiServer code, I noticed that by convention our query parameter is not case-insensitive, not just specific to this parameter. So this is not a bug, just a misunderstanding. > sessionKey query parameter should be case-insensitive, now only sessionkey is > accepted > -------------------------------------------------------------------------------------- > > Key: CLOUDSTACK-320 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-320 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: API > Affects Versions: 4.0.0 > Reporter: Min Chen > Assignee: Min Chen > Priority: Minor > Fix For: 4.1.0 > > > Steps to reproduce: > 1. Run <mshost>:8080/client/api?command=login... to get a sessionkey > 2. Then run <mshost>:8080/client/api?command=listZones&sessionKey=<URLencoded > sessionKey returned above>... > It will show that failed to verify. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira