Felix' Wire API Login Tests

Goal

Finding out which URL to use to send HTTP Requests to Wire

The url that this website uses is not the correct one

Procedure

Analysis of the Wire API

Testing login function on this website

• Using multiple different accounts

Searching for Wire packets with Wireshark

• Filtering for IP
• Filtering for HTTP

Testing in Java with URL that Kai found

• Using base URL from Kai
• Adding API endings from this website
• Creating POST requests and printing responses in console

Results

Website

The website does not use the correct wire url, which always results in an authentication error

• Response code 400
  • Wrong syntax in json body
• Response code 403
  • Invalid credentials
• Response code 420
  • No further information
  • Probably too frequent login requests (Should be 429 according to the website)

Wireshark

• Nothing found
  • Windows sends too many packets in the background to find the ones from Wire
  • In Linux the Wire packets can be found, but have no helpful information about the url

Tests in Java with URL from Kai

• Difficult to put POST request together
• Response code 200
  • Successful login
  • Contains multiple parts
    • TTL
    • access token
    • user id
    • token type
• Due to the painful json format, we might need to use a parser to get the information out of the String and store it in our variables