Why do I get Client authentication failed on XAMPP server and Linux server?

zony 0
Viewed 57

I'm trying to make a POST request using CURL. Using Postman and on my local machine using IIS there is no error but on XAMPP server and Linux server with CA certificate I get:


{"error":"OAUth Error","status":401,"message":"Client authentication failed"}

The code look like this:

<?php

$curl = curl_init();

curl_setopt_array($curl, array(
 CURLOPT_URL => 'https://api.timewave.se/v3/oauth/token',
 CURLOPT_RETURNTRANSFER => true,
 CURLOPT_ENCODING => '',
 CURLOPT_MAXREDIRS => 10,
 CURLOPT_TIMEOUT => 0,
 CURLOPT_FOLLOWLOCATION => true,
 CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
 CURLOPT_CUSTOMREQUEST => 'POST',
 CURLOPT_POSTFIELDS => array('client_id' => '1','client_secret' => 'abc........abc','grant_type' => 'client_credentials'),
));

$response = curl_exec($curl);

curl_close($curl);
echo $response;

Why do I get 'Client authentication failed' on XAMPP server and Linux server?

xampp curl authentication php
2 Answers

The good news is curl made a request and the server responded.

The most likely suspect is a problem with the HTTPS CA Certificate.
Your curl post data looks good.
Their example curl:

curl --location --request POST 'https://api.timewave.nu/v3/oauth/token' \
--form 'client_id="5"' \
--form 'client_secret="0zbrotKJAGaLGKhuGC0LJLVdkR7Z4lKuqWIxoMqI"' \
--form 'grant_type="client_credentials"'

You have the --location option covered with:

CURLOPT_FOLLOWLOCATION => true,

And using an array for the post data, guaranties the content type will be "form" data.
The only thing (other than SSL) I could see that may get this response is a typo in the post data.

But there are a few other things that should be fixed.

POST is not a valid parameter for CURLOPT_CUSTOMREQUEST
Although it may still work.
The PHP manual lists the valid parameters, and POST is not one of them.
You should use: CURLOPT_POST=>true,

This brings up another issue. Because the auth credentials must be kept secure you very likely cannot use CURLOPT_SSL_VERIFYPEER=>false,.

You will likely need the curl_set_optURLOPT_CAINFO option, or a certificate directory can be specified with the CURLOPT_CAPATH

You should look at your Request Header.
You may see somethng wrong.
Add CURLINFO_HEADER_OUT=>true

Then after the curl_exec($curl);

echo '<pre>' . curl_getinfo($curl,CURLINFO_HEADER_OUT);

Or look at all the details of the request and response including the request header.

$info = var_export(curl_getinfo($curl),true);
echo "<pre>$info";

The response header should look like this:

Server: nginx/1.14.0 (Ubuntu)
Date: Tue, 10 Dec 2019 06:37:03 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
pragma: no-cache
Cache-Control: no-store, private
Misunderstood0

Thanx for all response I found the issue in error.log

[Mon Jun 20 11:32:38.031690 2022] [ssl:warn] [pid 12036:tid 388] AH01909: www.example.com:443:0 server certificate does NOT include an ID which matches the server name

Edited file on local server ..\apache\conf\extra\httpd-ssl.conf

https://kinsta.com/knowledgebase/xampp-server-certificate-does-not-include-an-id-which-matches-the-server-name/

ServerName www.example.com:443

to

ServerName localhost

For some reason it works on live Linux server without any modification

zony0
Related