<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Recent Posts in API borked; all requests return 401 | Unfuddle Community</title>
    <link>http://unfuddle.com/community</link>
    <description>Unfuddle Community Forums</description>
    <item>
      <guid isPermaLink="false">www.unfuddle.com/community:3:816:2795</guid>
      <title>API borked; all requests return 401 replied by David C. @ Tue, 14 Sep 2010 22:47:40 UTC</title>
      <link>http://www.unfuddle.com/community/forums/3/topics/816</link>
      <description>Sergey,

This is indeed how the Unfuddle interface should work (without the 401 of course!). Please email us at support with the URL of the ticket and the name of the file you are attempting to delete so we can investigate.</description>
      <pubDate>Tue, 14 Sep 2010 22:47:40 UTC</pubDate>
      <author>David C.</author>
    </item>
    <item>
      <guid isPermaLink="false">www.unfuddle.com/community:3:816:2305</guid>
      <title>API borked; all requests return 401 replied by Malcolm @ Thu, 07 Jan 2010 16:38:33 UTC</title>
      <link>http://www.unfuddle.com/community/forums/3/topics/816</link>
      <description>I started getting 401s on Tuesday. From my investigation, it looks like a WWW-Authenticate header is no longer being returned by Unfuddle when it returns the 401 response. I assume that it used to return this header, as it should (it's part of the Basic authentication protocol) and for some reason recently stopped returning it.

If this is your problem as well, you can get around it by providing the raw Basic authentication header yourself, rather than relying on your http library to negotiate the authentication.</description>
      <pubDate>Thu, 07 Jan 2010 16:38:33 UTC</pubDate>
      <author>Malcolm</author>
    </item>
    <item>
      <guid isPermaLink="false">www.unfuddle.com/community:3:816:2300</guid>
      <title>API borked; all requests return 401 replied by Joshua Frappier @ Wed, 06 Jan 2010 16:05:32 UTC</title>
      <link>http://www.unfuddle.com/community/forums/3/topics/816</link>
      <description>Steven,

I am sorry that you are having problems accessing the Unfuddle API. We are not currently experiencing any global problems with the Unfuddle API at this time.

I notice from your tweet (http://twitter.com/stevenmerrill/statuses/7443867486) that you are also unable to commit. In addition to 401 Unauthorized error that you are receiving from the API, the most obvious answer would be that you are not using the correct credentials.

As we are not seeing this problem in any other account, we will need to test this using your username and a new password. Please email Unfuddle Support and we will be glad to help you sort this out.</description>
      <pubDate>Wed, 06 Jan 2010 16:05:32 UTC</pubDate>
      <author>Joshua Frappier</author>
    </item>
    <item>
      <guid isPermaLink="false">www.unfuddle.com/community:3:816:2298</guid>
      <title>API borked; all requests return 401 posted by Steven Merrill @ Wed, 06 Jan 2010 14:58:15 UTC</title>
      <link>http://www.unfuddle.com/community/forums/3/topics/816</link>
      <description>For two known good username / password combinations, when I do an API request for http://treehouseagency.unfuddle.com/api/v1/projects/111056/ticket_reports/1021414/generate , I get a 401 error.

Please advise.</description>
      <pubDate>Wed, 06 Jan 2010 14:58:15 UTC</pubDate>
      <author>Steven Merrill</author>
    </item>
    <item>
      <guid isPermaLink="false">www.unfuddle.com/community:3:816:2316</guid>
      <title>API borked; all requests return 401 replied by Joshua Frappier @ Tue, 12 Jan 2010 00:46:35 UTC</title>
      <link>http://www.unfuddle.com/community/forums/3/topics/816</link>
      <description>I can confirm that we recently changed the API to no longer return a WWW-Authenticate header upon failed authentication. We did this because it was causing problems with certain clients, however, we never realized that it was completely against the HTTP specification:

&quot;http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2&quot;:http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2

We have just begun sending the WWW-Authenicate header again in keeping with the specification. I apologize for the confusion.</description>
      <pubDate>Tue, 12 Jan 2010 00:46:35 UTC</pubDate>
      <author>Joshua Frappier</author>
    </item>
    <item>
      <guid isPermaLink="false">www.unfuddle.com/community:3:816:2791</guid>
      <title>API borked; all requests return 401 replied by Sergey @ Tue, 14 Sep 2010 16:26:58 UTC</title>
      <link>http://www.unfuddle.com/community/forums/3/topics/816</link>
      <description>I don't use unfuddle API, but unfuddle's pages use. I tried to delete file from a comment on ticket, and browser sent POST query to unfuddle's API page: http://msdollars.unfuddle.com/api/v1/... with &quot;_method=DELETE&quot; and it returned 401. So, because of this I can't delete file from a comment in unfuddle.</description>
      <pubDate>Tue, 14 Sep 2010 16:26:58 UTC</pubDate>
      <author>Sergey</author>
    </item>
    <item>
      <guid isPermaLink="false">www.unfuddle.com/community:3:816:2306</guid>
      <title>API borked; all requests return 401 replied by Steven Merrill @ Thu, 07 Jan 2010 21:41:17 UTC</title>
      <link>http://www.unfuddle.com/community/forums/3/topics/816</link>
      <description>Apologies on committing - that was just a client that hadn't given me commit access. I've tweeted as such.

You'll have to forgive me - I saw two HTTP Basic Auth problems and thought them to be linked.

However, Malcolm is right on. Would it be possible to restore the WWW-Authenticate header when the API first returns a 401? I'd prefer not to have to encode and include the Basic Auth headers by hand in my app, but I will if that's what's necessary.

Here's a screenshot of the response with no auth header: http://skitch.com/00sven/nqqm6/charles-3.5.1-session-1 .</description>
      <pubDate>Thu, 07 Jan 2010 21:41:17 UTC</pubDate>
      <author>Steven Merrill</author>
    </item>
    <item>
      <guid isPermaLink="false">www.unfuddle.com/community:3:816:2299</guid>
      <title>API borked; all requests return 401 replied by Steven Merrill @ Wed, 06 Jan 2010 14:59:54 UTC</title>
      <link>http://www.unfuddle.com/community/forums/3/topics/816</link>
      <description>It's worth noting that this breakage probably happened sometime over the weekend, since this was working fine on Friday.</description>
      <pubDate>Wed, 06 Jan 2010 14:59:54 UTC</pubDate>
      <author>Steven Merrill</author>
    </item>
  </channel>
</rss>

