TWx 7.2 asks for Username and Password when AppKey is in URL

Forum|Forum|9 years ago
January 13, 2017
2 replies
4536 views

I have a microcontroller that is sending REST calls to ThingWorx with the AppKey in the URL. I have also been duplicating the call on Chrome's ARC. It has been working for a couple months and this week it suddenly started asking for username and password when I enter the call through ARC. All of the microcontroller calls are now failing with a 401 error. We checked if any of our TWx settings have changed over the last week and they are all the same. We did add a few users last week but the calls were still going through after we added them.

Thank you for any suggestions or help.

Best answer by ttielebein

I don't know if this will entirely resolve the issue, but the correct syntax for the field name is appKey, not app-Key

P

posipova

20-Turquoise

Is there a composer opened in the same session?

Has the original appkey been changed or possibly removed?

N

nmilleson

Author

17-Peridot

We have tried with and without a Composer session opened. On both URLs we are using the x-thingworx-session=true option.

The original appKey is still there unchanged as well.

P

posipova

20-Turquoise

I would not expect it to work with a Composer session open.

If, say, one logged into Tab1 to Composer via User1. The browser now has a session. In Tab2 one tries to send a request using an application key, but the browser already has a session from Tab1 and the Composer and User1. It won't use the application key supplied with the URL request even if the application key represents a different user.
When logging out of Composer from Tab1, the user kills that session used for both Tab1 and Tab2. The url in Tab2 is now also logged out.

If the request you were trying to send was not accessible by the composer tab (though the application key that you used had access), I'd expect you to get an exception.

Does it happen in different browsers? Could you please supply the full URL (or rather the format) you are using (don't have to include the real app key)

M

mwilson11

1-Visitor

We have seen the same issue with ThingWorx 7.1 asking for an ID and PW. It had been working for several months before we started seeing this popup. Our URL is https://<serverHere>/Thingworx/Home/?appKey=<appKeyHere>-thingworx-session=true

Has anyone figured out why?