anpr icon indicating copy to clipboard operation
anpr copied to clipboard
verified publisher icon italia

C020: Errore 400 Bad Request - InteroperabilityInvalidRequest

Open Luca-Genghini opened this issue 2 months ago • 2 comments

Buongiorno,

fino a qualche settimana fa riuscivamo ad invocare correttamente il servizio C020 ma ultimamente, senza aver effettuato modifiche software all'integrazione, incappiamo sistematicamente nel seguente errore:

{ "type": "https://govway.org/handling-errors/400/InteroperabilityInvalidRequest.html", "title": "InteroperabilityInvalidRequest", "status": 400, "detail": "Received request is not conform to the required interoperability profile", "govway_id": "9f4e5ab9-b95b-11f0-8bd4-005056ae21f8" }

Di seguito riporto i dati della request:

Authorization: Bearer eyJhbGciOiJSUzI1NiIsInVzZSI6InNpZyIsInR5cCI6ImF0K2p3dCIsImtpZCI6Ijk0MzJjMTZiLTdhYWUtNDlkZi1iOWM0LWVhNjFiNTU2NjUyYiJ9.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.kjAb-NJIQgCQ8uX1IgGf8T3S6AvdcxGgZdpOakg-9N-QPVFnShs6VGf7dz_UeY8Xj0sWchdlXBOe75y2p_0aNzDmeHfrsVg6-LxTxfHIzN_kqT3bs6v5yqGmEjzfxaNfUskvBp8ZPv8a7sKEFxJEDKjMjNSPEzkOvzZv4NnRsTLMpA5O5z7whHskQYZVXF-MCMgLyXaxYRcT8u9j6t1-qREOLiVWCG-RHB0uMKc868Wh-Ou9LWShoL4lUDFMMjrUE1_xV--PTHd0T4wDiaVNub84W2nurl9zD00pbewBMpgPs24NcchInESahVKyHFlZidBNVMECqZehU7zJmxbQXg

Agid-JWT-Signature: eyJ0eXAiOiJKV1QiLCJraWQiOiJCdng2eEFkMlZtNHRoUjdjVERKUWozNkNGb290d3F5Q1dOVTBqSTgzM3BvIiwiYWxnIjoiUlMyNTYifQ.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.biE8Nw028jEkHHRxyoZ6KnSgIYEVVoxeUE5oa1Uoe8Kz-Rrxol39oi9aFc9-svb7r30c1FrcYLPMEcNNTFeOPy8BeBkPdwp7Fh2wPjJXNsAJ98PTCvMEvBitvyDL7tQf9rCEhL7U7Rx2clAGDpTkUzNJUkXwaVn8_eooenGKW0H6l17UKcaDuknpMymMhHPVzFqIWexnnpQMlTb4WxUvyPFQrJTB6mpv9O6V_tSO-g2mo3rkwK1maQ_p3YNABh93EzJXjSz65tyjIPrVU4mtYB0qT-gL1l8a0YMlKywn5zxV4vv9f7avLf_AHcOVq8exk_7WHe_jF20b6xR6p0hQrA

Agid-JWT-TrackingEvidence: eyJ0eXAiOiJKV1QiLCJraWQiOiJCdng2eEFkMlZtNHRoUjdjVERKUWozNkNGb290d3F5Q1dOVTBqSTgzM3BvIiwiYWxnIjoiUlMyNTYifQ.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.eVG6CzQ96gg4w_91PHAI185lEG5V6Rw-rd8pBLqTcZHg9mPfqoaB9Qq0JvefVPJT_CxO8tEmHcgZUNEKBvrbohvVso15tC8WUrSMedmmJseMjDNRQhotK57Y1HQR_h_b-VocqKenPNOAn1Zdwgrw1geGx_uwb3dSan4-Vh832hibvilAiSqgR-iwe8vgHSxq05o945lKkqPjvFalz_72vB7Rwgl5MAT5wCwPzRK-MKV9P18S0JLbpFsizdW8LIkMhkDZIlnDE_Pg7h5QT74nXhnByCyFAVPa4C9I-MSX2C4a1T2DbQ85SkxiNhZycQ_hbddiWKL3sBa2zhJkbmQWiQ

Digest: SHA-256=yncdY4hwrjVLdxJCZs8cmwmx5L76sifDZ9uBIdej34Q=

Body: { "idOperazioneClient": "DLGRFL77A18C129O_1762246473312", "criteriRicerca": { "codiceFiscale": "DLGRFL77A18C129O" }, "datiRichiesta": { "dataRiferimentoRichiesta": "2025-11-04", "motivoRichiesta": "DLGRFL77A18C129O_1762246473303", "casoUso": "C020" } }

Resto in attesa di un cortese riscontro. Saluti

Luca-Genghini avatar Nov 04 '25 09:11 Luca-Genghini

Buongiorno, abbiamo verificato e i due token di sicurezza vengono creati con un timestamp (iat e nbf) successivo alla chiamata (di circa 20 secondi), pertanto vengono rifiutati.

Saluti.

e-mattei avatar Nov 04 '25 09:11 e-mattei

Buongiorno, abbiamo modificato la fase di generazione dei token facendo in modo che non abbiamo un timestamp futuro rispetto al momento della chiamata (era dovuto all'orario sballato del server che ospita l'applicativo). Ora otteniamo comunque un errore, su un'altra attivazione, che sembra della stessa natura di quello precedente nonostante i token non siano più nel futuro come iat e nbf:

Di seguito i dettagli della richiesta

ERRORE { "type": "https://govway.org/handling-errors/400/InteroperabilityInvalidRequest.html", "title": "InteroperabilityInvalidRequest", "status": 400, "detail": "Received request is not conform to the required interoperability profile", "govway_id": "cbd92406-d9a2-11f0-abd6-005056ae6555" }

REQUEST Authorization: Bearer eyJhbGciOiJSUzI1NiIsInVzZSI6InNpZyIsInR5cCI6ImF0K2p3dCIsImtpZCI6Ijk0MzJjMTZiLTdhYWUtNDlkZi1iOWM0LWVhNjFiNTU2NjUyYiJ9.eyJqdGkiOiI4MmVkMTY4Yi1iZTQ3LTQyM2UtYmE4NS04Zjc4NzVjMWUyOGYiLCJpc3MiOiJpbnRlcm9wLnBhZ29wYS5pdCIsImF1ZCI6Imh0dHBzOi8vbW9kaXBhLmFucHIuaW50ZXJuby5pdC9nb3Z3YXkvcmVzdC9pbi9NaW5JbnRlcm5vUG9ydGFBTlBSL0MwMjAtc2Vydml6aW9BY2NlcnRhbWVudG9SZXNpZGVuemEvdjEiLCJjbGllbnRfaWQiOiJlYTdjNWU5My1hZjlmLTQ4OTItYmUzMy1mM2IwNmNmNmFhZDMiLCJzdWIiOiJlYTdjNWU5My1hZjlmLTQ4OTItYmUzMy1mM2IwNmNmNmFhZDMiLCJpYXQiOjE3NjU3OTU0MzUsIm5iZiI6MTc2NTc5NTQzNSwiZXhwIjoxNzY1Nzk2MDM1LCJwdXJwb3NlSWQiOiJjOGU1ZjkwOC01ZTA5LTRjZTYtODg4Ni1iYzU0ZmYyZTJlNDgiLCJkaWdlc3QiOnsiYWxnIjoiU0hBMjU2IiwidmFsdWUiOiJmYjY2ODU0YmZmNzkwNDdhNzFlNGJjMzM4OTkzMWYzNmZhYjgyYzJiNDc1OWIzZjRhZmI3MjNkY2IyMGY4NWMxIn0sInByb2R1Y2VySWQiOiIyYTlhZDM2MC05MGVmLTQ0OTktYWIyYy0xMTJiMGZiY2VjYzciLCJjb25zdW1lcklkIjoiZjQ4YWJjZmQtMGI1YS00NmRhLWFmNDgtMWVhNjJmOTE3NjY3IiwiZXNlcnZpY2VJZCI6ImExNTJiNDZiLWYzMzAtNDk0ZC05ODQ1LTgyYzQ2MGJjOWZjZiIsImRlc2NyaXB0b3JJZCI6IjQxMjQ1NmQ2LWNlZjEtNGMzNC1hMzNhLTI0MjMwZGY4ZDhlYSJ9.L1wjgWg8yYctp8A603rbUFFXujmlJxlG9WcXGUzMvgDcDOX-dsRUB8LcxPYnuOmQxshg3H9NTtDK8u9_Df5dUrkQH1yFBGBvyaZSOmbmyazWVHglK6uq5crPEIbgspPW-BrzrXFx33V19vQPeL2BLp59p6FoRnC0JGAtFoHF-gR4EaM7LY54A-quqLc5HCoP10RyQWeBLW7WK2mXqjrFExn2XXMbRri-VvitFJ59vAXyBYrBCEoupRwokpXiAVlMCtEZ-T43xhycmqQgLaU2NX9gIIIU15tzaEVvWO8NBAKrMfTkqtlgF9STnX6r51pDP0mmdmbNTQ_q0ViJg-ir9g

Agid-JWT-Signature: eyJ0eXAiOiJKV1QiLCJraWQiOiJuRW05WDRZeTNzWEVoeDRaQkxRV2tXVmU1aXNNaXI4MlpmODJvLW5EWHkwIiwiYWxnIjoiUlMyNTYifQ.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.sDY3ZUFLG1Q0BC8ttNf4MdEoRDZd6Uxwaojpq_PMLzh8ok8bBSPGHUqHV3vUIcWGQSqv51abgcdRtN64um_3PNumox3SLPOlgLiWQsxPfy0mDU5UjGaeSLSBxaDl8p_sgNoQtLhGwJIV4ScJ6myvDtsopwMziWUxyes5TQBfcuSeLJG5MzJZNZO3PEKqBAgjZk_kB8qUlMX2Brye-q0eJQRwYSkoZgo93mxo2Qmaz0sWzw6lFahBoVLEchn5dOrf6cD5_ndL6_aSNA6dZe35l00Oe85qSmshA26NfLE8OJdU-8zUDanbI9Ix9uezzw67LQ99pUC3JRAzy9b-vgLi2Q

Agid-JWT-TrackingEvidence: eyJ0eXAiOiJKV1QiLCJraWQiOiJuRW05WDRZeTNzWEVoeDRaQkxRV2tXVmU1aXNNaXI4MlpmODJvLW5EWHkwIiwiYWxnIjoiUlMyNTYifQ.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.q7f-ev7rxLqU5VX_6qbxQ1VFaiJCfnDjafU0tsK_N3tj-6YDomg9qNaSqp8eluqCnczlL42YtkEaFnRtS8ulXNnnUUfQFVV_5u14flTKR7uHx7Q9LQG75xClDtpvwYOVSndWaMGqNY7iV9wHTrIStGHWi7KZ6_QXt6RwH22lhqn-Pt7Z5k5MFtTZjClvLvlLa8kXJLiSU2sVqnSnuCvZbj2k5wL-FyetoOOpPyZ8fqXn99SQb8L-QlBXYvYC1ZcvKXgVnAsF1H1A1y0-m1_PNeC6r6VpZ8omMoY4YZ4p0K5VKN0O8Q-BKzgnImdNHv35HDMqT6qY58Tqi8kAfuAKKw

Digest: SHA-256=NBJE9WkIF8GZOb4IUqKtHsW8l46esVlX/SQusfUL0WE=

Body: { "idOperazioneClient": "BRVMRT94H13C573P_1765795452631", "criteriRicerca": { "codiceFiscale": "BRVMRT94H13C573P" }, "datiRichiesta": { "dataRiferimentoRichiesta": "2025-12-15", "motivoRichiesta": "BRVMRT94H13C573P_1765795452631", "casoUso": "C020" } }

Cosa non va in questa chiamata?

Luca-Genghini avatar Dec 15 '25 11:12 Luca-Genghini

Buonasera, l'errore adesso è il seguente:

  • Token creato da troppo tempo (data creazione: '2025-12-15_11:27:32.000')
  • [Header 'Agid-JWT-TrackingEvidence'] Token creato da troppo tempo (data creazione: '2025-12-15_11:27:32.000')

con precisione i due token risultano creati da oltre 20 minuti, infatti la richiesta ha come timestamp 2025-12-15 11:43:55.453.

e-mattei avatar Dec 22 '25 15:12 e-mattei