2 锁定网络上的 Legged 授权失败

Question

我是 Forge 的新手，我们正在尝试在我们的工作网络上运行本教程。

我们的网络非常封闭，因此我不得不将“developer.api.autodesk.com”添加到 Cisco HTTPS 例外列表中。 是否需要添加其他页面才能使 2 腿授权正常工作。

当我点击本地主机上的“授权我”按钮时，网页上显示“授权失败”。

我在 node.js 命令提示符下得到的报告如下（客户端 ID 等已更改）

任何帮助表示赞赏。

---

> viewer-walkthrough-online.viewer@2.0.0 start C:\APA_Testing\Forge\walkthrough
> node start.js

Server listening on port 3000
{ Error: unable to get local issuer certificate
    at TLSSocket.onConnectSecure (_tls_wrap.js:1058:34)
    at TLSSocket.emit (events.js:198:13)
    at TLSSocket._finishInit (_tls_wrap.js:636:8)
  code: 'UNABLE_TO_GET_ISSUER_CERT_LOCALLY',
  config:
   { adapter: [Function: httpAdapter],
     transformRequest: { '0': [Function: transformRequest] },
     transformResponse: { '0': [Function: transformResponse] },
     timeout: 0,
     xsrfCookieName: 'XSRF-TOKEN',
     xsrfHeaderName: 'X-XSRF-TOKEN',
     maxContentLength: -1,
     validateStatus: [Function: validateStatus],
     headers:
      { Accept: 'application/json, text/plain, */*',
        'Content-Type': 'application/x-www-form-urlencoded',
        'User-Agent': 'axios/0.18.1',
        'Content-Length': 186 },
     method: 'post',
     url:
      'https://developer.api.autodesk.com/authentication/v1/authenticate',
     data:
      'client_id=XXXXXXXXXXXXXXXX&client_secret=XXXXXXXXXX&grant_type=client_credentials&scope=data%3Aread%20data%3Awrite%20data%3Acreate%20bucket%3Acreate%20bucket%3Aread' },
  request:
   Writable {
     _writableState:
      WritableState {
        objectMode: false,
        highWaterMark: 16384,
        finalCalled: false,
        needDrain: false,
        ending: false,
        ended: false,
        finished: false,
        destroyed: false,
        decodeStrings: true,
        defaultEncoding: 'utf8',
        length: 0,
        writing: false,
        corked: 0,
        sync: true,
        bufferProcessing: false,
        onwrite: [Function: bound onwrite],
        writecb: null,
        writelen: 0,
        bufferedRequest: null,
        lastBufferedRequest: null,
        pendingcb: 0,
        prefinished: false,
        errorEmitted: false,
        emitClose: true,
        autoDestroy: false,
        bufferedRequestCount: 0,
        corkedRequestsFree: [Object] },
     writable: true,
     _events:
      [Object: null prototype] {
        response: [Function: handleResponse],
        error: [Function: handleRequestError] },
     _eventsCount: 2,
     _maxListeners: undefined,
     _options:
      { protocol: 'https:',
        maxRedirects: 21,
        maxBodyLength: 10485760,
        path: '/authentication/v1/authenticate',
        method: 'post',
        headers: [Object],
        agent: undefined,
        auth: undefined,
        hostname: 'developer.api.autodesk.com',
        port: null,
        nativeProtocols: [Object],
        pathname: '/authentication/v1/authenticate' },
     _redirectCount: 0,
     _redirects: [],
     _requestBodyLength: 186,
     _requestBodyBuffers: [ [Object] ],
     _onNativeResponse: [Function],
     _currentRequest:
      ClientRequest {
        _events: [Object],
        _eventsCount: 6,
        _maxListeners: undefined,
        output: [],
        outputEncodings: [],
        outputCallbacks: [],
        outputSize: 0,
        writable: true,
        _last: true,
        chunkedEncoding: false,
        shouldKeepAlive: false,
        useChunkedEncodingByDefault: true,
        sendDate: false,
        _removedConnection: false,
        _removedContLen: false,
        _removedTE: false,
        _contentLength: null,
        _hasBody: true,
        _trailer: '',
        finished: false,
        _headerSent: true,
        socket: [TLSSocket],
        connection: [TLSSocket],
        _header:
         'POST /authentication/v1/authenticate HTTP/1.1\r\nAccept: application/json, text/plain, */*\r\nContent-Type: application/x-www-form-urlencoded\r\nUser-Agent: axios/0.18.1\r\nContent-Length: 186\r\nHost: developer.api.autodesk.com\r\nConnection: close\r\n\r\n',
        _onPendingData: [Function: noopPendingOutput],
        agent: [Agent],
        socketPath: undefined,
        timeout: undefined,
        method: 'POST',
        path: '/authentication/v1/authenticate',
        _ended: false,
        res: null,
        aborted: undefined,
        timeoutCb: null,
        upgradeOrConnect: false,
        parser: null,
        maxHeadersCount: null,
        _redirectable: [Circular],
        [Symbol(isCorked)]: false,
        [Symbol(outHeadersKey)]: [Object] },
     _currentUrl:
      'https://developer.api.autodesk.com/authentication/v1/authenticate' },
  response: undefined }

Answer 1

您需要列入白名单的唯一主机是developer.api.autodesk.com - 我们所有的端点都在这个域上。

实际上，错误是抱怨无法找到应存在于本地保险库中以验证连接的 SSL 证书 - 如果您使用 cURL/Postman 等工具调用我们的 API 并询问您的问题，请测试错误是否仍然存在网络管理员寻求帮助。

出于安全原因，绝对不推荐作为临时解决方法，您可以在 here 之后禁用 SSL 问题检查 - 只需将代码添加到 start.js 中的 Axios 配置中