QUESITION: Does BUNQ-INSTALL make API Key Wildcard if no IP is given for permitted IP?

sankarcn opened this issue 6 years ago · 3 comments

sankarcn commented 6 years ago

Steps to reproduce:

Run BUNQ-INSTALL from Command Promp
Provide Oath API Key
Provide blank when it asks for Permitted IP addresses
Use the Private Key, Installation Token generated to make a Session Server Call From Google App Script (Different IP address since it runs in a cloud)

What should happen:

This is a question... Does Blank in Permitted IP Addresses to the Interactive BUNQ-INSTALL make it a Wild Card API? Or anything else that I don't know of?

What happens:

The Session-Server Call is executing successfully.

Traceback

SDK version and environment

Tested on 0.12.4
Sandbox
Production

Response id

Response id:

Extra info:

basst85 commented 6 years ago

When permitted IPs is empty only the current IP is allowed. When you set your current IP address followed by a "*" you will enable wildcard mode.

sankarcn commented 6 years ago

Seem to be something wrong on my side..

OGKevin commented 6 years ago

@sankarcn you must specify the current ip address and then the *. This should be on the doc. see: https://github.com/bunq/doc/pull/72/files