code doesn't work with https://partner.archive-it.org/wasapi/v1/login

[ndushay]

The code as it is works with https://partner.archive-it.org/login as the login endpoint (authurl in settings), but will not work with https://partner.archive-it.org/wasapi/v1/login.

Naomi found it asking for Http Referer header to be filled out, and then

this site requires a CSRF cookie when submitting forms

if Http Referer header was set.

Naomi used a simple rest client with Firefox, and sending over the username and password with HTTP Basic Auth worked fine.

We asked in wasapi-ref-impl channel which login endpoint is correct, etc.

[ndushay]

Jefferson says yeah, that's weird. possible redirect. I would authenticate at https://partner.archive-it.org/login` and then use /wasapi/v1/foo