POST card/to-inbox 404

Fixed or Completed
1

Hello, my partner made a new kinopio account and is trying to use phonetonote via the API, but is getting a 404 hitting https://api.kinopio.club/card/to-inbox with an API key. One possible hint is I do not see an “ID” in her user info in the top right like I do with my account. Her email is ka[REDACTED]ck at gmail. I did see some closed tickets about it being an empty space. There are default cards in the inbox space, but I did add one manually just to confirm and that is not the issue.

The (scrubbed) API key is 718[REDACTED]84f. This is being passed as the Authorization header. I am relatively confident this part is correct because the phonetonote integration generally works.

2

Are they doing a POST request? It sounds like they might be doing a GET

3

Yes, it is a POST. The relevant ruby method in phonetonote is:

KINOPIO_URL = "https://api.kinopio.club/card/to-inbox"

def perform
    begin
      data = { name: text }

      uri = URI.parse(KINOPIO_URL)
      http = Net::HTTP.new(uri.host, uri.port)
      http.use_ssl = true
      request = Net::HTTP::Post.new(uri.request_uri, {
        "Content-Type" => "application/json",
        "Cache-Control" => "must-revalidate, no-store, no-cache, private",
        "Authorization" => "#{api_key}"
      })
      request.body = data.to_json
      response = http.request(request)
      response_data = JSON.parse(response.body)

      error_status = [400, 401, 404, 500]
      if error_status.include?(response.code.to_i) || error_status.include?(response_data["status"])
        raise response_data.to_s
      end

      return true
    rescue => error
      Rails.logger.error "KinopioWrapper: #{error}"
      @success = false
    end

  end
4

sorry i missed your reply (feel free to ping me in discord or email for urgent matters like this in the future) . looking into this now

5

if you don’t see an id in her user info , can you verify whether she’s signed up for an account? if she’s using kinopio without signing up then the server will have no record of her data/apikey. dm me the email and I can double check that.

6

Bump

7

resolved in twitter dm

the issue i believe was that an app api key was being used so the header has to be App-Authorization