PacketFence version
Current
Describe the bug
The Kickbox Authentication source uses api.kickbox.io for its API hostname. However, according to their documentation, this should either be api.kickbox.com or api.eu.kickbox.com, depending on region. With the incorrect hostname, email verification requests through the API work unless IP whitelisting is enabled.
To Reproduce
Steps to reproduce the behavior:
- Set up an API key with Kickbox.io.
- Add the IP/netblock Packetfence will send requests from.
- Attempt to verify an email address.
- Receive a FORBIDDEN response with the message "This API key has not been granted access to this resource."
Logs
root@PacketFenceSrv24:/usr/local/pf/lib# curl --request GET --url 'https://api.kickbox.io/v2/verify?email=testing%40kickbox.com&apikey=live_xxxxxxxxxxxxxxxxxxxxxxxxx'
{"success":false,"code":"FORBIDDEN","message":"This API key has not been granted access to this resource."}
root@PacketFenceSrv24:/usr/local/pf/lib# curl --request GET --url 'https://api.kickbox.com/v2/verify?email=testing%40kickbox.com&apikey=live_xxxxxxxxxxxxxxxxxxxxxxxxx'
{"success":true,"message":null,"result":"undeliverable","reason":"rejected_email","role":false,"free":false,"disposable":false,"accept_all":false,"did_you_mean":null,"sendex":0,"email":"[email protected]","user":"testing","domain":"kickbox.com"}
(Email has been changed from original test)
Expected behavior
Validation should work even with IP whitelisting.
Other information
API host documentation available here: https://docs.kickbox.com/docs/single-verification-api
PacketFence version
Current
Describe the bug
The Kickbox Authentication source uses api.kickbox.io for its API hostname. However, according to their documentation, this should either be api.kickbox.com or api.eu.kickbox.com, depending on region. With the incorrect hostname, email verification requests through the API work unless IP whitelisting is enabled.
To Reproduce
Steps to reproduce the behavior:
Logs
(Email has been changed from original test)
Expected behavior
Validation should work even with IP whitelisting.
Other information
API host documentation available here: https://docs.kickbox.com/docs/single-verification-api