Skip to content

Kickbox Authentication source: Wrong API host #8955

@brgerig

Description

@brgerig

PacketFence version
Current

Describe the bug
The Kickbox Authentication source uses api.kickbox.io for its API hostname. However, according to their documentation, this should either be api.kickbox.com or api.eu.kickbox.com, depending on region. With the incorrect hostname, email verification requests through the API work unless IP whitelisting is enabled.

To Reproduce
Steps to reproduce the behavior:

  1. Set up an API key with Kickbox.io.
  2. Add the IP/netblock Packetfence will send requests from.
  3. Attempt to verify an email address.
  4. Receive a FORBIDDEN response with the message "This API key has not been granted access to this resource."

Logs

root@PacketFenceSrv24:/usr/local/pf/lib# curl --request GET --url 'https://api.kickbox.io/v2/verify?email=testing%40kickbox.com&apikey=live_xxxxxxxxxxxxxxxxxxxxxxxxx'
{"success":false,"code":"FORBIDDEN","message":"This API key has not been granted access to this resource."}

root@PacketFenceSrv24:/usr/local/pf/lib# curl --request GET --url 'https://api.kickbox.com/v2/verify?email=testing%40kickbox.com&apikey=live_xxxxxxxxxxxxxxxxxxxxxxxxx'
{"success":true,"message":null,"result":"undeliverable","reason":"rejected_email","role":false,"free":false,"disposable":false,"accept_all":false,"did_you_mean":null,"sendex":0,"email":"[email protected]","user":"testing","domain":"kickbox.com"}

(Email has been changed from original test)

Expected behavior
Validation should work even with IP whitelisting.

Other information
API host documentation available here: https://docs.kickbox.com/docs/single-verification-api

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions