KeyError: 'HTTP_AUTHORIZATION'

[masyanru]

Hello,
Tested locally, but in the Bot framework channel emulator I see only 500 error in post requests.

127.0.0.1 - - [09/Aug/2017 19:48:49] "POST /api/messages HTTP/1.1" 500 -
[2017-08-09 19:48:49,332] ERROR in app: Exception on /api/messages [POST]
Traceback (most recent call last):
File "/Users/a.mosyagin/.virtualenvs/hybrid_env/lib/python3.6/site-packages/flask/app.py", line 1982, in wsgi_app
response = self.full_dispatch_request()
File "/Users/a.mosyagin/.virtualenvs/hybrid_env/lib/python3.6/site-packages/flask/app.py", line 1614, in full_dispatch_request
rv = self.handle_user_exception(e)
File "/Users/a.mosyagin/.virtualenvs/hybrid_env/lib/python3.6/site-packages/flask/app.py", line 1517, in handle_user_exception
reraise(exc_type, exc_value, tb)
File "/Users/a.mosyagin/.virtualenvs/hybrid_env/lib/python3.6/site-packages/flask/_compat.py", line 33, in reraise
raise value
File "/Users/a.mosyagin/.virtualenvs/hybrid_env/lib/python3.6/site-packages/flask/app.py", line 1612, in full_dispatch_request
rv = self.dispatch_request()
File "/Users/a.mosyagin/.virtualenvs/hybrid_env/lib/python3.6/site-packages/flask/app.py", line 1598, in dispatch_request
return self.view_functionsrule.endpoint
File "/Users/a.mosyagin/.virtualenvs/hybrid_env/lib/python3.6/site-packages/microsoftbotframework/msbot.py", line 77, in _message_post
valid_token = self._verify_token(request)
File "/Users/a.mosyagin/.virtualenvs/hybrid_env/lib/python3.6/site-packages/microsoftbotframework/msbot.py", line 110, in _verify_token
authorization_header = request.headers['Authorization']
File "/Users/a.mosyagin/.virtualenvs/hybrid_env/lib/python3.6/site-packages/werkzeug/datastructures.py", line 1349, in getitem
return unicodify_header_value(self.environ['HTTP' + key])
KeyError: 'HTTP_AUTHORIZATION'
127.0.0.1 - - [09/Aug/2017 19:48:49] "POST /api/messages HTTP/1.1" 500 -

What do you think?
Thx for answer.

[mbrown1508]

Hi Anton,

When using the simulator you need to disable the JWT validation. You can do this by setting the config value verify_jwt_signature. The simplest way to pass it as a argument to the MsBot object.

bot = MsBot(verify_jwt_signature=False)

You can also set it in the environment vars (best option) or config.yaml file.

I am going to leave this issue open as I am going to add a check to see if the emulator is been used and only give a warning if the auth validation fails or isn't present. The other option is to implement the full emulator JWT validation.