HTTP Request return "Bad Request" (code 400) in android app but works on postman (code 200)

Question

I have a API on android app and it worked for long time. System get updated and now I'm getting "400 - Bad Request" in the same request (without changes). But in Postman or Advanced REST Client works well.

I'm using: Java Android Retrofit 2 OkHTTP GSON

Android app

interface LoginService

@Headers({
        "Content-Type: application/json",
        "Accept: application/json",
        "Content-Length: 61"
})
@POST(Constants.API_LOGIN)
Call<Login> login(@Body JsonObject json);

Login

        JsonObject json = new JsonObject();
        json.addProperty("email", AUTH_USER);
        json.addProperty("password", AUTH_PASS);

        Call<Login> call = new RetrofitConfig().getLoginService().login(json);
        call.enqueue(new Callback<Login>() {
            @Override
            public void onResponse(@NonNull Call<Login> call, @NonNull Response<Login> response) {
                Login login = response.body();
                Log.d(TAG, "RESPONSE: " + response.message());
                String msg = "Autenticado com sucesso.";
            }

            @Override
            public void onFailure(@NonNull Call<Login> call, @NonNull Throwable t) {
                Log.e(TAG, "Error: " + t.getMessage(), t);
                Toast.makeText(context, "Erro ao autenticar com servidor", Toast.LENGTH_SHORT).show();
                call.cancel();
            }

        });

POST Request

D/OkHttp: --> POST https://API/
D/OkHttp: Content-Type: application/json
    Accept: application/json
    Content-Length: 61
D/OkHttp: {"email":"EMAIL","password":"****"}
    --> END POST (60-byte body)

Response

D/OkHttp: <-- 400 https://API (2130ms)
    server: awselb/2.0
    date: Wed, 15 Jan 2020 14:36:31 GMT
    content-type: text/html
    content-length: 138
D/OkHttp: <html>
    <head><title>400 Bad Request</title></head>
    <body bgcolor="white">
    <center><h1>400 Bad Request</h1></center>
    </body>
    </html>
    <-- END HTTP (138-byte body)

Same Request by Advanced REST Client

Request

Accept: application/json
Content-Type: application/json
cookie: COOKIE
content-length: 61
POST /api/login/ HTTP/1.1
Host: HOST
Accept: application/json
Content-Type: application/json
cookie: COOKIE
content-length: 61

 {"email":"EMAIL","password":"***"}

Response

> 200 OK

{
"token": "TOKEN"
}

Someone can help me?

`meunome.com.br: Name or service not known` ...likely the DNS is messed up. — Martin Zeitler, Jan 15 '20 at 20:05
I hide real email/password/host because it is confidencial information... I can't publish these datas here... but this host exist and works... — Lucas Correa, Jan 15 '20 at 20:16
How is a publicly known hostname "confidential information"? That's absurd. — Martin Zeitler, Jan 15 '20 at 20:59
How do you know if it's publicly known? What if it's only a local IP? — Timotej Leginus, Jan 15 '20 at 21:00
@TimotejLeginus Then one _obviously_ could not post to it with postman. — Martin Zeitler, Jan 15 '20 at 21:10

score 0 · Answer 1 · answered Jan 15 '20 at 20:58

0

I didn't get your point by "System get updated ". If you mean Android OS, maybe this answer can help you

answered Jan 15 '20 at 20:58

Mohammad

792
1
7
15

Web system that have a server side... It is a PHP Laravel framework and it get updated – Lucas Correa Jan 16 '20 at 21:23

score 0 · Answer 2 · answered Jan 22 '20 at 13:08

I found the solution!

I inserted header Authorization in the Retrofit settings and it was working perfectly. When updating Laravel to version 6.0, when inserting the empty "Authorization" (this api/login was to generate this token) I returned the error "400 - Bad Request".

I just did an if to remove the "Authorization" when there is no token and now it's perfect! \o/

HttpLoggingInterceptor interceptor = new HttpLoggingInterceptor();
interceptor.level(HttpLoggingInterceptor.Level.BODY);

OkHttpClient client = new OkHttpClient.Builder().addInterceptor(interceptor)
        .addInterceptor(chain -> {
            Request request;
            if (LoginManager.getToken().length() > 5) {
                request = chain.request().newBuilder()
                        .header("Authorization", LoginManager.getToken())
                        .build();
            } else {
                request = chain.request().newBuilder().build();
            }
            return chain.proceed(request);
        })

HTTP Request return "Bad Request" (code 400) in android app but works on postman (code 200)

2 Answers2