Security Postman chalange

API & Customization issues
1

I am attempting to implement additional security measures to validate the Passbolt server. However, for some reason, the server does not return the decrypted key; instead, it produces an error without the debug field. Can someone assist me with this issue?

Please follow the steps outlined below with the corresponding snapshots:

  1. Perform a GET request to auth/verify.json to obtain the public key.

    image
    image1986×1238 370 KB

  2. Import the public key into GPG.

  3. Encrypt the key with the publicKey.

  4. Execute a POST request to /auth/verify.json with the fingerprint and the encrypted key.

    image
    image1872×1196 229 KB

    Although I receive the header X-GPGAuth-Error with a value of ‘true’, there is no X-GPGAuth-Debug.
    What could be the issue?