auth-url cookie rejected error?

[alblake]

I have been working on authenticating into LDS.org from a mobile app on Android. I am able to do a POST to the auth-url which returns a ObSSOCookie but when I pass that cookie in the header and do a GET on https://lds.org/directory/services/ludr ... ser-unitNo

I get this error in the LogCat:
WARN/ResponseProcessCookies(9364): Cookie rejected: "[version: 0][name: ObFormLoginCookie][value: wh%3Dlds.org%20wu%3D%2Fdirectory%2Fservices%2Fludrs%2Fmem%2Fcurrent-user-unitNo%20wo%3D1%20rh%3Dhttps%3A%2F%2Flds.org%20ru%3D%252Fdirectory%252Fservices%252Fludrs%252Fmem%252Fcurrent-user-unitNo][domain: lds.org][path: /login.html][expiry: null]". Illegal path attribute "/login.html". Path of origin: "/directory/services/ludrs/mem/current-user-unitNo"

I tried testing using HttpRequester and on the auth-url POST I get a Set-Cookie but the response shows a "Authentication Failed" HTML message. I know my credentials are valid because they work when I login to lds.org

Any ideas?

[alblake]

So I was using this example: https://tech.lds.org/wiki/External_Appl ... t_with_SSO
Which is a bit dated as it is using Apache Commons 1.3

Seems the web service security has been tightened up, such that I had to use HttpsURLConnection with a SSLSocketFactory in order to get a "valid" response