Just noticed this issue today. Generating an api key for all users with global scopes, then updating a topic will result in an invalid_access curl --location --request PUT 'https://example.com/t/-/365.json' \ --header 'Api-User: system' \ --header 'Api-Key: ***' \ --header 'Content-Type: applicati…

[Bild] JustinBack: --header 'Api-User: system' This should be Api-Username, not Api-User This header is only used for “all user” api keys, so that’s why it worked when you scoped the key to a specific user.

Ah alright, was that changed recently? As I had in mind that the header is Api-User

Ungültiger Zugriff mit globalem Schlüssel auf alle Benutzer

Entwickler

JustinBack (Justin René Back) 29. November 2020 um 18:52 3

Ah, okay, wurde das kürzlich geändert? Ich dachte, der Header lautet Api-User.

Thema		Antworten	Aufrufe
Generate/Regenerate api_key for a user API not working Development rest-api	4	1004	6. Dezember 2019
Issues using API with long-established/working key Support	2	429	20. April 2022
Unable to edit topic via API despite topic write access Bug rest-api	4	797	4. März 2022
Newly enforced api_username restriction? Development rest-api	4	642	29. Oktober 2020
404 when trying to create an API key for system user Bug	3	1368	11. August 2020

Ungültiger Zugriff mit globalem Schlüssel auf alle Benutzer

Verwandte Themen