Just noticed this issue today. Generating an api key for all users with global scopes, then updating a topic will result in an invalid_access curl --location --request PUT 'https://example.com/t/-/365.json' \ --header 'Api-User: system' \ --header 'Api-Key: ***' \ --header 'Content-Type: applicati…

[image] JustinBack: --header 'Api-User: system' This should be Api-Username, not Api-User This header is only used for “all user” api keys, so that’s why it worked when you scoped the key to a specific user.

Invalid Access using Global Key on All users

Development

JustinBack (Justin René Back) November 29, 2020, 6:52pm 3

Ah alright, was that changed recently? As I had in mind that the header is Api-User

Topic		Replies	Views
Generate/Regenerate api_key for a user API not working Development rest-api	4	1004	December 6, 2019
Issues using API with long-established/working key Support	2	430	April 20, 2022
Unable to edit topic via API despite topic write access Bug rest-api	4	798	March 4, 2022
Newly enforced api_username restriction? Development rest-api	4	642	October 29, 2020
404 when trying to create an API key for system user Bug	3	1368	August 11, 2020

Invalid Access using Global Key on All users

Related topics