Just noticed this issue today. Generating an api key for all users with global scopes, then updating a topic will result in an invalid_access curl --location --request PUT 'https://example.com/t/-/365.json' \ --header 'Api-User: system' \ --header 'Api-Key: ***' \ --header 'Content-Type: applicati…

[image] JustinBack: --header 'Api-User: system' This should be Api-Username, not Api-User This header is only used for “all user” api keys, so that’s why it worked when you scoped the key to a specific user.

Ah alright, was that changed recently? As I had in mind that the header is Api-User

Accès invalide utilisant la clé globale sur tous les utilisateurs

Dev

JustinBack (Justin René Back) Novembre 29, 2020, 6:52 3

Ah d’accord, cela a-t-il changé récemment ? Car j’avais en tête que l’en-tête était Api-User

Sujet		Réponses	Vues
Generate/Regenerate api_key for a user API not working Development rest-api	4	1004	Décembre 6, 2019
Issues using API with long-established/working key Support	2	430	Avril 20, 2022
Unable to edit topic via API despite topic write access Bug rest-api	4	798	Mars 4, 2022
Newly enforced api_username restriction? Development rest-api	4	642	Octobre 29, 2020
404 when trying to create an API key for system user Bug	3	1368	Août 11, 2020

Accès invalide utilisant la clé globale sur tous les utilisateurs

Sujets connexes