topic Re: openVulnQuery authorization issues in Services Discussions

openVulnQuery authorization issues

rstraube — Thu, 06 Apr 2023 07:17:43 GMT

Hi team,

I've followed the instructions and still get authorization errors while using openVulnQuery. So, I've registered an app on apiconsole.cisco.com with app type Service and grant type Client Credentials for Cisco PSIRT openVuln API. Unfortunately, the provided client id and secret don't seem to work.

Using the credentials with Postman, I can get the Bearer token but subsequent queries fail with "Not Authorized".

Using openVulnQuery, I get the following error messages:

requests.exceptions.HTTPError: 401 Client Error: Unauthorized for url: https://cloudsso.cisco.com/as/token.oauth2?client_id=p3bfx...&client_secret=WRCD...

What's wrong here? Any help would be appreciated.

cheers
rene

Re: openVulnQuery authorization issues

PR Oxman — Tue, 11 Apr 2023 02:34:15 GMT

Hello Rene,

Application registered before March 1,2023 will be using URL https://cloudsso.cisco.com/as/token.oauth2 (being deprecated). For Application created beginning March 1, 2023 you will use https://id.cisco.com/oauth2/default/v1/token.

See https://raw.githubusercontent.com/api-at-cisco/Images/master/Whats_New_Doc.pdf for more information.

HTH

Re: openVulnQuery authorization issues

rstraube — Tue, 11 Apr 2023 07:36:57 GMT

Thanks Paul, great information. I did not recognize the new domain for the API endpoint. It helped to get my Postman queries working now.

openVulnQuery (https://github.com/CiscoPSIRT/openVulnQuery) still does not work with old token generation URL.

cheers
rene

Re: openVulnQuery authorization issues

PR Oxman — Tue, 11 Apr 2023 07:45:27 GMT

Thanks Rene,
I will check the OpenVulnQuery code. It will need to be updated.

Will try to get to that this week. Or at least prior to May 1st.

Regards

Re: openVulnQuery authorization issues

PR Oxman — Wed, 12 Apr 2023 22:25:27 GMT

Hello
Changes to OpenVulnQuery were submitted and accepted to main branch; to support the new API changes.

Thanks.