cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Who Me Too'd this topic

Cisco PSIRT openVuln API oauth2 Token "Not Authorized"

lukas.leung
Level 1
Level 1

Greetings,

I am currently attempting to gain access to the PSIRT openVuln API and am following along with the "Getting Started" directions. So far, I have registered an application for "Cisco PSIRT openVuln API" using my CCO ID with the Grant Type: "Client Credentials".  My application has a Status of "active" and I have a corresponding Client ID and Client Secret.


I am currently having issues with getting a valid access_token (step 3) and would like to know if I am using the correct methodology.


Via Postman:

My GET request is: https://api.cisco.com/security/advisories/cvrf/all (as specified in the API)

Under the "Authorization" tab, I have set my Type to "OAuth 2.0" and clicked "Get New Access Token"

When I send the request I get back:

     <h1>Not Authorized</h1>

I have also gone through the Curl walk-through posted by Omar, however this also did not work even when running it in Postman as recommended by Bradley here.

my command: curl -s -k -H "Content-Type: application/x-www-form-urlencoded" -X POST -d "client_id=<client_id>" -d "client_secret=<client_secret>" -d "grant_type=client_credentials" https://cloudsso.cisco.com/as/token.oauth2

(I get no response from this)

Am I using the wrong URLs or even going about this in an entirely wrong manner?

Thank you for your time.

Who Me Too'd this topic