openVulnQuery authorization issues

[rstraube]

Hi team,

I've followed the instructions and still get authorization errors while using openVulnQuery. So, I've registered an app on apiconsole.cisco.com with app type Service and grant type Client Credentials for Cisco PSIRT openVuln API. Unfortunately, the provided client id and secret don't seem to work.

Using the credentials with Postman, I can get the Bearer token but subsequent queries fail with "Not Authorized".

Using openVulnQuery, I get the following error messages:

requests.exceptions.HTTPError: 401 Client Error: Unauthorized for url: https://cloudsso.cisco.com/as/token.oauth2?client_id=p3bfx...&client_secret=WRCD...

What's wrong here? Any help would be appreciated.

cheers
rene

[PR Oxman · Accepted solution]

Hello Rene,

Application registered before March 1,2023 will be using URL https://cloudsso.cisco.com/as/token.oauth2 (being deprecated). For Application created beginning March 1, 2023 you will use https://id.cisco.com/oauth2/default/v1/token.

See https://raw.githubusercontent.com/api-at-cisco/Images/master/Whats_New_Doc.pdf for more information.

HTH

[rstraube]

Thanks Paul, great information. I did not recognize the new domain for the API endpoint. It helped to get my Postman queries working now.

openVulnQuery (https://github.com/CiscoPSIRT/openVulnQuery) still does not work with old token generation URL.

cheers
rene

[PR Oxman]

Thanks Rene,
I will check the OpenVulnQuery code. It will need to be updated.

Will try to get to that this week. Or at least prior to May 1st.

Regards

[PR Oxman]

Hello
Changes to OpenVulnQuery were submitted and accepted to main branch; to support the new API changes.

Thanks.