API Access issue with / without SSO

Question

Hi Everyone, I am migrating discussions from another platform to a board here.

Initially we created an account that was not using SSO, so I was able to create a script that would login with user.login and user.password.

That worked all fine, however I think company admin script has likely cleaned up accounts that were not linked to an SSO account, so I am unable to proceed.

To get around that we created a new SSO account, and linked that to the API account we used earlier.

However this also means I have to get the token from the SSO client, rather than directly through username password.

I was told that I could use the LISESSIONID that is generated through a browser login and stored in a cookie, and use that. Since this is more or less a one-time exercise, that would solve my issue, however I am running in some problems.

The error message I get is that I am not authorized to make this request.

{"status":"error","message":"You are not authorized to make this request","data":{"type":"error_data","code":203,"developer_message":"","more_info":""},"metadata":{}}

The account does have API privileges, so not sure what is happening... Any help is appreciated.

Thanks,

Richard Korff

korffr · Answer

A bit more detail on the API calls. The variale LIAPISESSIONKEY is filled with the value of LISESSIONID cookie from my browser. Which runs on the same machine.curl -X POST \&nbsp;&nbsp;&nbsp; https://community.microfocus.com/api/2.0/messages \&nbsp;&nbsp;&nbsp; -H 'content-type: application/json' \&nbsp;&nbsp;&nbsp; -H "li-api-session-key: $LIAPISESSIONKEY" \&nbsp;&nbsp;&nbsp; -d '{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; "data":{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; "type":"message",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; "subject":"Test Subject",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; "body":"API Test body",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; "board":{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; "id":"Management"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }'

narendrag · Answer

Hi&nbsp;korffr&nbsp;LiSESSIONID is a cookie session id and li-api-session-key is a session token, they both are different.
instead of li-spi-session-key header, pass the LiSESSIONID as a cookie in the curl request with -b or --cookie option. It should work.
for example:
curl -X POST \&nbsp;&nbsp;&nbsp;&nbsp;https://community.microfocus.com/api/2.0/messages&nbsp;\&nbsp;&nbsp;&nbsp; -H 'content-type: application/json' \&nbsp;&nbsp;&nbsp; -b "LiSESSIONID=&lt;session_id_from_a_logged_in_cookies_section_of_your_browser&gt;" \&nbsp;&nbsp;&nbsp; -d '{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; "data":{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; "type":"message",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; "subject":"Test Subject",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; "body":"API Test body",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; "board":{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; "id":"Management"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }'

Forum Discussion

API Access issue with / without SSO

Related Content

Guide to reporting issues

Access Control Issue

How do I access a file shared through Box.com?

Access sso_id issues

Issues with batched queries

Recent Discussions

Madehgshhhhhhhhhhhhhhhhhh

Connecting Khoros data to CRM (Salesforce)

API v1 docs gone since Atlas migration to Aurora

Does anyone know how to change the display title of Custom Fields in Aurora?

Can someone walk me through authenticating and using Postman with Aurora?