[Security Solution] Wrong API return for detection Engine #94550
Labels
bug
Fixes for quality problems that affect the customer experience
Feature:Rule Management
Security Solution Detection Rule Management area
impact:medium
Addressing this issue will have a medium level of impact on the quality/strength of our product.
Team:Detection Rule Management
Security Detection Rule Management Team
Team:Detections and Resp
Security Detection Response Team
Team: SecuritySolution
Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.
Describe the bug:
Trying to submit a detection rule via API having param
enabled: true
fails with wrong error :{"message":"Unsupported scheme \"ApiKey\" for granting API Key","status_code":500}
Kibana/Elasticsearch Stack version:
ElastiCloud Deployment 7.11.1
Server OS version:
ElastiCloud
Browser and Browser OS versions:
N/A : curl 7.64.0 (x86_64-pc-linux-gnu) libcurl/7.64.0 OpenSSL/1.1.1d zlib/1.2.11 libidn2/2.0.5 libpsl/0.20.2 (+libidn2/2.0.5) libssh2/1.8.0 nghttp2/1.36.0 librtmp/2.3
Elastic Endpoint version:
N/A
Original install method (e.g. download page, yum, from source, etc.):
N/A
Functional Area (e.g. Endpoint management, timelines, resolver, etc.):
Detection rules API
Steps to reproduce:
And turn it into Base64-ready header... Test key with other requests.
$ curl -XPOST -H 'kbn-xsrf: true' -H'Content-Type: application/json;charset=UTF-8'
-H "Authorization: ApiKey $APIKEY" $ENDPOINT/api/detection_engine/rules -d '{some_rule, "enabled": true}
See it work.
Current behavior:
1st yields the error :
{"message":"Unsupported scheme \"ApiKey\" for granting API Key","status_code":500}
2nd works.
Expected behavior:
Both requests return HTTP/200
The text was updated successfully, but these errors were encountered: