search

cerebrate-project / cerebrate

Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other security tools.
https://www.cerebrate-project.org/
GNU Affero General Public License v3.0
83 stars 16 forks source link

Login via API possible? #52

Closed ghost closed 3 years ago

ghost commented 3 years ago

Hi,

is there a way to login via some kind of API (which does not require a Browser or other logic to fulfil the CSRF token stuff) to do some basic monitoring of the Cerebrate "health"?

mokaddem commented 3 years ago

Hey, Indeed, we were missing that. It has been fixed on the develop branch in https://github.com/cerebrate-project/cerebrate/commit/1f8010a6ec278e6020f5479bd5ab526e2cbf2064

It allows using HTTP POST without requiring to have CSRF tokens. HTTP GET should have worked nonetheless.

Similar to MISP, you have to pass the API key as an Authorization header.

Thanks for the heads up!

ghost commented 3 years ago

Thanks, that works!