mercedes-benz / sechub

SecHub provides a central API to test software with different security tools.
https://mercedes-benz.github.io/sechub/
MIT License
260 stars 63 forks source link

sechub-api.sh: no authentication on anonymous api calls #3137

Closed sven-dmlr closed 4 months ago

sven-dmlr commented 4 months ago

Situation

Currently only sechub_alive_check does the curl call without sending authentication data.

In a new environment where no users are defined yet, you get a 401 even on /api/anonymous/ calls.

ToDo

Exchange curl_with_sechub_auth with curl $CURL_PARAMS for these functions: