AnsweredAssumed Answered

QualysGuard WAS API V3 -- login issue

Question asked by Q Nimbus on Mar 2, 2012
Latest reply on Mar 7, 2012 by Q Nimbus

The new WAS API does returns a response code 200 OK even if one does not pass credentials:

 

>>> result = urllib2.urlopen(req)
>>> xml = result.read()
>>> xml
'<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="https://qualysapi.qualys.com/qps/xsd/3.0/was/webapp.xsd">\n  <responseCode>INVALID_CREDENTIALS</responseCode>\n  <responseErrorDetails>\n    <errorMessage>User did not supply any authentication headers</errorMessage>\n  </responseErrorDetails>\n</ServiceResponse>'
>>> result.code
200

 

What is your workaround?

Outcomes