topic Re: Upgrade 20.04, twistcli Status: 401 Unauthorized in Prisma Cloud Discussions

Upgrade 20.04, twistcli Status: 401 Unauthorized

TommyHunt — Mon, 07 Feb 2022 23:23:13 GMT

Given upgrade Prisma Cloud SaaS from 19.11 to 20.04

And Administrator role

And old API key deactivated

And new API key created

And new twistlock binary downloaded to workstation

When I invoke twistcli images scan --token $token --details --address https://us-east1.cloud.twistlock.com/us-1-111574323 iarcgisserver:latest

Then it replies Status: 401 Unauthorized
GET https://us-east1.cloud.twistlock.com/us-1-111574323/api/v1/version failed.
Error:

However, Given the same criteria above

When I invoke curl --request GET --url https://us-east1.cloud.twistlock.com/us-1-111574323/api/v1/version --header 'accept: application/json; charset=UTF-8' --header "x-redlock-auth: $token"
Then it replies "20.04.163"

What am I doing wrong?

Re: Upgrade 20.04, twistcli Status: 401 Unauthorized

TommyHunt — Fri, 08 May 2020 19:07:25 GMT

Can I recognize this problem and its solution?

twistlock apis SUCCEED to authorize with prisma cloud token

curl --request POST \
--url https://api.prismacloud.io/login \
--header 'accept: application/json; charset=UTF-8' \
--header 'content-type: application/json; charset=UTF-8' \
--data '{"username":"ur_key","password":"ur_secret","customerName":"ur_mnemonic"}'

twistcli FAIL to authorize with prisma cloud token, you must use a twistlock token.

curl -sk https://us-east1.cloud.twistlock.com/us-1-111574323/api/v1/authenticate -H 'Content-Type: application/json' -d '{"username":"ur_key","password":"ur_secret"}'

Re: Upgrade 20.04, twistcli Status: 401 Unauthorized

NSheridan-Smith — Mon, 03 Jul 2023 07:25:39 GMT

If you are downloading `twistcli` make sure you have the right API endpoints. Use /.../api/v.../authenticate on the specific instance relevant to your tenant.

https://europe-west3.cloud.twistlock.com/eu-2-143566881/api/v30.02/util/arm64/twistcli and https://europe-west3.cloud.twistlock.com/eu-2-143566881/api/v30.02/util/twistcli
download successfully with the Authorization: header.

Authorization: Bearer <jwt>