ForitGate API access_token

thirty182 · ‎03-09-2023

Hi,

i have two Fortigate 200F (v7.0.9 build 0444) devices where GET request with access_token is working only for one of them. access_token is generated in GUI for API user. I checked rights and they are same.

Scenario:
Working Device1:

curl -X GET -g -k --noproxy '*' https://[ipv6]/api/v2/monitor/system/status?access_token=123445664785dadadasdad

{

"http_method":"GET",

"results":{

"model_name":"FortiGate",

"model_number":"200F",

"model":"FG200F",

"hostname":"Device1,

"log_disk_status":"not_available"

}

Not working Device2:

curl -X GET -g -k --noproxy '*' https://[ipv6]:8443/api/v2/monitor/system/status?access_token=asdasdasdasda5dasdadad8adsd

<title>429 Too Many Requests</title>

</head><body>

<h1>Too Many Requests</h1>

<p>The user has sent too many requests

in a given amount of time.</p>

<p>Additionally, a 429 Too Many Requests

error was encountered while trying to use an ErrorDocument to handle the request.</p>

</body></html>

however, if i create access_token with POST request using user with ADMIN rights:

curl -X POST -g -k --noproxy '*' -d '{"username":"myuser","secretkey":"hidden","ack_pre_disclaimer":true,"request_key":True,"ack_post_disclaimer":true}' -H "Content-Tye: application/json" https://[device2]:8443/api/v2/authentication

returns:

{

"status_code":5,

"status_message":"LOGIN_SUCCESS",

"session_key":"a5a5a5a5a5a5adasda8sd8sd8ewerfgfg",

"session_key_timeout":"30"

}

following GET request returns needed data:

curl -X GET -g -k --noproxy '*' https://[device2]:8443/api/v2/monitor/system/status/?access_token=a5a5a5a5a5a5adasda8sd8sd8ewerfgfg

{

"http_method":"GET",

"results":{

"model_name":"FortiGate",

"model_number":"200F",

"model":"FG200F",

"hostname":"Device2",

"log_disk_status":"not_available"

}

Does anyone had a same issue? What can be a reason?

Thanks

kgeorge · ‎03-09-2023

Hello,

Regarding the API usage/configuration on FortiGate and queries pertaining to the same, our Fortinet Developer Team's intervention is required. There is a separate forum for it.

To get access to Fortinet Developer Account, you may get in touch with your or any of the Local Fortinet Re-sellers in your location or check with Fortinet Regional Sales engineer if you know one.

You would need two sponsors from Fortinet in order to help you open a Developer Account.

Like to share this article if it helps in some way,

https://docs.fortinet.com/document/fortigate/7.2.4/administration-guide/940602/using-apis

Cheers!

Regards,

Klint George

Regards,
Klint George

ForitGate API access_token

Nominate a Forum Post for Knowledge Article Creation