Details
-
Suggestion
-
Resolution: Unresolved
Description
REST API Token authorization is allowed only for [repository]/scan endpoint.
It would be nice to allow to use it on /rescan and other safe endpoints as well.
Workaround
Create an user with admin privileges and use his API token to authenticate all HTTP requests to REST API