API to put Multiple resource in SDT getting Authentication failed

Question

Experts,I am trying to write a script to put multiple resources in SDT via API. However, the script fails with the error: "Authentication failed", "status":1401. This indicates that the API is rejecting my request.The API credentials are correct, as I am successfully using them for other API calls.Has anyone encountered a similar issue? Your insights would be highly appreciated.

mike_moniz · Answer

Are you using LMv1 auth? Are you need to include the post data into the signature header hash?

smahamulkar · Answer

Thanks Mike for your reply.Below is the code i am trying to execute.def generate_signature(http_verb, resource_path, request_body=""):&nbsp; &nbsp; timestamp = str(int(time.time() * 1000)) &nbsp;# Current time in milliseconds&nbsp; &nbsp; request_vars = http_verb + timestamp + request_body + resource_path&nbsp;&nbsp; &nbsp; hmac_digest = hmac.new(ACCESS_KEY.encode(), msg=request_vars.encode(), digestmod=hashlib.sha256).digest()&nbsp; &nbsp; signature = base64.b64encode(hmac_digest).decode()&nbsp;&nbsp; &nbsp; return signature, timestamp# Function to get device ID by hostnamedef get_device_id(hostname):&nbsp; &nbsp; resource_path = f"/device/devices?filter=displayName:{hostname}"&nbsp; &nbsp; url = BASE_URL + resource_path&nbsp;&nbsp; &nbsp; signature, timestamp = generate_signature("GET", resource_path)&nbsp;&nbsp; &nbsp; headers = {&nbsp; &nbsp; &nbsp; &nbsp; "Authorization": f"LMv1 {ACCESS_ID}:{signature}:{timestamp}",&nbsp; &nbsp; &nbsp; &nbsp; "Content-Type": "application/json"&nbsp; &nbsp; }&nbsp; &nbsp; print("
🔍 Debugging Authentication:")&nbsp; &nbsp; print(f"🔹 Access ID: {ACCESS_ID}")&nbsp; &nbsp; print(f"🔹 Generated Signature: {signature}")&nbsp; &nbsp; response = requests.get(url, headers=headers, verify=False) &nbsp;# Ignore SSL warning&nbsp;&nbsp; &nbsp; # 🔹 Debugging: Print the response before parsing&nbsp; &nbsp; print(f"
🔍 Debugging API Response for {hostname}:")&nbsp; &nbsp; print(f"🔹 Status Code: {response.status_code}")&nbsp; &nbsp; print(f"🔹 Response Text: {response.text}")&nbsp; &nbsp; print(f"🔹 Timestamp: {timestamp}")&nbsp; &nbsp; # 🔹 Check if API returned success before parsing JSON&nbsp; &nbsp; if response.status_code == 200:&nbsp; &nbsp; &nbsp; &nbsp; try:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; data = response.json()&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if data is None:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; print(f"❌ API returned None for {hostname}. Possible issue with API.")&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return None&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; devices = data.get("data", {}).get("items", [])&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return devices[0]["id"] if devices else None&nbsp; &nbsp; &nbsp; &nbsp; except json.JSONDecodeError:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; print(f"❌ Failed to decode JSON for {hostname}: {response.text}")&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return None&nbsp; &nbsp; else:&nbsp; &nbsp; &nbsp; &nbsp; print(f"❌ API Error ({response.status_code}): {response.text}")&nbsp; &nbsp; &nbsp; &nbsp; return None

mike_moniz · Answer

If I'm reading that code right (python?) it is just getting an device and not attempting to set an SDT. Is that GET call also failing? When you said other APIs calls work, which do work and which don't?
I don't see an obvious issue with the code, although I don't know python well. Does it work if you don't try to filter the device by displayName and just get all devices? If possible you may want to see if you can verify you are generating the correct signature? Perhaps try making the call in something like Postman?
P.S. I'm feeling old, in that people use emoji in debug messages now... but I should try that! :)

saqlain · Answer

Hi smahamulkar &amp; mike,I am getting the ssl certificate error while executing the script in Vscode for adding the "Add a One-Time Device SDT:(Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1018)'))you guys have any idea how to solve&nbsp;i have performed following command :&nbsp;pip install certifisudo update-ca-certificatespip install requestspip install certifi

jwoerner · Answer

We assign an API role to the user account we utilize for API calls. To put a resource into SDT requires more than read/only. We have the role able to manage resources, but there may be a middle ground.