Error in API, where can I find the log?

Etique57

Hello,

I’ve an error in the API (danger - access_denied) but I can’t seem to find a log where I could investigate the issue. It’s a read/write API with no IP check.

Do you know how I could dig into this? (it used to work - mailbox creation API).

Thanks a lot!

diekuh

Hi,

there is an API log in the mailcow UI. Perhaps your query is wrong. Please post your query here. 🙂

Etique57

diekuh ah thanks, I’ll look into it!

Etique57

Ok, my payload is the following for this command:
/api/v1/add/mailbox

attr=‘{“local_part”:“account_name”,“domain”:“domain.net”,“name”:“User ?Name”,“password”:“”,“password2”:“”,“active”:1}’

I’m pretty sure it has worked a month ago, I’m checking the API reference. Maybe I’m missing some mandatory attributes?

Etique57

From the /api endpoint, after authorizing with my API RW key, when I try the default payload I get the same “access_denied” error:
[ { "type": "danger", "log": [ "mailbox", "add", "mailbox", { "active": "1", "domain": "domain.tld", "local_part": "info", "name": "Full name", "password": "*", "password2": "*", "quota": "3072", "force_pw_update": "1", "tls_enforce_in": "1", "tls_enforce_out": "1" }, null ], "msg": "access_denied" } ]

Is this an issue?

Etique57

Ok I think the domain needs to be created first.

mikkel1156

I’m getting the same response, but domain is created.
Using a RW API key and I then get denied, the payload is correct, because if I copy-paste it into the /api swagger test, it executes it without issue. Tried regenerating the key without it helping. It accepts the key, because I use the same one for looking up the domains. It’s like it’s not actually a RW key (even tried the Read-only key just to check). Doesn’t matter if I restrict it to my IP, or if I enable Skip IP check.
{ "active": "1", "domain": "redacted.com", "local_part": "mikkel", "name": "Mikkel", "password": "fWBRwoXkBN", "password2": "fWBRwoXkBN", "quota": "200", "force_pw_update": "1", "tls_enforce_in": "1", "tls_enforce_out": "1" }