-
I generated an API Key from the Infinity Portal, assigned to the Endpoint service, with the Admin role.
-
I successfully obtain a token from:
https://cloudinfra-gw-us.portal.checkpoint.com/v2/auth/externalThe response returns
"success": trueand a valid token. -
I use that token in the request header:
Authorization: Bearer <token> Content-Type: application/json -
Then I try to query endpoints using:
POST https://cloudinfra-gw-us.portal.checkpoint.com/app/harmony-endpoint-web/api/v1/endpoint/query(I also tried
/app/hec-api/v1/agents/query).
Result:
The server responds with:
403 Forbidden – perhaps check your credentials
or sometimes:
Authentication required
The token is active and valid (verified by decoding the JWT), so it doesn’t seem to be an authentication issue (401), but rather an authorization problem.