Skip to main content

Weaviate Authentication Token With Hostname

Description

General

  • Documentation: https://docs.weaviate.io/weaviate/api/rest
  • Summary: The Weaviate REST API supports services to manage schema (collections, properties, shards, tenants, and aliases), data objects and cross-references, batch operations, backups, server and cluster metadata, node information, health and OIDC configuration, GraphQL queries, classification jobs, replication tasks, users, role-based authorization, and distributed tasks. This detector finds a personal token combined with a hostname. These can be used to authenticate requests.

Revoke the secret

Tokens can be rotated both in the user dashboard as well as through the API: Rotating the token through the API is a two-step process:

  1. Make a GET request to https://{WEAVIATE_HOST}/v1/users/own-info with an Authorization header of 'Bearer CURRENT_TOKEN' 2. Retrieve the user ID from the 'username' property of the JSON response 3. Make a POST request to https://{WEAVIATE_HOST}/users/db/{USER_ID}/rotate-key with an Authorization header of 'Bearer CURRENT_TOKEN'

Details for Weaviate Authentication Token With Hostname

  • Family: token

  • Category: data_storage

  • High recall: True

  • Validity check available: True

  • Analyzer available: False

  • On-premise instances exist: False

  • Only valid secrets raise an alert: False

  • Minimum number of matches: 2

  • Occurrences found for one million commits: 0.48

  • Prefixed: True