Proxy session

[DarksideVT]

How do I get a OAuth2 token (or use any falconpy object) if I have to go through a proxy using Kerberos? I can use requests.Session() and mount the proxy auth but, I'm unable to pass the session to oauth2/token. I could use a post to oauth2/token and return the token but if I try to create a Hosts object with falconpy.Hosts(creds={"access_token": token}, proxy=proxies, session=session) it's not getting through the proxy.

[jshcodes]

In the example above we're providing access_token as a key within the creds dictionary. This should not work, as access_token is a separate keyword. If we change this to be:

falconpy.Hosts(access_token=token, proxy=proxies, session=session)

do we get the expected result?

[DarksideVT]

I have a way around it with a header. You mentioned a way to insert another header. What's the process?
The auth header looks like this:
{'Proxy-Authorization': Negotiate <secret>

[jshcodes]

If you're using the Service Class you can provide additional headers using the ext_headers keyword.

So something along the lines of ...

from falconpy import Hosts

extra_header = {"X-SOME-SORT-OF-HEADER": "Some sort of value"}
hosts = Hosts(client_id=CLIENT_ID, client_secret=CLIENT_SECRET, proxy=proxies, ext_headers=extra_header)

[DarksideVT]

I was afraid of that. I tried that and thought it was wrong because I still get an Auth error from the proxy.

[jshcodes]

Is there a way for us to review the request the proxy is receiving? We can confirm that there isn't an issue with the ext_headers keyword.

Do you have a link to the auth header requirements?

[jshcodes]

We can also try using the Uber Class, if it's just an issue with ext_headers, that might work. (Depends on when the auth event happens. This may need to also be looked at.)

from falconpy import APIHarness

extra_header = {"X-SOME-SORT-OF-HEADER": "Some sort of value"}

uber = APIHarness(client_id=CLIENT_ID, client_secret=CLIENT_SECRET, proxy=proxies)

result = uber.command("QueryDevicesByFilterScroll", headers=extra_header)

[DarksideVT]

Is there a way for us to review the request the proxy is receiving? We can confirm that there isn't an issue with the ext_headers keyword.

Do you have a link to the auth header requirements?

Unfortunately, there is no easy way to do this, and it doesn't seem like using the Uber class changes anything.

[DarksideVT]

Is there a way to use a kerberos ticket file? That's how other people are getting through the proxy.

[jshcodes]

Reading some of the discussion around this, it looks to be potentially doable (with some changes and testing). This is definitely something we should investigate after 1.3.0 merges to main so we're working in the newer codebase.

I'm going to spawn a ticket to look into implementing this. Stay tuned.

[DarksideVT]

Did this get merged?

[DarksideVT]

I ask because I added an _proxy.py file and modified the _utils._functions.py locally to get it working on my Kerberos proxy. I'd like to help out with this issue if I can.

[jshcodes]

1.3.0 has merged! Package release is tomorrow. 🎉

Submit your contribution to the dev branch. This is definitely useful functionality for the SDK to support. 😄 🙇