Requests module does not handle redirects by default.

[SimSama]

Hi friends,

Just a heads up, I noticed a TAXII 2.0 feed hosted by Anomali returns a 301 redirect to the actual endpoint. Since you use raise_for_status in the code it expects a 2xx error code to assume success.

Endpoint advertised by Anomli: https://limo.anomali.com/taxii
Redirection point: https://limo.anomali.com/api/v1/taxii2/taxii/
General info (its free): https://www.anomali.com/resources/limo

Also one other quirk about requests is even if you handle this, the redirected endpoint doesn't get the authentication passed on. There is a workaround where you have to retrieve the redirect response location header value, and rebuild the request with auth. Since you are using session maybe you don't need to do that.

Anyways this will inevitably frustrate someone to no end, I ended up building my own version of a TAXII2.x client in python to work around this issue. If you get some time to fix.

Thanks,