Closed
Description
[Bug] TheHive4 'follow/unfollow' API doesn't return alert objects like TheHive3 does
Request Type
Bug
Work Environment
Question | Answer |
---|---|
OS version (server) | Ubuntu 18 (Training VM) |
OS version (client) | Windows 10. |
TheHive version / git hash | 4.0 |
Package Type | Training VM |
Browser type & version | N/A |
Problem Description
TheHive blog says that TheHive v4's API should be backwards compatible with TheHive3, but the version 3 API for follow/unfollow returns the modified alert object and the version 4 API doesn't.
Steps to Reproduce
Version 4:
curl -X POST -H 'Authorization: Bearer 7ywJAe8sk9v0qCPjWF0ysrc7+Q6JouTR' -H 'Content-Type: application/json' -H 'X-Organization: TestOrg' http://thehive4.local:9000/api/alert/82100472/follow
✔
Version 3:
curl -X POST -H 'Authorization: Bearer SuGd5Aj4NNudH8unh5CpWLm4U/MYDeVc' -H 'Content-Type: application/json' http://thehive3.local:9000/api/alert/86551c0a126f54fc91bf2d88245ace18/follow
{"date":1601986293538,"severity":3,"_routing":"86551c0a126f54fc91bf2d88245ace18","updatedBy":"admin","customFields":{},"_type":"alert","description":"Testing an alert. ixjnxecd","lastSyncDate":1601986306685,"source":"Pester","title":"Test alert: ixjnxecd","type":"API","follow":true,"createdAt":1601986306680,"_parent":null,"createdBy":"admin","tlp":2,"_id":"86551c0a126f54fc91bf2d88245ace18","id":"86551c0a126f54fc91bf2d88245ace18","sourceRef":"78288","_version":2,"artifacts":[],"updatedAt":1601996256405,"status":"New"} ✔