howler-sentinel-plugin 0.2.0.dev19__tar.gz → 0.2.0.dev21__tar.gz

{howler_sentinel_plugin-0.2.0.dev19 → howler_sentinel_plugin-0.2.0.dev21}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: howler-sentinel-plugin
-Version: 0.2.0.dev19
+Version: 0.2.0.dev21
 Summary: A howler plugin for integration with Microsoft's Sentinel API
 License: MIT
 Author: CCCS

{howler_sentinel_plugin-0.2.0.dev19 → howler_sentinel_plugin-0.2.0.dev21}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "howler-sentinel-plugin"
-version = "0.2.0.dev19"
+version = "0.2.0.dev21"
 description = "A howler plugin for integration with Microsoft's Sentinel API"
 authors = [{ name = "CCCS", email = "analysis-development@cyber.gc.ca" }]
 license = { text = "MIT" }

{howler_sentinel_plugin-0.2.0.dev19 → howler_sentinel_plugin-0.2.0.dev21}/sentinel/routes/ingest.py

@@ -28,11 +28,12 @@ def ingest_alert(**kwargs):
 
     Result Example:
     """
-    if apikey := request.headers.get("Authorization", "Basic ", type=str).split(" ")[1]:
-        logger.info("Recieved authorization header with value %s", re.sub(r"^(.{3}).+(.{3})$", r"\1...\2", apikey))
+    apikey = request.headers.get("Authorization", "Basic ", type=str).split(" ")[1]
 
-        if apikey != SECRET:
-            return unauthorized(err="API Key does not match expected value.")
+    if not apikey or apikey != SECRET:
+        return unauthorized(err="API Key does not match expected value.")
+
+    logger.info("Recieved authorization header with value %s", re.sub(r"^(.{3}).+(.{3})$", r"\1...\2", apikey))
 
     sentinel_alert = request.json