Edit history

Earlier versions of api: `audit-log` endpoint does not work with bot tokens, newest first.

Current version | Edited by Rex1d ago

Changes

```When I use my user token I receive a proper response:```json{ "audit_log_entries": [ { ... }, { ... } ]}```I have ensured that the bot has view permissions, and even tested administrator permissions:[image](https://feedback.fluxer.com/p/245#f-227)### Steps to reproduce1. send CURL using bot token:```sh curl -H "Authorization: Bot {bot_token}" \ "https://web.fluxer.app/api/v1/guilds/{community_id}/audit-logs?limit=20"```2. send CURL using user token:```sh curl -H "Authorization: {user_token}" \ "https://web.fluxer.app/api/v1/guilds/{community_id}/audit-logs?limit=20"```3. Observations: Bot receives `ACCESS_DENIED`, user receives correct response.### Environment (optional)- Commit/Tag: latest web- OS: tested on Arch & macOS both in terminal### Logs or screenshots (optional)```sh❯ curl -H "Authorization: Bot {redacted}" \ "https://web.fluxer.app/api/v1/guilds/{redacted}/audit-logs?limit=20"{"code":"ACCESS_DENIED","message":"You don't have access to this resource or feature."}%``````sh❯ curl -H "Authorization: {redacted}" \ "https://web.fluxer.app/api/v1/guilds/{redacted}/audit-logs?limit=20"{"audit_log_entries":[{"id":"1474392578898948975","action_type":24,"user_id":"1470926459688796802","target_id":"1473978252332421496","changes":[{"key":"nick","old_value":null,"new_value":"Bot"}]}]}```### Checks- ☑ I searched for existing issues and didn't find a duplicate.

Show

api: `audit-log` endpoint does not work with bot tokens

Summary

When hitting the endpoint for List guild audit logs using Authorization: Bot {token} in the header, I receive this:

{"code":"ACCESS_DENIED","message":"You don't have access to this resource or feature."}%

When I use my user token I receive a proper response:

{
    "audit_log_entries": [
        { ... },
        { ... }
    ]
}

I have ensured that the bot has view permissions, and even tested administrator permissions: image

Steps to reproduce

send CURL using bot token:

curl -H "Authorization: Bot {bot_token}" \
     "https://web.fluxer.app/api/v1/guilds/{community_id}/audit-logs?limit=20"

send CURL using user token:

curl -H "Authorization: {user_token}" \
     "https://web.fluxer.app/api/v1/guilds/{community_id}/audit-logs?limit=20"

Observations: Bot receives ACCESS_DENIED, user receives correct response.

Environment (optional)

Commit/Tag: latest web
OS: tested on Arch & macOS both in terminal

Logs or screenshots (optional)

❯ curl -H "Authorization: Bot {redacted}" \
     "https://web.fluxer.app/api/v1/guilds/{redacted}/audit-logs?limit=20"

{"code":"ACCESS_DENIED","message":"You don't have access to this resource or feature."}%

❯ curl -H "Authorization: {redacted}" \
     "https://web.fluxer.app/api/v1/guilds/{redacted}/audit-logs?limit=20"

{"audit_log_entries":[{"id":"1474392578898948975","action_type":24,"user_id":"1470926459688796802","target_id":"1473978252332421496","changes":[{"key":"nick","old_value":null,"new_value":"Bot"}]}]}

Original by Rex7mo ago