API Access Request #5288

New Issue

Closed

opened 2026-02-05 09:54:14 +03:00 by OVERLORD · 3 comments

OVERLORD commented 2026-02-05 09:54:14 +03:00

Owner

Copy Link

Originally created by @AartiNex on GitHub (May 19, 2025).

Attempted Debugging

• I have read the debugging page

Searched GitHub Issues

• I have searched GitHub for the issue.

Describe the Scenario

I create a user with Admin role and gave all the permission to it including access api request. I was able to create api token from the user account but while making postman call giving error.

{
"error": {
"message": "The owner of the used API token does not have permission to make API calls",
"code": 403
}
}

Help me resolve it please

Exact BookStack Version

v25.02.4

Log Content

Details

[2025-05-19 11:59:33] local.ERROR: The owner of the used API token does not have permission to make API calls {"exception":"[object] (BookStack\\Exceptions\\ApiAuthException(code: 403): The owner of the used API token does not have permission to make API calls at C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\app\\Http\\Middleware\\ApiAuthenticate.php:36)
[stacktrace]
#0 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\app\\Http\\Middleware\\ApiAuthenticate.php(19): BookStack\\Http\\Middleware\\ApiAuthenticate->ensureAuthorizedBySessionOrToken()
#1 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): BookStack\\Http\\Middleware\\ApiAuthenticate->handle(Object(BookStack\\Http\\Request), Object(Closure))
#2 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Routing\\Middleware\\ThrottleRequests.php(161): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request))
#3 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Routing\\Middleware\\ThrottleRequests.php(92): Illuminate\\Routing\\Middleware\\ThrottleRequests->handleRequest(Object(BookStack\\Http\\Request), Object(Closure), Array)
#4 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): Illuminate\\Routing\\Middleware\\ThrottleRequests->handle(Object(BookStack\\Http\\Request), Object(Closure))
#5 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Session\\Middleware\\StartSession.php(121): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request))
#6 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Session\\Middleware\\StartSession.php(64): Illuminate\\Session\\Middleware\\StartSession->handleStatefulRequest(Object(BookStack\\Http\\Request), Object(Illuminate\\Session\\Store), Object(Closure))
#7 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\app\\Http\\Middleware\\StartSessionIfCookieExists.php(17): Illuminate\\Session\\Middleware\\StartSession->handle(Object(BookStack\\Http\\Request), Object(Closure))
#8 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): BookStack\\Http\\Middleware\\StartSessionIfCookieExists->handle(Object(BookStack\\Http\\Request), Object(Closure))
#9 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Cookie\\Middleware\\EncryptCookies.php(75): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request))
#10 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): Illuminate\\Cookie\\Middleware\\EncryptCookies->handle(Object(BookStack\\Http\\Request), Object(Closure))
#11 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(127): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request))
#12 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Routing\\Router.php(807): Illuminate\\Pipeline\\Pipeline->then(Object(Closure))
#13 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Routing\\Router.php(786): Illuminate\\Routing\\Router->runRouteWithinStack(Object(Illuminate\\Routing\\Route), Object(BookStack\\Http\\Request))
#14 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Routing\\Router.php(750): Illuminate\\Routing\\Router->runRoute(Object(BookStack\\Http\\Request), Object(Illuminate\\Routing\\Route))
#15 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Routing\\Router.php(739): Illuminate\\Routing\\Router->dispatchToRoute(Object(BookStack\\Http\\Request))
#16 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Foundation\\Http\\Kernel.php(201): Illuminate\\Routing\\Router->dispatch(Object(BookStack\\Http\\Request))
#17 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(170): Illuminate\\Foundation\\Http\\Kernel->Illuminate\\Foundation\\Http\\{closure}(Object(BookStack\\Http\\Request))
#18 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\app\\Http\\Middleware\\PreventResponseCaching.php(28): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request))
#19 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): BookStack\\Http\\Middleware\\PreventResponseCaching->handle(Object(BookStack\\Http\\Request), Object(Closure))
#20 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Http\\Middleware\\TrustProxies.php(58): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request))
#21 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\app\\Http\\Middleware\\TrustProxies.php(41): Illuminate\\Http\\Middleware\\TrustProxies->handle(Object(BookStack\\Http\\Request), Object(Closure))
#22 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): BookStack\\Http\\Middleware\\TrustProxies->handle(Object(BookStack\\Http\\Request), Object(Closure))
#23 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Foundation\\Http\\Middleware\\TransformsRequest.php(21): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request))
#24 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Foundation\\Http\\Middleware\\TrimStrings.php(51): Illuminate\\Foundation\\Http\\Middleware\\TransformsRequest->handle(Object(BookStack\\Http\\Request), Object(Closure))
#25 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): Illuminate\\Foundation\\Http\\Middleware\\TrimStrings->handle(Object(BookStack\\Http\\Request), Object(Closure))
#26 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Http\\Middleware\\ValidatePostSize.php(27): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request))
#27 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): Illuminate\\Http\\Middleware\\ValidatePostSize->handle(Object(BookStack\\Http\\Request), Object(Closure))
#28 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Foundation\\Http\\Middleware\\PreventRequestsDuringMaintenance.php(110): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request))
#29 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): Illuminate\\Foundation\\Http\\Middleware\\PreventRequestsDuringMaintenance->handle(Object(BookStack\\Http\\Request), Object(Closure))
#30 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(127): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request))
#31 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Foundation\\Http\\Kernel.php(176): Illuminate\\Pipeline\\Pipeline->then(Object(Closure))
#32 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Foundation\\Http\\Kernel.php(145): Illuminate\\Foundation\\Http\\Kernel->sendRequestThroughRouter(Object(BookStack\\Http\\Request))
#33 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\public\\index.php(23): Illuminate\\Foundation\\Http\\Kernel->handle(Object(BookStack\\Http\\Request))
#34 {main}
"} 

Hosting Environment

PHP 8.1 and xampp in local

Originally created by @AartiNex on GitHub (May 19, 2025). ### Attempted Debugging - [x] I have read the debugging page ### Searched GitHub Issues - [x] I have searched GitHub for the issue. ### Describe the Scenario I create a user with Admin role and gave all the permission to it including access api request. I was able to create api token from the user account but while making postman call giving error. { "error": { "message": "The owner of the used API token does not have permission to make API calls", "code": 403 } } Help me resolve it please ### Exact BookStack Version v25.02.4 ### Log Content <details><summary>Details</summary> <p> ``` [2025-05-19 11:59:33] local.ERROR: The owner of the used API token does not have permission to make API calls {"exception":"[object] (BookStack\\Exceptions\\ApiAuthException(code: 403): The owner of the used API token does not have permission to make API calls at C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\app\\Http\\Middleware\\ApiAuthenticate.php:36) [stacktrace] #0 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\app\\Http\\Middleware\\ApiAuthenticate.php(19): BookStack\\Http\\Middleware\\ApiAuthenticate->ensureAuthorizedBySessionOrToken() #1 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): BookStack\\Http\\Middleware\\ApiAuthenticate->handle(Object(BookStack\\Http\\Request), Object(Closure)) #2 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Routing\\Middleware\\ThrottleRequests.php(161): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request)) #3 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Routing\\Middleware\\ThrottleRequests.php(92): Illuminate\\Routing\\Middleware\\ThrottleRequests->handleRequest(Object(BookStack\\Http\\Request), Object(Closure), Array) #4 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): Illuminate\\Routing\\Middleware\\ThrottleRequests->handle(Object(BookStack\\Http\\Request), Object(Closure)) #5 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Session\\Middleware\\StartSession.php(121): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request)) #6 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Session\\Middleware\\StartSession.php(64): Illuminate\\Session\\Middleware\\StartSession->handleStatefulRequest(Object(BookStack\\Http\\Request), Object(Illuminate\\Session\\Store), Object(Closure)) #7 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\app\\Http\\Middleware\\StartSessionIfCookieExists.php(17): Illuminate\\Session\\Middleware\\StartSession->handle(Object(BookStack\\Http\\Request), Object(Closure)) #8 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): BookStack\\Http\\Middleware\\StartSessionIfCookieExists->handle(Object(BookStack\\Http\\Request), Object(Closure)) #9 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Cookie\\Middleware\\EncryptCookies.php(75): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request)) #10 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): Illuminate\\Cookie\\Middleware\\EncryptCookies->handle(Object(BookStack\\Http\\Request), Object(Closure)) #11 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(127): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request)) #12 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Routing\\Router.php(807): Illuminate\\Pipeline\\Pipeline->then(Object(Closure)) #13 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Routing\\Router.php(786): Illuminate\\Routing\\Router->runRouteWithinStack(Object(Illuminate\\Routing\\Route), Object(BookStack\\Http\\Request)) #14 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Routing\\Router.php(750): Illuminate\\Routing\\Router->runRoute(Object(BookStack\\Http\\Request), Object(Illuminate\\Routing\\Route)) #15 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Routing\\Router.php(739): Illuminate\\Routing\\Router->dispatchToRoute(Object(BookStack\\Http\\Request)) #16 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Foundation\\Http\\Kernel.php(201): Illuminate\\Routing\\Router->dispatch(Object(BookStack\\Http\\Request)) #17 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(170): Illuminate\\Foundation\\Http\\Kernel->Illuminate\\Foundation\\Http\\{closure}(Object(BookStack\\Http\\Request)) #18 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\app\\Http\\Middleware\\PreventResponseCaching.php(28): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request)) #19 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): BookStack\\Http\\Middleware\\PreventResponseCaching->handle(Object(BookStack\\Http\\Request), Object(Closure)) #20 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Http\\Middleware\\TrustProxies.php(58): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request)) #21 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\app\\Http\\Middleware\\TrustProxies.php(41): Illuminate\\Http\\Middleware\\TrustProxies->handle(Object(BookStack\\Http\\Request), Object(Closure)) #22 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): BookStack\\Http\\Middleware\\TrustProxies->handle(Object(BookStack\\Http\\Request), Object(Closure)) #23 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Foundation\\Http\\Middleware\\TransformsRequest.php(21): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request)) #24 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Foundation\\Http\\Middleware\\TrimStrings.php(51): Illuminate\\Foundation\\Http\\Middleware\\TransformsRequest->handle(Object(BookStack\\Http\\Request), Object(Closure)) #25 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): Illuminate\\Foundation\\Http\\Middleware\\TrimStrings->handle(Object(BookStack\\Http\\Request), Object(Closure)) #26 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Http\\Middleware\\ValidatePostSize.php(27): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request)) #27 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): Illuminate\\Http\\Middleware\\ValidatePostSize->handle(Object(BookStack\\Http\\Request), Object(Closure)) #28 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Foundation\\Http\\Middleware\\PreventRequestsDuringMaintenance.php(110): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request)) #29 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(209): Illuminate\\Foundation\\Http\\Middleware\\PreventRequestsDuringMaintenance->handle(Object(BookStack\\Http\\Request), Object(Closure)) #30 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Pipeline\\Pipeline.php(127): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}(Object(BookStack\\Http\\Request)) #31 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Foundation\\Http\\Kernel.php(176): Illuminate\\Pipeline\\Pipeline->then(Object(Closure)) #32 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\vendor\\laravel\\framework\\src\\Illuminate\\Foundation\\Http\\Kernel.php(145): Illuminate\\Foundation\\Http\\Kernel->sendRequestThroughRouter(Object(BookStack\\Http\\Request)) #33 C:\\Users\\AartiRamola\\Documents\\Local projects\\BookStack\\public\\index.php(23): Illuminate\\Foundation\\Http\\Kernel->handle(Object(BookStack\\Http\\Request)) #34 {main} "} ``` </p> </details> ### Hosting Environment PHP 8.1 and xampp in local

OVERLORD added the 🐕 Support label 2026-02-05 09:54:14 +03:00

OVERLORD closed this issue 2026-02-05 09:54:15 +03:00

OVERLORD commented 2026-02-05 09:54:18 +03:00

Author

Owner

Copy Link

@ssddanbrown commented on GitHub (May 19, 2025):

Hi @AartiNex,

Please ensure the user for which the API details have been created for, has a role assigned which still has the "Access System API" permission.
Also, ensure you are not using a session/cookies on the API requests from postman, as BookStack may be using the user session instead of the API credentials. This is especially likely if you're using PostMan's built in browser/cookie sync (which I think works in combination with a browser plugin).

@ssddanbrown commented on GitHub (May 19, 2025): Hi @AartiNex, Please ensure the user for which the API details have been created for, has a role assigned which still has the "Access System API" permission. Also, ensure you are not using a session/cookies on the API requests from postman, as BookStack may be using the user session instead of the API credentials. This is especially likely if you're using PostMan's built in browser/cookie sync (which I think works in combination with a browser plugin).

OVERLORD commented 2026-02-05 09:54:20 +03:00

Author

Owner

Copy Link

@nacesprin commented on GitHub (Oct 9, 2025):

Hi @AartiNex,

Please ensure the user for which the API details have been created for, has a role assigned which still has the "Access System API" permission. Also, ensure you are not using a session/cookies on the API requests from postman, as BookStack may be using the user session instead of the API credentials. This is especially likely if you're using PostMan's built in browser/cookie sync (which I think works in combination with a browser plugin).

Thanks. That Postman's issue helps me a lot!

@nacesprin commented on GitHub (Oct 9, 2025): > Hi [@AartiNex](https://github.com/AartiNex), > > Please ensure the user for which the API details have been created for, has a role assigned which still has the "Access System API" permission. Also, ensure you are not using a session/cookies on the API requests from postman, as BookStack may be using the user session instead of the API credentials. This is especially likely if you're using PostMan's built in browser/cookie sync (which I think works in combination with a browser plugin). Thanks. That Postman's issue helps me a lot!

OVERLORD commented 2026-02-05 09:54:22 +03:00

Author

Owner

Copy Link

@ssddanbrown commented on GitHub (Oct 11, 2025):

@nacesprin Good to hear that was helpful!

Since there's been no further follow-up on this issue from the original poster, I'll go ahead and close it off.

@ssddanbrown commented on GitHub (Oct 11, 2025): @nacesprin Good to hear that was helpful! Since there's been no further follow-up on this issue from the original poster, I'll go ahead and close it off.

OVERLORD referenced this issue 2026-02-05 10:33:00 +03:00

[PR #5288] [CLOSED] Add firstName and lastName variables for LDAP #6465

OVERLORD referenced this issue 2026-02-05 10:33:09 +03:00

[PR #5295] [MERGED] Added support for concatenating multiple LDAP attributes in displayName #6471

Sign in to join this conversation.

No Branch/Tag Specified

Branches Tags

development

further_theme_development

l10n_development

release

llm_only

vectors

v25-11

docker_env

drawio_rendering

user_permissions

ldap_host_failover

svg_image

prosemirror

captcha_example

fix/video-export

v25.12.3

v25.12.2

v25.12.1

v25.12

v25.11.6

v25.11.5

v25.11.4

v24.11.4

v25.11.3

v25.11.2

v25.11.1

v25.11

v25.07.3

v25.07.2

v25.07.1

v25.07

v25.05.2

v25.05.1

v25.05

v25.02.5

v25.02.4

v25.02.3

v25.02.2

v25.02.1

v25.02

v24.12.1

v24.12

v24.10.3

v24.10.2

v24.10.1

v24.10

v24.05.4

v24.05.3

v24.05.2

v24.05.1

v24.05

v24.02.3

v24.02.2

v24.02.1

v24.02

v23.12.3

v23.12.2

v23.12.1

v23.12

v23.10.4

v23.10.3

v23.10.2

v23.10.1

v23.10

v23.08.3

v23.08.2

v23.08.1

v23.08

v23.06.2

v23.06.1

v23.06

v23.05.2

v23.05.1

v23.05

v23.02.3

v23.02.2

v23.02.1

v23.02

v23.01.1

v23.01

v22.11.1

v22.11

v22.10.2

v22.10.1

v22.10

v22.09.1

v22.09

v22.07.3

v22.07.2

v22.07.1

v22.07

v22.06.2

v22.06.1

v22.06

v22.04.2

v22.04.1

v22.04

v22.03.1

v22.03

v22.02.3

v22.02.2

v22.02.1

v22.02

v21.12.5

v21.12.4

v21.12.3

v21.12.2

v21.12.1

v21.12

v21.11.3

v21.11.2

v21.11.1

v21.11

v21.10.3

v21.10.2

v21.10.1

v21.10

v21.08.6

v21.08.5

v21.08.4

v21.08.3

v21.08.2

v21.08.1

v21.08

v21.05.4

v21.05.3

v21.05.2

v21.05.1

v21.05

v21.04.6

v21.04.5

v21.04.4

v21.04.3

v21.04.2

v21.04.1

v21.04

v0.31.8

v0.31.7

v0.31.6

v0.31.5

v0.31.4

v0.31.3

v0.31.2

v0.31.1

v0.31.0

v0.30.7

v0.30.6

v0.30.5

v0.30.4

v0.30.3

v0.30.2

v0.30.1

v0.30.0

v0.29.3

v0.29.2

v0.29.1

v0.29.0

v0.28.3

v0.28.2

v0.28.1

v0.28.0

v0.27.5

v0.27.4

v0.27.3

v0.27.2

v0.27.1

v0.27

v0.26.4

v0.26.3

v0.26.2

v0.26.1

v0.26.0

v0.25.5

v0.25.4

v0.25.3

v0.25.2

v0.25.1

v0.25.0

v0.24.3

v0.24.2

v0.24.1

v0.24.0

v0.23.2

v0.23.1

v0.23.0

v0.22.0

v0.21.0

v0.20.3

v0.20.2

v0.20.1

v0.20.0

v0.19.0

v0.18.5

v0.18.4

v0.18.3

v0.18.2

v0.18.1

v0.18.0

v0.17.4

v0.17.3

v0.17.2

v0.17.1

v0.17.0

v0.16.3

v0.16.2

v0.16.1

v0.16.0

v0.15.3

v0.15.2

v0.15.1

v0.15.0

v0.14.3

v0.14.2

v0.14.1

v0.14.0

v0.13.1

v0.13.0

v0.12.2

v0.12.1

v0.12.0

v0.11.2

v0.11.1

v0.11.0

v0.10.0

v0.9.3

v0.9.2

v0.9.1

v0.9.0

v0.8.2

v0.8.1

v0.8.0

v0.7.6

v0.7.5

v0.7.4

v0.7.3

0.7.2

v.0.7.1

v0.7.0

v0.6.3

v0.6.2

v0.6.1

v0.6.0

v0.5.0

Labels

Clear labels

🎨 Design

📖 Docs Update

🐛 Bug

🐛 Bug

:cat2:🐈 Possible duplicate

💿 Database

☕ Open to discussion

💻 Front-End

🐕 Support

🚪 Authentication

🌍 Translations

🔌 API Task

🏭 Back-End

⛲ Upstream

🔨 Feature Request

🛠️ Enhancement

🛠️ Enhancement

🛠️ Enhancement

❤️ Happy feedback

🔒 Security

🔍 Pending Validation

💆 UX

📝 WYSIWYG Editor

🌔 Out of scope

🔩 API Request

:octocat: Admin/Meta

🖌️ View Customization

❓ Question

🚀 Priority

🛡️ Blocked

🚚 Export System

♿ A11y

🔧 Maintenance

> Markdown Editor

pull-request

Mirrored from GitHub Pull Request

No Label 🐕 Support

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

OVERLORD

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/BookStack#5288