#community-help

'x-typesense-api-key' Error During Collection Creation

TLDR Jameshwart experienced a misleading error during collection creation. Jason and Kishore Nallan explained security measures and mentioned possible improvements for error logs in Typesense Cloud.

1mo

Join the chat

Aug 18, 2023 (1 month ago)

Photo of md5-283d3397742c32cc2b6be6bda508c03e

Jameshwart

01:06 AM

hi guys we had issue on creating collections where the error is

a valid `x-typesense-api-key` header must be sent

The error above is a bit misleading because it is not directly telling us that the api key I am using is not allowed to create a new schema

Photo of md5-8813087cccc512313602b6d9f9ece19f

Jason

01:07 AM

That’s by design. You don’t want a malicious actor to get insight into whether a key is valid and just doesn’t have enough permissions, or if it’s completely invalid

Jameshwart

01:09 AM

thats fine. Im just sharing because it took me half of my day trying to debug what was wrong when I can create other collections and I did not know that creating a collections can be restricted

Photo of md5-4e872368b2b2668460205b409e95c2ea

Kishore Nallan

01:48 AM

We do provide additional information in the logs, but in Typesense Cloud these logs are not exposed. So that's something we can allow in future. Thanks for the feedback.

Typesense

Lightning-fast, open source search engine for everyone | Knowledge Base powered by Struct.AI

Indexed 2764 threads (79% resolved)

Join Our Community Manage subscription

Similar Threads

Resolving Issues with Scoped API Keys in Typesense with Golang

Suvarna had problems with generating and using scoped API keys in Typesense with Golang. Several bugs misleading the user were found and fixed by Kishore Nallan.

158

24mo

Querying About Scoped API Keys Usage in Typesense

Rajeev requested information about appropriate scoped API keys for a retrieve call on a collection in Typesense. Jason clarified that `collections:get` is the appropriate key needed.

14mo

Debugging Typesense API Key Error

James is getting an error related to the `x-typesense-api-key` header in their Typesense project. Harrison suggests passing the API key in the HTTP header, and Jason advises checking the key via curl and possibly closing a duplicate Typesense server.

20mo