# Heartbeat monitor api login

**URL:** <https://discuss.elastic.co/t/heartbeat-monitor-api-login/275900>\
**Category:** Beats\
**Tags:** heartbeat\
**Created:** [June 14, 2021, 8:44pm UTC](https://discuss.elastic.co/t/heartbeat-monitor-api-login/275900 "2021-06-14T20:44:54Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![rp346](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rp346/32/53882_2.png) [@rp346](https://discuss.elastic.co/u/rp346)\
**Post date:** [June 14, 2021, 8:44pm UTC](https://discuss.elastic.co/t/heartbeat-monitor-api-login/275900/1 "2021-06-14T20:44:54Z")

</div>

I want to monitor API login endpoint `/api/v1/login`. When I login using postman I get following response

```auto
{"id":"###-###-###-###-###","access_token":" ****","refresh_token":"****"}

```

I tried following in `heartbeat.yaml` reference from [here](https://www.elastic.co/guide/en/beats/heartbeat/6.8/configuration-heartbeat-options.html)

```auto
    - name: api-dev
      tags: ["api"]
      type: http
      enabled: true
      urls: ["http://nginx.dev.svc.cluster.local/api/v1/login"]
      username: 'login.monitor@example.com'
      password: '<password>'
      schedule: '@every 60s'
      check.request:
        method: POST
      check.response:
        status: 200
        json:
          - description: login status
            condition:
              equals:
                status: ok

```

but got following in kibana UI

```auto
Error
received status code 400 expecting [200]
Response Body
Body size is 67B.
{"error":"Bad Authorization header. Expected value 'Bearer <JWT>'"}

```

What i am missing here ?

---

<div class="post-metadata">

**Author:** ![ylasri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ylasri/32/86120_2.png) [@ylasri](https://discuss.elastic.co/u/ylasri)\
**Post date:** [June 14, 2021, 9:06pm UTC](https://discuss.elastic.co/t/heartbeat-monitor-api-login/275900/2 "2021-06-14T21:06:59Z")

</div>

Add authorization header as follow

```auto
  check.request:
    method: POST
    headers:
      'Authorization': 'Bearer <JWT>'

```

---

<div class="post-metadata">

**Author:** ![rp346](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rp346/32/53882_2.png) [@rp346](https://discuss.elastic.co/u/rp346)\
**Post date:** [July 2, 2021, 7:30pm UTC](https://discuss.elastic.co/t/heartbeat-monitor-api-login/275900/3 "2021-07-02T19:30:57Z")

</div>

> [@ylasri](#):
>
> `<JWT>`

This need to be `access_token` OR `refresh_token` ?

---

<div class="post-metadata">

**Author:** ![ylasri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ylasri/32/86120_2.png) [@ylasri](https://discuss.elastic.co/u/ylasri)\
**Post date:** [July 2, 2021, 8:12pm UTC](https://discuss.elastic.co/t/heartbeat-monitor-api-login/275900/4 "2021-07-02T20:12:29Z")

</div>

access\_token

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 30, 2021, 10:13pm UTC](https://discuss.elastic.co/t/heartbeat-monitor-api-login/275900/5 "2021-07-30T22:13:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.