Openapi GET Backups always returns 403 forbidden

I am messing around with the Ignition api and am trying to download a gateway backup using curl. I created an API key in my ignition gateway and I am exporting the key in my shell using export API_TOKEN. When I make my curl request to the gateway, I get a 403 forbidden response. I don't understand why or how to fix it. I tried creating a new security level under authenticated and that didn't work. I can't assign my API key to the Admin security level. What do I need to do?

Here is my curl command:

curl -v \
-H "X-Ignition-API-Token: $API_TOKEN" \
-o gateway-backup.gwbk \
"http://$GW_ADDR:8088/data/api/v1/backup"

Did you deselect the check box when creating the api token.

Oy! Crazy-talk!

Eh.

  1. You should absolutely be using TLS.
  2. You may still need to turn this checkbox off if you're terminating TLS at a reverse proxy.