[backend/frontend] Introduce TAXII push endpoints #9471
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Concept here is to offer a way for OpenCTI to receive POST request compliant with TAXII https://docs.oasis-open.org/cti/taxii/v2.1/os/taxii-v2.1-os.html
You can create in the UI some TAXII push definition that will open a dedicated queue for TAXII push.
Example of push
POST http://localhost:3000/taxii2/root/collections/5900ea97-db72-4ecb-8f1e-c8583deb746a/objects
JSON Body
JSON response
Stix 2 or 2.1 is supported
Id can then be used to get the integration job statistic as defined in the TAXII specification.
GET http://localhost:3000/taxii2/root/status/work_0724b040-e9a6-59dd-877d-e8edb098b4cc_2024-12-27T14:53:17.605Z
Taxii Push listing
![image](https://private-user-images.githubusercontent.com/285555/398985594-2d6061b0-d434-4e4f-a465-20aea6ddf03e.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MzkxNzAwNTYsIm5iZiI6MTczOTE2OTc1NiwicGF0aCI6Ii8yODU1NTUvMzk4OTg1NTk0LTJkNjA2MWIwLWQ0MzQtNGU0Zi1hNDY1LTIwYWVhNmRkZjAzZS5wbmc_WC1BbXotQWxnb3JpdGhtPUFXUzQtSE1BQy1TSEEyNTYmWC1BbXotQ3JlZGVudGlhbD1BS0lBVkNPRFlMU0E1M1BRSzRaQSUyRjIwMjUwMjEwJTJGdXMtZWFzdC0xJTJGczMlMkZhd3M0X3JlcXVlc3QmWC1BbXotRGF0ZT0yMDI1MDIxMFQwNjQyMzZaJlgtQW16LUV4cGlyZXM9MzAwJlgtQW16LVNpZ25hdHVyZT03ZWU4ZjIzYTc1Yjc4NGNjMDhkM2ZiMWEwN2VhMzY3YWVhNWRjNDY2MTY3NmVmYjMyYTIyZjUxZjVlZDYxODRiJlgtQW16LVNpZ25lZEhlYWRlcnM9aG9zdCJ9.ywUkL7iMyZ9ABuGcD2gJ_G0y1DIvwBvw7qkbReg1nEY)
Taxii push virtual connector
![image](https://private-user-images.githubusercontent.com/285555/398985430-a8992488-fd7a-4073-8ae7-52c57f49b8f4.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MzkxNzAwNTYsIm5iZiI6MTczOTE2OTc1NiwicGF0aCI6Ii8yODU1NTUvMzk4OTg1NDMwLWE4OTkyNDg4LWZkN2EtNDA3My04YWU3LTUyYzU3ZjQ5YjhmNC5wbmc_WC1BbXotQWxnb3JpdGhtPUFXUzQtSE1BQy1TSEEyNTYmWC1BbXotQ3JlZGVudGlhbD1BS0lBVkNPRFlMU0E1M1BRSzRaQSUyRjIwMjUwMjEwJTJGdXMtZWFzdC0xJTJGczMlMkZhd3M0X3JlcXVlc3QmWC1BbXotRGF0ZT0yMDI1MDIxMFQwNjQyMzZaJlgtQW16LUV4cGlyZXM9MzAwJlgtQW16LVNpZ25hdHVyZT1mNjQwNjRkODkwZDc5ODE1MWY1NTg0ZWM0MjA4ZGMwZjFhZWMwNDQxNmFiNmM1MGFkMWYyOWU0Y2Q5N2NlN2UxJlgtQW16LVNpZ25lZEhlYWRlcnM9aG9zdCJ9.FAGv470gotQEsIEH-53upbim4FY9p7EukmQq-O-NM00)