401 unauthorized with opensearch-go

Security
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
go 1.22.4
github.com/opensearch-project/opensearch-go/v4 v4.1.0

Describe the issue:
infoResp, err := client.Info(context.Background(), nil)
this line of code always get 401 unauthorized

but I can curl to OpenSearch with the same address, username, and password
and response is 200 success

Relevant Logs or Screenshots:

Screenshot 2567-07-16 at 17.29.40
Screenshot 2567-07-16 at 17.29.401110×984 85.7 KB

2

Hi @inkxk ,

Could you please share your code in a text format?

3 
func InitSession() {
	client, err := opensearchapi.NewClient(
		opensearchapi.Config{
			Client: opensearch.Config{
				Transport: &http.Transport{
					TLSClientConfig: &tls.Config{InsecureSkipVerify: true},
				},
				Addresses: []string{config.GetEnv(`OPS_LOG_ADDR`)},
				Username:  config.GetEnv(`OPS_LOG_USER`),
				Password:  config.GetEnv(`OPS_LOG_PASS`),
			},
		},
	)
	if err != nil {
		fmt.Println("Error creating the client:", err)
		return
	}

	// Perform a basic request to check connectivity
	infoResp, err := client.Info(context.Background(), nil)
	if err != nil {
		fmt.Println("Error sending request:", err)
		return
	}

	fmt.Printf("Cluster INFO:\n  Cluster Name: %s\n  Cluster UUID: %s\n  Version Number: %s\n", infoResp.ClusterName, infoResp.ClusterUUID, infoResp.Version.Number)
}

this is my full code

4

@inkxk I’ve got it working with the following code.

    client, err := opensearch.NewClient(opensearch.Config{
        Transport: &http.Transport{
            TLSClientConfig: &tls.Config{InsecureSkipVerify: true},
        },
        Addresses: []string{"https://localhost:9200"},
        Username:  "admin", // For testing only. Don't store credentials in code.
        Password:  "Eliatra123",
    })
    if err != nil {
        fmt.Println("cannot initialize", err)
        os.Exit(1)
    }
5

I have tried this and got same error 401
Is it possible that vpc setting when creating the instance will have an effect?

6

@inkxk How did you deploy your cluster?
Do you see any errors in the OpenSearch logs?
Does your password contain any special characters? If so could you try something simpler i.e. “Eliatra123”

7

Just to double-check that you get the correct username, password, and address from your ENV variables, please add the following lines to your code:

fmt.Println("OPS_LOG_ADDR:", config.GetEnv(`OPS_LOG_ADDR`))
fmt.Println("OPS_LOG_USER:", config.GetEnv(`OPS_LOG_USER`))
fmt.Println("OPS_LOG_PASS:", config.GetEnv(`OPS_LOG_PASS`))
8

yeah, I check it and it’s correct

9

@inkxk Do you see any errors in the OpenSearch logs?