Hi
I am following the steps generate API Credential, and run the content in the green frame directly, however it return error like below.
![](https://uploads-us-west-2.insided.com/streamsets-en/attachment/33b8827c-9d3d-4c4f-8b16-a697d511d697.png)
curl -X GET https://eu01.hub.streamsets.com/security/rest/v1/currentUser -H "Content-Type:application/json" -H "X-Requested-By:curl" -H "X-SS-REST-CALL:true" -H "X-SS-App-Component-Id: $CRED_ID" -H "X-SS-App-Auth-Token: $CRED_TOKEN" -i
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 19 100 19 0 0 22 0 --:--:-- --:--:-- --:--:-- 22HTTP/1.1 403 Forbidden
content-length: 19
content-type: text/plain
content-security-policy: object-src 'none';script-src 'self' https://cdn.cookielaw.org https://privacyportal.onetrust.com https://geolocation.onetrust.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://js.userflow.com https://cdn.userflow.com;style-src 'self' https://fonts.googleapis.com https://js.userflow.com https://cdn.userflow.com 'unsafe-inline';worker-src blob: ;base-uri 'self';frame-ancestors 'none';
x-frame-options: deny
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer
x-download-options: noopen
x-dns-prefetch-control: off
strict-transport-security: max-age=31536000; includeSubDomains;
permissions-policy: camera=(), microphone=(), geolocation=(), encrypted-media=(), payment=(), usb=()
date: Wed, 10 Jul 2024 08:57:14 GMT
server: istio-envoy
RBAC: access denied