remove follow-redirects behavior on api calls

[carlosmmatos]

To prevent potential compliance issues, remove the follow_redirects POST call when authenticating to CS API when auto-detecting falcon_cloud and CID. Add proper error message if wrong Falcon Cloud URL is provided.

[rnsc]

Hello @carlosmmatos ,

I'm using this collection and I'm encountering issues because the follow_redirects option is not set.
I'm not setting any specific URL to my playbook, but when I do a simple configure without calling the install role first, I always end up with an error on the API authentication.
I'm redirected from api.crowdstrike.com to api.us-2.crowdstrike.com. Does that mean that I should specifically set it to api.us-2.crowdstrike.com?
The falcon_cloud variable is indeed used in the configure role, but it's not part of the list in the README.

FYI in the code of the install role, the redirects are still followed:

ansible_collection_falcon/roles/falcon_install/tasks/api.yml

Line 10 in 6e5f130

follow_redirects: all

Error:

fatal: [REDACTED]: FAILED! => changed=false
  connection: close
  content: ''
  content_length: '0'
  date: Mon, 25 Jul 2022 13:07:06 GMT
  elapsed: 0
  location: https://api.us-2.crowdstrike.com/oauth2/token
  msg: 'Status code was 308 and not [201]: HTTP Error 308: Permanent Redirect'
  redirected: false
  server: nginx
  status: 308
  strict_transport_security: max-age=31536000; includeSubDomains
  url: https://api.crowdstrike.com/oauth2/token
  x_cs_region: us-2
  x_cs_traceid: REDACTED
  x_ratelimit_limit: '300'
  x_ratelimit_remaining: '299'

Playbook used:

- name: "include_role | crowdstrike.falcon.falcon_configure"
  include_role:
    name: crowdstrike.falcon.falcon_configure
  vars:
    falcon_tags: "{{ crowdstrike_falcon_tags }}"
  tags:
    - falcon-agent-configure

[carlosmmatos]

@rnsc You are absolutely right. This was clearly an oversight on our part and should be fixed. Both API authentication tasks should follow_redirects as we have not made any decisions on removing this feature yet.

Thanks for pointing this out.