Project

General

Profile

Actions
Copy link

Feature #8852

open

add token-based authentication feature for API

Added by Joseph Magen almost 10 years ago. Updated over 6 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
API
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:
Pull request:
https://github.com/theforeman/foreman/pull/2052
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Related issues 3 (0 open — 3 closed)

Related to Hammer CLI - Feature #8888: hammer auth should support token based authenticationClosedTomáš StrachotaActions
Related to Foreman - Feature #1301: Consider adding a per-user API keyClosedTimo GoebelActions
Related to Hammer CLI - Feature #8923: Ability to use Negotiate/Kerberos authentication to API and hammerClosedOndřej EzrActions
Actions
Copy link
 #1

Updated by Dominic Cleal almost 10 years ago

Of what sort? We have OAuth support (#1576), session support and #1301 suggests per-user support too, which'd be good. Not to mention SSO type auth too...

It'd be nice not to add yet more types of authentication unless necessary, each one has introduced new security flaws.

Actions
Copy link
 #2

Updated by The Foreman Bot almost 10 years ago

  • Status changed from Assigned to Ready For Testing
  • Pull request https://github.com/theforeman/foreman/pull/2052 added
  • Pull request deleted ()
Actions
Copy link
 #3

Updated by Joseph Magen almost 10 years ago

The idea is the same as features #1301 and #8016. The background is authenticating once with user/pass to get a token (which by default lasts for 2 hours) to make future api/calls rather sending user/pass on every API call in the header.

Actions
Copy link
 #4

Updated by Tomáš Strachota almost 10 years ago

  • Related to Feature #8888: hammer auth should support token based authentication added
Actions
Copy link
 #5

Updated by Dominic Cleal almost 10 years ago

  • Related to Feature #1301: Consider adding a per-user API key added
Actions
Copy link
 #6

Updated by Jan Pazdziora almost 10 years ago

Dominic Cleal wrote:

We have OAuth support (#1576), session support ...

How is session support related to this bearer token support? Is it the same?

Actions
Copy link
 #7

Updated by Jan Pazdziora almost 10 years ago

  • Related to Feature #8923: Ability to use Negotiate/Kerberos authentication to API and hammer added
Actions
Copy link
 #8

Updated by Dominic Cleal almost 10 years ago

Jan Pazdziora wrote:

Dominic Cleal wrote:

We have OAuth support (#1576), session support ...

How is session support related to this bearer token support? Is it the same?

A user who has authed via the usual login page will have a Rails session and cookie, which works to auth against the API. Katello (an Angular app I believe) relies on this as the client-side JavaScript queries the API using the active session.

Actions
Copy link
 #9

Updated by Joseph Magen almost 9 years ago

  • Status changed from Ready For Testing to New
  • Assignee deleted (Joseph Magen)

Switched status back to New. Simon, can you take a look at this?

Actions
Copy link
 #10

Updated by Tomer Brisker over 6 years ago

  • Target version deleted (1.7.2)
Actions
Copy link

Also available in: Atom PDF