Authentication

Authentication

You can choose to use no authentication by selecting anonymous or you can use the simple build-in X-Auth authentication system. You have to exchange a username and a signature for a bearer token.

Get token

You can get a token through a username and it's signature. The signature consists out of an HMAC SHA-256 hash of the username that has been signed with the password and encoded in base-64.

Request

POST /Authenticate

{"Username": "username", "Signature": "ZwoUe/TpignBFkY9/PCJ43vIo4PK62ydMKDRX2q4EMk="}

Response

{
    Token: "b156070548054806a3c8095eb83a8ddbb9f0b725bc9b42548b76b4fd448c7f8a"
}

Authorizing a request

All requests need to be authorized with the bearer token you just generated on the /Authenticate endpoint. To authorize a request you simply add the Authorization header with the bearer token to the request.

Authorization header

Authorization: Bearer b156070548054806a3c8095eb83a8ddbb9f0b725bc9b42548b76b4fd448c7f8a