The following warnings occurred:
Warning [2] Undefined variable $unreadreports - Line: 26 - File: global.php(961) : eval()'d code PHP 8.2.25 (Linux)
File Line Function
/global.php(961) : eval()'d code 26 errorHandler->error
/global.php 961 eval
/showthread.php 28 require_once





× This forum is read only. As of July 23, 2019, the UserSpice forums have been closed. To receive support, please join our Discord by clicking here. Thank you!
UserSpice   ›   Support Center   ›   UserSpice 4.4   ›   authentication to access API

  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
authentication to access API
ivinsons
mgvesGD
Joined: Dec 2018
Posts: 7

Reputation: 0
#1
12-16-2018, 09:51 PM
Hello people!
I am an enthusiast of the Userspice but I confess that I participate little in the forum!

But I have a challenge of doing an authentication to access API functions, via REST or any other way.

What is the best practice to do this?
Do you have an example?

Thank you guys!

Ivinson (Brazil)
  Reply
mudmin
Lead Developer
*******
Joined: Dec 2015
Posts: 2,285

Reputation: 17
#2
12-16-2018, 10:09 PM
Welcome! I am not at a computer right now, but I am a big fan of requiring people to register separately for an API key. If they will be connecting server to server, I am a big fan of locking the API key to an IP address for security. Can you give me an idea of how you want people to use the API?
  Reply
ivinsons
mgvesGD
Joined: Dec 2018
Posts: 7

Reputation: 0
#3
12-16-2018, 10:38 PM
(12-16-2018, 10:09 PM)mudmin Wrote: Welcome! I am not at a computer right now, but I am a big fan of requiring people to register separately for an API key. If they will be connecting server to server, I am a big fan of locking the API key to an IP address for security. Can you give me an idea of how you want people to use the API?

Thank you so much for replying so promptly! (Forgive my English by Google Traslate hahahaha)

I will use the userspice to build a PWA, for associates of a health management company.

It has some partnerships that will access some information (check the status of the associate, see validity of the card, etc ...) via API. So I thought I could skip the login part, and generate an APIKey for each partner.

Do you think this is a good strategy?
  Reply
mudmin
Lead Developer
*******
Joined: Dec 2015
Posts: 2,285

Reputation: 17
#4
12-16-2018, 10:42 PM
I think that is fine. I am traveling so I can not help over the next few days but if you need help , let me know.
  Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)