Token auth for API access
Reported by Greg Schueler | June 7th, 2011 @ 11:48 AM | in Rundeck 1.3 (closed)
Add Token based authentication for API access.
- users can generate a unique API token string from their profile page
- the token can be used instead of the normal form based login method for api access
- the token can be cleared/expired from the profile page as well to disable token access
Token usage methods:
- include the token in the HTTP request as a header e.g.
X-RunDeck-Token-Auth - include the token as a URL parameter, e.g. named
authtoken.
Comments and changes to this ticket
-
-
Greg Schueler June 8th, 2011 @ 08:29 AM
- State changed from “new” to “open”
-
Alex-SF June 8th, 2011 @ 11:14 AM
- Tag set to “feature request”
-
Alex-SF June 9th, 2011 @ 11:56 AM
- Milestone cleared.
-
Greg Schueler June 27th, 2011 @ 04:07 PM
- Milestone set to “Rundeck 1.3”
- Milestone order changed from “44” to “0”
Merging this with some changes:
- tokens can only be generated by admin users
- token auth provides only a single pseudo-group for use with authorization, called "api_token_group"
- a new aclpolicy called apitoken.aclpolicy is added for launcher install, providing all access that admin.aclpolicy has
-
Deleted User June 27th, 2011 @ 04:18 PM
Are there more than one token that can be created at a time?
-
-
-
Deleted User June 27th, 2011 @ 04:47 PM
- State changed from “open” to “needs_verification”
(from [022851e6e038df2bbc4ba9f928939224888c598c]) API Tokens initial impl [#327 state:needs_verification] https://github.com/dtolabs/rundeck/commit/022851e6e038df2bbc4ba9f92...
-
Deleted User June 28th, 2011 @ 10:22 AM
(from [bce38c27315ead66f70dd91c09786433aa55027a]) Add documentation about API token authentication group [#327] https://github.com/dtolabs/rundeck/commit/bce38c27315ead66f70dd91c0...
-
Greg Schueler June 30th, 2011 @ 05:57 PM
- State changed from “needs_verification” to “open”
fix needed: when viewing list of user profiles, clicking generate token will return a json file
-
-
Deleted User July 5th, 2011 @ 04:55 PM
(from [d64539de1e71fe69835c9610197ec72b066e1761]) Move apitoken css to main [#327] https://github.com/dtolabs/rundeck/commit/d64539de1e71fe69835c96101...
-
Deleted User July 5th, 2011 @ 04:55 PM
(from [3c99ebef596d1fd1671a0d2134a88862f2f49228]) Fix api token generation link behavior [#327] https://github.com/dtolabs/rundeck/commit/3c99ebef596d1fd1671a0d213...
-
Deleted User July 5th, 2011 @ 04:55 PM
(from [e1e6d53f09183776d73dbcb5898669bb68574aac]) Update role checks for api token actions [#327] https://github.com/dtolabs/rundeck/commit/e1e6d53f09183776d73dbcb58...
-
Greg Schueler July 5th, 2011 @ 04:58 PM
- State changed from “open” to “needs_verification”
-
Alex-SF July 8th, 2011 @ 11:49 AM
- State changed from “needs_verification” to “verified”
Verified. Here's an example getting system info:
$ curl http://localhost:4440/api/1/system/info?authtoken=5592nKe64O9eOuP98O7rU8EVd8U5C6rV -
Alex-SF July 8th, 2011 @ 03:56 PM
- State changed from “verified” to “resolved”
- Milestone order changed from “57” to “0”
-
Michael Lugo August 29th, 2022 @ 10:46 AM
Users can generate a unique API token string from https://bestdoctornearme.com/
their profile page · the token can be used instead of the normal form based login method for . -
Florence Pugh June 1st, 2023 @ 06:23 PM
I admit that your commitment to enhancing your system's ease and contexto security through token-based authentication is admirable.
-
Jeffree Star December 3rd, 2023 @ 06:06 PM
Challenges:
Token Management: Users might lose or backpack battles forget their tokens.
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create new ticket
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
(DEPRECATED) Please use github issues for issue tracking at http://github.com/dtolabs/rundeck/issues
Alex-SF
Greg Schueler