Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Token auth for API access

#327

Add Token based authentication for API access.

  • users can generate a unique API token string from their profile page
  • the token can be used instead of the normal form based login method for api access
  • the token can be cleared/expired from the profile page as well to disable token access

Token usage methods:

  • include the token in the HTTP request as a header e.g. X-RunDeck-Token-Auth
  • include the token as a URL parameter, e.g. named authtoken.

Reported by Greg Schueler · June 7th, 2011 @ 11:48 AM

State: resolved
Milestone: Rundeck 1.3
Assigned to: Greg Schueler Greg Schueler

Activity

  1. Deleted User
    Deleted User

    Cool..

    June 7th, 2011 @ 11:54 AM

  2. Greg Schueler
    Greg Schueler
    • State changed from new to open

    June 8th, 2011 @ 08:29 AM

  3. Alex-SF
    Alex-SF
    • Tag set to feature request

    June 8th, 2011 @ 11:14 AM

  4. Alex-SF
    Alex-SF
    • Milestone cleared.

    June 9th, 2011 @ 11:56 AM

  5. Greg Schueler
    Greg Schueler
    • Milestone set to Rundeck 1.3
    • Milestone order changed from 44 to 0

    Merging this with some changes:

    • tokens can only be generated by admin users
    • token auth provides only a single pseudo-group for use with authorization, called "api_token_group"
    • a new aclpolicy called apitoken.aclpolicy is added for launcher install, providing all access that admin.aclpolicy has

    June 27th, 2011 @ 04:07 PM

  6. Deleted User
    Deleted User

    Are there more than one token that can be created at a time?

    June 27th, 2011 @ 04:18 PM

  7. Greg Schueler
    Greg Schueler

    yes, admins can create multiple tokens

    June 27th, 2011 @ 04:22 PM

  8. Deleted User
    Deleted User

    Sweet, even better.

    June 27th, 2011 @ 04:26 PM

  9. Deleted User
    Deleted User
    • State changed from open to needs_verification

    June 27th, 2011 @ 04:47 PM

  10. Deleted User
    Deleted User

    June 28th, 2011 @ 10:22 AM

  11. Greg Schueler
    Greg Schueler
    • State changed from needs_verification to open

    fix needed: when viewing list of user profiles, clicking generate token will return a json file

    June 30th, 2011 @ 05:57 PM

  12. Greg Schueler
    Greg Schueler

    fix needed: non-admin users can generate tokens

    July 5th, 2011 @ 03:55 PM

  13. Deleted User
    Deleted User

    July 5th, 2011 @ 04:55 PM

  14. Deleted User
    Deleted User

    July 5th, 2011 @ 04:55 PM

  15. Deleted User
    Deleted User

    July 5th, 2011 @ 04:55 PM

  16. Greg Schueler
    Greg Schueler
    • State changed from open to needs_verification

    July 5th, 2011 @ 04:58 PM

  17. Alex-SF
    Alex-SF
    • State changed from needs_verification to verified

    Verified. Here's an example getting system info:

    $ curl http://localhost:4440/api/1/system/info?authtoken=5592nKe64O9eOuP98O7rU8EVd8U5C6rV

    July 8th, 2011 @ 11:49 AM

  18. Alex-SF
    Alex-SF
    • State changed from verified to resolved
    • Milestone order changed from 57 to 0

    July 8th, 2011 @ 03:56 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.