Token auth for API access
Reported by Greg Schueler | 2011-06-07 11:48:52 UTC | in Rundeck 1.3 (closed)
Add Token based authentication for API access.
- users can generate a unique API token string from their profile page
- the token can be used instead of the normal form based login method for api access
- the token can be cleared/expired from the profile page as well to disable token access
Token usage methods:
- include the token in the HTTP request as a header e.g.
X-RunDeck-Token-Auth - include the token as a URL parameter, e.g. named
authtoken.
Comments and changes to this ticket
-
-
Greg Schueler 2011-06-08 08:29:10 UTC
- State changed from “new” to “open”
-
Alex-SF 2011-06-08 11:14:01 UTC
- Tag set to “feature request”
-
Alex-SF 2011-06-09 11:56:02 UTC
- Milestone cleared.
-
Greg Schueler 2011-06-27 16:07:22 UTC
- Milestone set to “Rundeck 1.3”
- Milestone order changed from “44” to “0”
Merging this with some changes:
- tokens can only be generated by admin users
- token auth provides only a single pseudo-group for use with authorization, called "api_token_group"
- a new aclpolicy called apitoken.aclpolicy is added for launcher install, providing all access that admin.aclpolicy has
-
-
-
-
Deleted User 2011-06-27 16:47:17 UTC
- State changed from “open” to “needs_verification”
(from [022851e6e038df2bbc4ba9f928939224888c598c]) API Tokens initial impl [#327 state:needs_verification] https://github.com/dtolabs/rundeck/commit/022851e6e038df2bbc4ba9f92...
-
Deleted User 2011-06-28 10:22:19 UTC
(from [bce38c27315ead66f70dd91c09786433aa55027a]) Add documentation about API token authentication group [#327] https://github.com/dtolabs/rundeck/commit/bce38c27315ead66f70dd91c0...
-
Greg Schueler 2011-06-30 17:57:14 UTC
- State changed from “needs_verification” to “open”
fix needed: when viewing list of user profiles, clicking generate token will return a json file
-
-
Deleted User 2011-07-05 16:55:23 UTC
(from [d64539de1e71fe69835c9610197ec72b066e1761]) Move apitoken css to main [#327] https://github.com/dtolabs/rundeck/commit/d64539de1e71fe69835c96101...
-
Deleted User 2011-07-05 16:55:26 UTC
(from [3c99ebef596d1fd1671a0d2134a88862f2f49228]) Fix api token generation link behavior [#327] https://github.com/dtolabs/rundeck/commit/3c99ebef596d1fd1671a0d213...
-
Deleted User 2011-07-05 16:55:31 UTC
(from [e1e6d53f09183776d73dbcb5898669bb68574aac]) Update role checks for api token actions [#327] https://github.com/dtolabs/rundeck/commit/e1e6d53f09183776d73dbcb58...
-
Greg Schueler 2011-07-05 16:58:24 UTC
- State changed from “open” to “needs_verification”
-
Alex-SF 2011-07-08 11:49:54 UTC
- State changed from “needs_verification” to “verified”
Verified. Here's an example getting system info:
$ curl http://localhost:4440/api/1/system/info?authtoken=5592nKe64O9eOuP98O7rU8EVd8U5C6rV -
Alex-SF 2011-07-08 15:56:38 UTC
- State changed from “verified” to “resolved”
- Milestone order changed from “57” to “0”
-
Michael Lugo 2022-08-29 10:46:33 UTC
Users can generate a unique API token string from https://bestdoctornearme.com/
their profile page · the token can be used instead of the normal form based login method for . -
Florence Pugh 2023-06-01 18:23:22 UTC
I admit that your commitment to enhancing your system's ease and contexto security through token-based authentication is admirable.
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create new ticket
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
(DEPRECATED) Please use github issues for issue tracking at http://github.com/dtolabs/rundeck/issues
Alex-SF
Greg Schueler