Access Using JWT
From DreamFactory
Toddappleton (Talk | contribs) |
Toddappleton (Talk | contribs) |
||
| Line 1: | Line 1: | ||
| − | DreamFactory | + | DreamFactory APIs can be consumed with just a JWT (token) from an authenticated session. JWT from an admin user's session will allow full access to the system. Non-admin users cannot consume any protected APIs using just a JWT. They will also require an API Key that tells the system what app the call is being made for. The system will use the API key to look up the role assigned to the user for that app, and limit access to what is allowed by that role. |
| − | session will allow full access to the system. Non-admin users cannot consume any protected APIs using just a JWT. | + | |
| − | require an API Key | + | |
| − | + | Request: | |
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | Request | + | |
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
<pre>GET https://foo.com/api/v2/system/user?session_token=abc.123.efg</pre> | <pre>GET https://foo.com/api/v2/system/user?session_token=abc.123.efg</pre> | ||
| − | + | * HTTP method: GET | |
| + | * URL: https://foo.com/api/v2 | ||
* Service: system | * Service: system | ||
* Resource: user | * Resource: user | ||
| − | * Session | + | * Session token: abc.123.efg |
| − | + | ||
| − | + | ||
| − | + | Note: Session token can also be supplied using the X-DreamFactory-Session-Token request header. | |
| − | + | ||
| − | + | ||
| − | X-DreamFactory-Session-Token | + | |
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
Revision as of 19:17, 30 June 2016
DreamFactory APIs can be consumed with just a JWT (token) from an authenticated session. JWT from an admin user's session will allow full access to the system. Non-admin users cannot consume any protected APIs using just a JWT. They will also require an API Key that tells the system what app the call is being made for. The system will use the API key to look up the role assigned to the user for that app, and limit access to what is allowed by that role.
Request:
GET https://foo.com/api/v2/system/user?session_token=abc.123.efg
- HTTP method: GET
- URL: https://foo.com/api/v2
- Service: system
- Resource: user
- Session token: abc.123.efg
Note: Session token can also be supplied using the X-DreamFactory-Session-Token request header.
