Access Using JWT
From DreamFactory
| (9 intermediate revisions by 3 users not shown) | |||
| Line 1: | Line 1: | ||
| − | + | For admin users only, DreamFactory APIs can be consumed with just a JWT (token) from an authenticated session. JWT from an admin user's session will allow full access to the system. Non-admin users cannot consume any protected APIs using just a JWT. They will also require an API key that allows the system to determine if they should have access to the requested resource. | |
| − | + | Request: | |
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | Request | + | |
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| + | <pre>GET https://foo.com/api/v2/system/user?session_token=abc.123.efg</pre> | ||
| + | * HTTP method: GET | ||
| + | * URL: https://foo.com/api/v2 | ||
* Service: system | * Service: system | ||
* Resource: user | * Resource: user | ||
| − | * Session | + | * Session token: abc.123.efg |
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | <pre>GET https://foo.com/api/v2/db/_table?limit=1&session_token=abc123efg</pre> | |
| + | * HTTP method: GET | ||
| + | * URL: https://foo.com/api/v2 | ||
| + | * Service: db | ||
| + | * Resource: _table | ||
| + | * Additional Parameter: limit | ||
| + | * Session token: abc123efg | ||
| − | + | ||
| − | + | '''Note:''' Session token can also be supplied using the X-DreamFactory-Session-Token request header. | |
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | X-DreamFactory-Session-Token | + | |
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
Latest revision as of 18:16, 13 July 2018
For admin users only, DreamFactory APIs can be consumed with just a JWT (token) from an authenticated session. JWT from an admin user's session will allow full access to the system. Non-admin users cannot consume any protected APIs using just a JWT. They will also require an API key that allows the system to determine if they should have access to the requested resource.
Request:
GET https://foo.com/api/v2/system/user?session_token=abc.123.efg
- HTTP method: GET
- URL: https://foo.com/api/v2
- Service: system
- Resource: user
- Session token: abc.123.efg
GET https://foo.com/api/v2/db/_table?limit=1&session_token=abc123efg
- HTTP method: GET
- URL: https://foo.com/api/v2
- Service: db
- Resource: _table
- Additional Parameter: limit
- Session token: abc123efg
Note: Session token can also be supplied using the X-DreamFactory-Session-Token request header.
