UpstreamDataInc / goosebit

A simplistic, opinionated remote update server implementing hawkBit™'s DDI API.
https://goosebit.rtfd.io
Apache License 2.0
12 stars 2 forks source link

API access via token #70

Closed easybe closed 2 weeks ago

easybe commented 4 weeks ago

Maybe APIKeyHeader is a good option as the authentication mechanisms for the integration API.

Of course there are multiple feasible options. We should choose a mechanism that works well with tools like curl or wget.

b-rowan commented 4 weeks ago

We have 2 options here -

  1. Set API key in users config, or generate it based on some user information dynamically,
  2. Use an /api/v1/login endpoint, which will send back a generated token for the API, which can then be sent.

Any preference?

easybe commented 4 weeks ago

Simply add the possibility to inject it via configuration/environment.