search

o2r-project / api

Reproducibility service RESTful web API specification and documentation
https://o2r.info/api
Other
3 stars 8 forks source link

Document Security Scheme in OpenAPI #91

Closed nuest closed 3 years ago

nuest commented 3 years ago

https://swagger.io/specification/#security-scheme-object

We use an apiKey that is stored as a cookie parameter.

It could even work to reference the OAuth2 endpoint or docs from ORCID?

@Fmazin Is there really no way to get the content under ## User authentication into the "Authentication" headline right after "About" ?

nuest commented 3 years ago

We sue OAuth2 in the background, but then users only authenticate themselves with us only via the token. Since we ourselves do not offer OAuth2, this does not make sense.