whinis / eve-jacknife

An api auditing tool for EVE Online written in php, works with api keys or SSO access tokens.
http://evejackknife.com/
22 stars 12 forks source link

[Feature Request]Log in with token #20

Open NomadThanatos opened 7 years ago

NomadThanatos commented 7 years ago

Since we cannot have someone's username and password to audit, I would like to audit with token(preferred) or refresh token.

I replace the token with my login query, but I got 500 error.

whinis commented 7 years ago

You should be able to use tokens by using the following format http://evejackknife.com/?accessToken= < accesstoken >
where < accesstoken > is a SSO token with some XML read access. Soon I plan to start implementing ESI as well but have been waiting on some missing items that would bring it up to near parity

whinis commented 7 years ago

Just for clarification, Jackknife does not currently accept refresh tokens. This was done for two reasons.

  1. I believe a certain amount of trust is upheld by the fact that I cannot use said token long than about 20 minutes and cannot extend that
  2. While somewhat useful for long term usage this is more reserved for an api management program than an auditing program.
NomadThanatos commented 7 years ago

Thanks, seems that I just need add some xml read access in my auth. I did not check the access in login, I just assume those are ESIs.

whinis commented 7 years ago

Ya sorry, I plan to get it implemented very soon and will be putting up a beta of ESI at beta.evejackknife.com