Web API

Authentication

OAuth2 Token Authentication

The installed OAuth2 provider additionally support a token/bearer authentication scheme. The token has to be sent using the header Authorization: Bearer <access_token>. The token itself has to be acquired from the originating provider, e.g. GitHub. The token will then be checked against the originating OAuth provider - more information: OpenID spezification.

# REQUEST
POST /api HTTP/1.1
Authorization: Bearer VGhpcyBpcyBqdXN0IGEgZGVtbyBhY2Nlc3MgdG9rZW4u
Content-Type: application/json

A user authenticated by an access token will be granted the same permissions the user would have using login credentials.