Questions tagged [api-auth]

Full HMAC auth implementation for use in the gems and Rails apps.

Full HMAC auth implementation for use in the gems and Rails apps.

17 questions
1
vote
0 answers

How API key and API secret works on third party APIs

I am building a Nodejs 3rd party API service, most times I use other third-party API services there always some form of API key and API secret used for authentication, Can someone explain how that works, and are there libraries in NodeJS I can use…
1
vote
1 answer

How to pass parameter to with_api_auth(access_id, secret_key) in rails

I created one class to call api on other rails server. Client (RemoteAssessment.rb): class RemoteAssessment < ActiveResource::Base self.site = "http://localhost:5000/api/v1" headers["Content-Type"] = "application/json" with_api_auth(access_id,…
1
vote
0 answers

Lumen Custom Authentication with custom Fields and Store in Auth Guard

I am using lumen for API development. I have an issue in Lumen Custom Authentication. I want to login a user when his credentials and account_name matches with stored record. In the credentials filed there is not username and password type…
Usman Hafeez
  • 357
  • 1
  • 7
  • 20
1
vote
1 answer

Make API call with Basic Auth using App Pool Credentials

I am wondering if in .NET, if it possible to send over the credentials of the identity running an application pool in IIS to an API that uses Basic Auth. I have successfully been able to retrieve the identity context from the application pool.…
user1732364
  • 925
  • 4
  • 28
  • 58
1
vote
1 answer

Matching Signed Headers Encrypted in Ruby on Rails and JavaScript

I am using ApiAuth gem (as found here) to sign my request. I am also writing my own JavaScript code using CryptoJS (as found here) to provide authentication by checking the encrypted header generated by ApiAuth against the one generated by my…
0
votes
1 answer

WSO2 API Authentication for multiple users

I need to add multiple credentials for one API in wso2 MI. How to achieve this?
0
votes
1 answer

System to system integration and token validation

We are trying to set up a scheduled job based on NodeJS which will call an API via an API gateway. The API calls another API. There is no user or browser involved. The call must be authenticated and have a valid OAuth token from our IdP. How should…
user217648
  • 3,338
  • 9
  • 37
  • 61
0
votes
0 answers

How to hide the basic authorization credential in browser response header?

I've implemented Basic Authorization for API Authentication purposes. But, when I send my credential in API access those credentials show like the below picture in the Authorization header. So, How to hide my credential in this header? Thank you in…
Dev Asit
  • 113
  • 1
  • 5
0
votes
0 answers

Need a simple alternative Api Authentication system in an already built Api using Asp.Net MVC4 C#

I have completed working on an Api using C# in a Asp.Net MVC4 application project. Now there is a need to add an authentication process in the completed Api. I need guidance to make the authentication using username and password and then use…
0
votes
2 answers

RightMove Datafeed API Auth - Axios TLS auth

I am working on a module that requires me to feed data into RightMove using their API. But before that, it requires mutual authentication to verify the data feeder - which uses some certificates and keys. I received the following file formats from…
Nishat sAyyed
  • 109
  • 1
  • 8
0
votes
1 answer

ApiAuth gem + ActiveResource

I'm trying to get ApiAuth working with ActiveResource and having no luck. The documentation suggests this as the way to use the gem: class Foo < ActiveResource::Base with_api_auth("foo", "bar") end This results in the following…
jaydel
  • 14,389
  • 14
  • 62
  • 98
0
votes
1 answer

Should Token Auth service return null or 401?

I am working on JWT Authentication service that needs to provide JWT token to Angular client app and I have following dilemma: What service should return in case bad credentials are provided: {token: null}, or 401 Not Authorized Http message Does…
milosdju
  • 783
  • 12
  • 27
0
votes
1 answer

How do I handle errors when using api_auth gem?

Currently for a project I am using api_auth gem. I am hitting on an external api in a function by making a signed request. Currently my code looks like this. access_id = "someKey" secret_key = "someRandomGeneratedKey" request =…
wallydrag
  • 1,924
  • 1
  • 11
  • 9
0
votes
1 answer

How should I let my python and rails http servers communicate securely

I was building an app where I want my Python application to securely communicate with my Rails application and send it some data. I'm more inclined to use HTTP to get them to communicate. I came across this gem (Api Auth), but it seems to only work…
Jamal Khan
  • 9,371
  • 6
  • 23
  • 23
0
votes
1 answer

How to sign a get request from a link_to button

I am using api_auth to sign my requests. I have a link_to button that makes a get request to a controller (allowing my admins to sign in as any users via Devise). link_to "Click Here",…
Huy
  • 10,806
  • 13
  • 55
  • 99
1
2