Skip to main content
V
vinesh1-Visitor
1-Visitor
January 24, 2019
Solved

Authentication with User Credentials via Rest Api

  • January 24, 2019
  • 2 replies
  • 1318 views

I've use Rest API calls on the same thingworxserver in order to "impersonate" de current user to a user which has Application Keys creation permissions (current users shoudn't have this kind of permissions).

 

Could you please explain what exactly is the purpose of doing this. Also, isn't it insecure to pass around appKeys between the client and the Twx application?

 

Related to previous post

Best answer by CarlesColl

I'm not passing around appKeys between client and server, I'm doing it from localhost to localhost (server side), there isn't network transfer related information, also I'm passing the appKey on the Post content not on the URL.

2 replies

C
CarlesColl1-VisitorAnswer
1-Visitor
January 28, 2019

I'm not passing around appKeys between client and server, I'm doing it from localhost to localhost (server side), there isn't network transfer related information, also I'm passing the appKey on the Post content not on the URL.

S
slangleyCommunity Manager
Support
March 14, 2019

Hi @vinesh.

 

If the response provided by @CarlesColl answered your question, please mark it as the Accepted Solution for the benefit of others with the same question.

 

Regards.

 

--Sharon

    Terms & ConditionsAccessibility statement