...
Starting with v0.7, Giles has a two part authentication mechanism. First, it requires applications to send an OpenId app token (supplied by Google) generated by Giles for a specific app) and the token of an identity provider to authenticate a user. Giles then generates a shorter-lived authentication token specifically for Giles that can be used to use Giles' REST Api . In addition, in on behave of a user.
To register an application with Giles:
- Login as administrator.
- Go to "Apps" in the main menu and click on the "Register App" button.
- Enter a name for the application you are registering and select what identity provider your app is using.
- Click register.
On the next page, Giles will present you with an access token for your app. Make sure to copy it and keep it safe! Once you leave this page, there is no way to retrieve the token from Giles again. For security reasons, Giles does not store access tokens.
| Warning |
|---|
Never share Giles access tokens and keep them safe. Anyone with an access token can use Giles API on your apps behalf. |
| Status | ||||
|---|---|---|---|---|
|
...
An application can retrieve a new Giles authentication token for a user by making a POST request to the following url:
/rest/token
Giles will expect an OpenId token app token (generated as described above) in the POST Authorization header prefixed with "token":
Authorization: token yourOpenIDTokenyourAppsAccessToken
The body of your request should contain form-data with a parameter called "providerToken" that contains the token for the user your app is trying to authenticate (e.g. the GitHub token of a user).
If successful, we will get the following response:
...
An invalid or missing token, will result in the following response:. The provider key/value pair tells you if there was an issue with the Giles app token or the token of your identity provider.
| Code Block |
|---|
{
"provider" : "APP_TOKEN_GILES",
"errorCode" : "401",
"errorMsg" : "Missing or invalid token."
} |
...