Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Div
classtocc

Contents

Table of Contents

...

Users can register their own applications using the Abiquo API or UI. For more information about registering applications with the API, including adding privileges, please read the ApplicationsResource page in the API documentation.For information about managing applications with the UI, including adding privileges, see Configure your user account 

The Abiquo API implements the OAuth 1.0 protocol, so any application that implements it can be used to consume the Abiquo API. The basic authentication workflow for an already registered application, as defined by the protocol, consists of the following steps:

...

Abiquo has chosen to implement OAuth 1 because it is more secure and interoperable than OAuth 2. See http://hueniverse.com/2012/07/oauth-2-0-and-the-road-to-hell/

...

For an example of an Abiquo authentication flow, please see the following Python and Ruby simple applications: https://gist.github.com/nacx/8581621 

OpenID Connect

When you use OpenID Connect, Abiquo disables basic authentication, but you can still use OAuth or session cookies to access the API as before. Or you can obtain OpenID Connect tokens by doing these steps:

...

Response Headers: Content-Length, Content-Type, Date, X-Abiquo-Token.
Response Message Body: N/A.
Response Status: 200, 401, 403.
Example Response: Response of the authenticated GET over a Datacenters resource

...