Right, that's for frontend user auth. I

Right, that's for frontend user auth. I mean if I wanted to use the REST API to request a token for the user, for instance, can I authenticate to the REST API with anything other than username/password?
6 Replies
ashish
ashish7mo ago
For the REST API to get a token, you could also use the instance secret key.
jlyons8815
jlyons8815OP7mo ago
What about other REST API calls?
ashish
ashish7mo ago
Well, its 2 step. You get the token using secret key and then you use the token for all other APIs
jlyons8815
jlyons8815OP7mo ago
So the token generated from /api/rest/2.0/auth/token/full (using the trusted token from the security settings, not username and password) can be used in subsequent API calls? The main ask is is it possible to do all REST API communication without a username/password. Getting Orgs, metadatas, user info, group info, etc.
ashish
ashish7mo ago
Yes correct, pass the token in the Authorization header as a Bearer token. For eg: https://developers.thoughtspot.com/docs/api-authv2#_view_session_information
REST API v2.0 authentication
REST v2 APIs support basic and token-based authentication methods.
jlyons8815
jlyons8815OP7mo ago
Awesome! Thanks!

Did you find this page helpful?