Authenticate by Passing Parameters
Do NOT expose clear text password in the URL or DOM.
- j_username
- j_password
- hash
Example:
Assuming the username and password required is "user1" and "password1" respectively, we can post the username and password to the JSON API using following script.
curl --location --request POST --data 'j_username=user1&j_password=password1' 'http://localhost:8080/jw/web/json/workflow/assignment/list'
{"total" : 12 }
If you prefer to use hashed password, you can use the following script.
Please note that the support on Hashed Password is based on the Directory Manager you are using. Some Directory Manager Plugin may not supporting this type of authentication method.
The format and hashing method may vary for each Directory Manager as well.
curl --location --request POST --data 'j_username=user1&hash=D012B772672A55A0B561EAA53CA7734E' 'http://localhost:8080/jw/web/json/workflow/assignment/list/pending'
{"total" : 12 }
Master Login Username and Password
Do NOT expose clear text password in the URL or DOM.
To use it, set a Master Login Username and Master Login Password under System Settings > General Setting. By setting these values, a different user can be specified by passing in the "loginAs" parameter.
Please note that only enable this when it is necessary. Leaking of your Master Credential will allows others to performs all the unwanted JSON API calls.
Assuming the master login username and master login password is "master" and "master" respectively, the master login hash will be "E505CF727D214A68CB03DA25DA978500".
The following example showcases how to use a Master Credential to login as "user1".
curl --location --request POST --data 'j_username=master&j_password=master&loginAs=user1' 'http://localhost:8080/jw/web/json/workflow/assignment/list'
{"total" : 12 }
Using master login hash:
curl --location --request POST --data 'j_username=master&j_password=master&loginAs=user1' 'http://localhost:8080/jw/web/json/workflow/assignment/list'
{"total" : 12 }
Basic Http Authentication
Since V4, Joget supports Basic HTTP Authentication in JSON API authentication so you can pass the credentials in the header.Example:
Assuming the username and password required is "user1" and "password1" respectively, we can set the Basic Auth header to the JSON API using following script.
curl --location --request POST 'http://localhost:8080/jw/web/json/workflow/assignment/list/pending' --header 'Authorization: Basic dXNlcjE6cGFzc3dvcmQx'
{"total" : 12 }