TO BE FINISHED!

Since 5.8.1 application tokens can be defined in translate5 and MUST be used for API usage.

Per user multiple tokens can be generated.

Creation

./translate5.sh auth:apptoken:add LOGIN "DESCRIPTION"

The token is shown only once, it is stored encrypted in the DB.

See ./translate5.sh auth:apptoken:add

Usage

The token can either be used as:

1. on session API endpoint login as password - instead of the normal password
2. As HTTP Header "Translate5AuthToken"
   • Each request with such header is authenticated - but gets a separate session
   • For persist / keep session, just take the ZfExtended Cookie from the first call with the token and use that in further requests instead of the token itself
   • or use the first option, the session API endpoint login and get the session id from there

Administration

A ./translate5.sh auth:apptoken:list to show all tokens (the description only) for a user is planned, also a ./translate5.sh auth:apptoken:delete.