Authentication API

Use the Authentication API to generate, refresh, and manage JSON Web Tokens (JWT) that are required for authorization in all Enterprise Control Room APIs.

The JWT authorization is based on the roles and permission of the user's account that is used in the request body.

An authentication token's default time out is 20 minutes. Note: The default timeout for tokens is configurable.
Include the Authentication token or Bearer token in a header file for requests in other Control Room APIs.
Header file example: -H X-Authorization <authentication token> or Authorization:Bearer <bearer token>

More information: https://helloreverb.com

Contact Info: hello@helloreverb.com

Version: LTS - 2.0.0

All rights reserved

http://apache.org/licenses/LICENSE-2.0.html

Access

Methods

Models

Table of Contents

Auth

Up

post /authentication

Authenticate user (authenticationPost)

<p>Use this endpoint to authenticate a registered user. A successful response returns a JSON object that includes a JWT (JSON Web Token). By default, a token is valid for 20 minutes. Add the JWT to header files of other Control Room APIs for authorization.</p> <ul> <li>The <strong>username</strong> is the name of a Control Room user.</li> <li>The <strong>password</strong> is the password for the specified user.</li> <li>The <strong>apiKey</strong> is required to configure Single Sign On (SSO). It can also be used in place of a password for users that are assigned the <a href="https://docs.automationanywhere.com/csh?context=csh-cloud-control-room-apikey-role">API key generation role</a>.</li> </ul> <blockquote> <p><strong>Note:</strong> <strong>apiKey</strong> or <strong>password</strong> is used to generate a valid token. Both (apiKey and password) cannot be used together in a request body.</p> </blockquote>

Consumes

This API call consumes the following media types via the request header:

*/*

Request body

body AuthRequest (required)

Body Parameter —

Return type

AuthResponseV2

Example data

Content-Type: application/json

{
  "tenantUuid" : "4630ea50-31da-4ae9-912e-ef8b235f883b",
  "permissions" : [ {
    "action" : "View",
    "resourceType" : "Settings"
  }, {
    "action" : "View",
    "resourceType" : "Settings"
  } ],
  "user" : {
    "lastName" : "Doe",
    "roles" : [ {
      "name" : "name",
      "id" : "22"
    }, {
      "name" : "name",
      "id" : "22"
    } ],
    "principalId" : "9",
    "passwordSet" : true,
    "licenseFeatures" : [ "DEVELOPMENT", "DEVELOPMENT" ],
    "emailVerified" : true,
    "firstName" : "John",
    "enableAutoLogin" : true,
    "domain" : "domain",
    "id" : "9",
    "passwordExpired" : true,
    "locked" : true,
    "email" : "a@a.com",
    "username" : "jdoe"
  },
  "ttlSeconds" : "0",
  "token" : "eyJhbGciOiJSUzUxMiJ9.eyJzdWIiOiIxIiwiY2xpZW50VHlwZS"
}

Produces

This API call produces the following media types according to the request header; the media type will be conveyed by the response header.

application/json

Responses

200

This is a JSON object that contains the JWT generated for the registered Control Room User. In addition to the JWT this response contains details regarding the users roles, permissions, and licenses. AuthResponseV2

400

Bad Rquest Error

401

Authentication required Error

500

Internal Server error Error

Up

post /authentication/token

Refresh a valid token (authenticationTokenPost)

<p>Use this endpoint to refresh a valid token.</p> <ul> <li>The default token expiration is 20 minutes.</li> <li>The token used for the refresh is expired once a refresh token is generated.</li> </ul> <blockquote> <blockquote> <p><strong>Note:</strong> The default timeout for tokens is configurable.</p> </blockquote> </blockquote>

Request headers

Return type

AuthResponseRefreshV2

Example data

Content-Type: application/json

{
  "tenantUuid" : "4630ea50-31da-4ae9-912e-ef8b235f883b",
  "permissions" : [ {
    "action" : "View",
    "resourceType" : "Settings"
  }, {
    "action" : "View",
    "resourceType" : "Settings"
  } ],
  "user" : {
    "lastName" : "Doe",
    "roles" : [ {
      "name" : "name",
      "id" : "22"
    }, {
      "name" : "name",
      "id" : "22"
    } ],
    "principalId" : "9",
    "passwordSet" : true,
    "licenseFeatures" : [ "DEVELOPMENT", "DEVELOPMENT" ],
    "emailVerified" : true,
    "firstName" : "John",
    "enableAutoLogin" : true,
    "domain" : "domain",
    "id" : "9",
    "passwordExpired" : true,
    "locked" : true,
    "email" : "a@a.com",
    "username" : "jdoe"
  },
  "ttlSeconds" : "1200",
  "token" : "eyJhbGciOiJSUzUxMiJ9.eyJzdWIiOiIxIiwiY2xpZW50VHlwZS"
}

Produces

This API call produces the following media types according to the request header; the media type will be conveyed by the response header.

application/json

Responses

200

This is a JSON object containing the refresh token. In addition to the refresh token this response contains details regarding the users roles, permissions, and licenses. AuthResponseRefreshV2

400

Bad Rquest Error

401

Authentication required Error

500

Internal Server error Error

Models

Methods

Table of Contents

AuthRequest
AuthResponseRefreshV2
AuthResponseV2
Error
GlobalPermission
LicenseFeature
RefreshAuthV2Request
RoleBasicV2
UserV2

`AuthRequest` Up

username (optional)

String The user's username.

example: jdoe

password (optional)

String The user's password. Either password or apiKey is used. Both cannot be used together.

example: mypassword@123

apiKey (optional)

String apiKey can be used as a password for any authentication type.

example: Vie;Z:IvtAhY0NU7baRLYEeIYUJSKO

multipleLogin (optional)

Boolean Allow or disallow multiple login. For more information on multilogin, see <a href="https://docs.automationanywhere.com/csh?context=csh-multi-login-user">Multi Login user</a>.