How to Implement Bearer Authentication with InterSystems IRIS REST API?
Hi folks!
Could you please share your experience on how do you create REST API with InterSystems IRIS that uses bearer authentication?
How do you generate tokens? How do you maintain it (how much time tokens exist?).
Thanks in advance!
Comments
Look at my Realworld project realization. There I have a separate table for users, and Bearer token creation and validation, expiration time set in parameter. And API, checks it for any request required authorization.
Thanks, Dmitry! This is what I was looking for
All this kind of stuff is built into both QEWD's REST services and mgweb-server with appropriate APIs for all the JWT/Bearer Token life-cycle. Find both on my Github repos:
https://github.com/robtweed/qewd
https://github.com/robtweed/mgweb-server
See the REST/IRIS examples based on the RealWorld/Conduit application which use JWT-based authentication carried as bearer tokens:
Thanks, Rob! Don't see though the example of how to make a Bearer token authorisation with InterSystems IRIS