topic Re: What is the intended flow for OAuth Authentication with the API ? in Aerohive Migrated Content

What is the intended flow for OAuth Authentication with the API ?

paul_heng — Tue, 06 Aug 2019 17:29:37 GMT

Hey,

I'd like to develop a web app using the API but I don't really understand what is the intended way to use the OAuth authentication. There are no CORS headers so I need to use a backend application, but if I understand correctly, the user must send it's credentials (ID, secret, and token) so there is a risk that the backend app can intercept it.

What are the advantages of using OAuth compared to getting a token from the HM directly since you have to send them to a backend app anyway ?

Thanks in advance

Re: What is the intended flow for OAuth Authentication with the API ?

samantha_lynn — Wed, 07 Aug 2019 19:48:00 GMT

Entering the token in to HiveManager will allow you to use OAuth (we aren't 100% OAuth compliant, but we can work with OAuth), which is more secure than just getting a token from HiveManager. You'd want to click on the silhouette icon in the top right hand corner of the HiveManager> Global Settings> API Token Management (left hand side menu)> Enter the token your API uses.

Re: What is the intended flow for OAuth Authentication with the API ?

paul_heng — Sat, 10 Aug 2019 15:38:23 GMT

Thanks for you answer !