mirror of
https://github.com/pocket-id/pocket-id.git
synced 2025-12-09 14:53:00 +03:00
🚀 Feature: API Key authentication #448
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @fallenleavesgocrunch on GitHub.
Originally assigned to: @kmendell on GitHub.
Feature description
The ability for a backend application to create pocket-id users through a REST API.
Pitch
I'd also love to integrate pocket-id in to software I'm writing; but for that to work I cannot manually administer adding users. I'd love it if there were some kind of REST api where I can submit a new user to pocket-id and have it send out the authenticate email with one-time setup link and a redirect back to my app when it's setup.
app.backend -> pocket-id.backend/add-user?username=xxxx?group=zzzzz&returnto=urlurlurl
pocket-id would then create the user, add them to the group, and email them out the one-time invite. When the user has authenticated their email and added a passkey it would then redirect them to the returnto url.
@stonith404 commented on GitHub:
Adding users via the rest API is already possible but you would need your access token for authentication which is suboptimal for automations as the access token is only short lived.
We would have to add support for API key authentication where the user can create and revoke them in the admin UI and then use the key for authentication. Because of that I'll rename this feature request to "API Key authentication".
@stonith404 commented on GitHub:
This is now available in
v0.39.0. Thanks @kmendell.@kamilkosek commented on GitHub:
Hi,
I´d love to see a way to interact with the API.
What I like to build is a "landing page" or call it "portal" where users can see all the apps and services which are available for their authenticated identity.