API Authentication

Jump to bottom Edit New page

elemoine edited this page Oct 6, 2014 · 13 revisions

Work In Progress!

This page describes the authentication mechanism for the HTTP API.

Users of the Tasking Manager web interface "log into" the application using their OSM credentials. OSM's Oauth system is used. The Tasking Manager uses that system to retrieve the user's id and display_name.

HTTP Basic

TM = Tasking Manager Application.
TM Admin = the person who administrates TM.
App = the web application based on the TM API.
App Admin = the person who administrates App.

Workflow

App Admin creates an OSM user for App.
App Admin logs into TM using that OSM user.
App Admin requests from TM Admin a TM password for that OSM user.
TM Admin generates a password for that OSM user, and adds it into the DB.
App Admin configures App to use OSM user + TM password for use with the TM API.