Forum Discussion

adamyocum's avatar
adamyocum
Contributor
11 years ago

Calling Modify or Create REST API methods from external domain - Authentication Options

I am working to develop an interactive user interface that will allow our community users to read and reply to posts from certain boards in our community without leaving one of our other non-lithium ...
nathan's avatar
nathan
Executive

I was under the impression that if you made a call to the REST API authentication method with the SSO cookie (but not specifying a username or password) that it would authenticate with the SSO cookie and return a valid token that can be used in subsequent calls. This avoids the for the user to browse to the community first.

 

I've just tested this and seems to be working. However, it could just be that the 'unsafe' cookie authentication is enabled.

JakeS's avatar
JakeS
Lithium Alumni (Retired)
11 years ago
Yeah, that's the correct flow, and doesn't rely on a browser session cookie; that token should work if you add it as a query param to an api call in ANY context, even outside of the original browser.