[Koha-bugs] [Bug 13920] API authentication system - proposal

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13920

Julian Maurice <julian.maurice at biblibre.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #41260|0                           |1
        is obsolete|                            |

--- Comment #26 from Julian Maurice <julian.maurice at biblibre.com> ---
Created attachment 42041
  -->
http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=42041&action=edit
Bug 13920: API Authentication, part 1: API keys management in interface

Depends on Bug 14539 and Bug 7174.

This introduces the concept of API keys for use in the new REST API.
A key is a string of 32 alphanumerical characters (32 is purely
arbitrary, it can be changed easily).
A user can have multiple keys (unlimited at the moment)
Keys can be generated automatically, and then we have the possibility to
delete or revoke each one individually.

ApiKeys can be easily accessed using the Koha::ApiKeys-package.

Includes unit tests and selenium integration tests for Intra and OPAC.

Test plan:
1/ Go to staff interface
2/ Go to a borrower page
3/ In toolbar, click on More -> Manage API keys
4/ Click on "Generate new key" multiple times, check that they are
   correctly displayed under the button, and they are active by default
5/ Revoke some keys, check that they are not active anymore
6/ Delete some keys, check that they disappear from table
7/ Go to opac interface, log in
8/ In your user account pages, you now have a new tab to the left "your
   API keys". Click on it.
9/ Repeat steps 4-6

-- 
You are receiving this mail because:
You are watching all bug changes.