Authenticate App

Authenticate extension app with a public key. See also: Application Authentication in the Client Extension API documentation.

Authenticate extension app with public key

post

Based on an authentication request token signed by the caller's RSA private key, authenticate the API caller and return a session token.

A HTTP 401 Unauthorized error is returned on errors during authentication (e.g. invalid user, malformed authentication token, user's public key not imported in the pod, invalid token signature etc.).

Body

application/json

Request body for extension app authentication

appTokenstringOptional

application generated token

authTokenstringOptional

a JWT containing the caller's username and an expiration date, signed by the caller's private key.

Responses

200

OK.

application/json

appIdstringOptional

Application ID

appTokenstringOptional

This token generated by the application when calling authentication endpoint

symphonyTokenstringOptional

This token generated by Symphony and should be used by the application to verify that it's talking to Symphony.

expireAtinteger · int64Optional

unix timestamp when the token expired

400

Request object is invalid

application/json

401

Client is unauthorized to access this resource

application/json

500

Server error, see response body for further details.

application/json

post

/v1/pubkey/app/authenticate/extensionApp

HTTPcURLJavaScriptPython

POST /login/v1/pubkey/app/authenticate/extensionApp HTTP/1.1
Host: yourpodURL.symphony.com
Content-Type: application/json
Accept: */*
Content-Length: 38

{
  "appToken": "text",
  "authToken": "text"
}

{
  "appId": "text",
  "appToken": "text",
  "symphonyToken": "text",
  "expireAt": 1
}