You can now within the TIF administration UI create application tokens, which can be used to grant access
to webservices hosted in TIF for other systems.
The Application Token can be declared to be valid during a certain time-frame and you can specify what user and roles the token should act on behalf of.
Two new roles have been added to support working with these.
Those roles are called "Application Token Viewer" and "Application Token Editor".
|
When starting up TIF after upgrading to this release, ALL current admin users declared in the TIF database will be granted these roles.
|
From the Administration UI you can list the Application Tokens from the menu item "Internals" → "Application Tokens".
This menu item is only available if you have the "Application Token Viewer" role.
From this page you can create new application tokens, if you have the role assigned.
Figure 1. Create Application Token
Once a token is created, you must store the token and keep that in a safe place as the token
is not possible to reveal at a later stage.
|
The token should be passed as a "Basic" authorization header.
|
Figure 2. Application Token Created