<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Authentication on Jikkou</title><link>https://www.jikkou.io/docs/reference/api-server/configuration/authentication/</link><description>Recent content in Authentication on Jikkou</description><generator>Hugo</generator><language>en</language><atom:link href="https://www.jikkou.io/docs/reference/api-server/configuration/authentication/index.xml" rel="self" type="application/rss+xml"/><item><title>Basic Auth</title><link>https://www.jikkou.io/docs/reference/api-server/configuration/authentication/basic_auth/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://www.jikkou.io/docs/reference/api-server/configuration/authentication/basic_auth/</guid><description>&lt;p>Jikkou API Server can be secured using a &lt;strong>Basic HTTP Authentication Scheme&lt;/strong>.&lt;/p>
&lt;p>&lt;a href="https://datatracker.ietf.org/doc/html/rfc7617">RFC7617&lt;/a> defines the &amp;ldquo;Basic&amp;rdquo; Hypertext Transfer Protocol (HTTP)
authentication scheme, which transmits credentials as user-id/password pairs, encoded using Base64.&lt;/p>
&lt;p>Basic Authentication should be used over a secured connection using HTTPS.&lt;/p>
&lt;h2 id="configure-basic-http-authentication">Configure Basic HTTP Authentication&lt;/h2>
&lt;h3 id="step1-enable-security">Step1: Enable security&lt;/h3>
&lt;p>Add the following configuration to your server configuration.&lt;/p>
&lt;div class="highlight">&lt;pre tabindex="0" class="chroma">&lt;code class="language-yaml" data-lang="yaml">&lt;span class="line">&lt;span class="cl">&lt;span class="c"># ./etc/application.yaml&lt;/span>&lt;span class="w">
&lt;/span>&lt;/span>&lt;/span>&lt;span class="line">&lt;span class="cl">&lt;span class="w">&lt;/span>&lt;span class="nt">micronaut&lt;/span>&lt;span class="p">:&lt;/span>&lt;span class="w">
&lt;/span>&lt;/span>&lt;/span>&lt;span class="line">&lt;span class="cl">&lt;span class="w"> &lt;/span>&lt;span class="nt">security&lt;/span>&lt;span class="p">:&lt;/span>&lt;span class="w">
&lt;/span>&lt;/span>&lt;/span>&lt;span class="line">&lt;span class="cl">&lt;span class="w"> &lt;/span>&lt;span class="nt">enabled&lt;/span>&lt;span class="p">:&lt;/span>&lt;span class="w"> &lt;/span>&lt;span class="kc">true&lt;/span>&lt;span class="w">
&lt;/span>&lt;/span>&lt;/span>&lt;/code>&lt;/pre>&lt;/div>&lt;h3 id="step2-configure-the-list-of-users">Step2: Configure the list of users&lt;/h3>
&lt;p>The list of &lt;code>username/password&lt;/code> authorized to connect to the API server can be configured as follows:&lt;/p></description></item><item><title>JWT</title><link>https://www.jikkou.io/docs/reference/api-server/configuration/authentication/jwt/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://www.jikkou.io/docs/reference/api-server/configuration/authentication/jwt/</guid><description>&lt;p>Jikkou API Server can be secured using &lt;strong>JWT (JSON Web Token) Authentication&lt;/strong>.&lt;/p>
&lt;h2 id="configure-jwt">Configure JWT&lt;/h2>
&lt;h3 id="step1-set-jwt-signature-secret">Step1: Set JWT signature secret&lt;/h3>
&lt;p>Add the following configuration to your server configuration.&lt;/p>
&lt;div class="highlight">&lt;pre tabindex="0" class="chroma">&lt;code class="language-yaml" data-lang="yaml">&lt;span class="line">&lt;span class="cl">&lt;span class="c"># ./etc/application.yaml&lt;/span>&lt;span class="w">
&lt;/span>&lt;/span>&lt;/span>&lt;span class="line">&lt;span class="cl">&lt;span class="w">&lt;/span>&lt;span class="nt">micronaut&lt;/span>&lt;span class="p">:&lt;/span>&lt;span class="w">
&lt;/span>&lt;/span>&lt;/span>&lt;span class="line">&lt;span class="cl">&lt;span class="w"> &lt;/span>&lt;span class="nt">security&lt;/span>&lt;span class="p">:&lt;/span>&lt;span class="w">
&lt;/span>&lt;/span>&lt;/span>&lt;span class="line">&lt;span class="cl">&lt;span class="w"> &lt;/span>&lt;span class="nt">enabled&lt;/span>&lt;span class="p">:&lt;/span>&lt;span class="w"> &lt;/span>&lt;span class="kc">true&lt;/span>&lt;span class="w">
&lt;/span>&lt;/span>&lt;/span>&lt;span class="line">&lt;span class="cl">&lt;span class="w"> &lt;/span>&lt;span class="nt">authentication&lt;/span>&lt;span class="p">:&lt;/span>&lt;span class="w"> &lt;/span>&lt;span class="l">bearer &amp;lt;1&amp;gt;&lt;/span>&lt;span class="w">
&lt;/span>&lt;/span>&lt;/span>&lt;span class="line">&lt;span class="cl">&lt;span class="w"> &lt;/span>&lt;span class="nt">token&lt;/span>&lt;span class="p">:&lt;/span>&lt;span class="w">
&lt;/span>&lt;/span>&lt;/span>&lt;span class="line">&lt;span class="cl">&lt;span class="w"> &lt;/span>&lt;span class="nt">enabled&lt;/span>&lt;span class="p">:&lt;/span>&lt;span class="w"> &lt;/span>&lt;span class="kc">true&lt;/span>&lt;span class="w">
&lt;/span>&lt;/span>&lt;/span>&lt;span class="line">&lt;span class="cl">&lt;span class="w"> &lt;/span>&lt;span class="nt">jwt&lt;/span>&lt;span class="p">:&lt;/span>&lt;span class="w">
&lt;/span>&lt;/span>&lt;/span>&lt;span class="line">&lt;span class="cl">&lt;span class="w"> &lt;/span>&lt;span class="nt">signatures&lt;/span>&lt;span class="p">:&lt;/span>&lt;span class="w">
&lt;/span>&lt;/span>&lt;/span>&lt;span class="line">&lt;span class="cl">&lt;span class="w"> &lt;/span>&lt;span class="nt">secret&lt;/span>&lt;span class="p">:&lt;/span>&lt;span class="w">
&lt;/span>&lt;/span>&lt;/span>&lt;span class="line">&lt;span class="cl">&lt;span class="w"> &lt;/span>&lt;span class="nt">generator&lt;/span>&lt;span class="p">:&lt;/span>&lt;span class="w">
&lt;/span>&lt;/span>&lt;/span>&lt;span class="line">&lt;span class="cl">&lt;span class="w"> &lt;/span>&lt;span class="nt">secret&lt;/span>&lt;span class="p">:&lt;/span>&lt;span class="w"> &lt;/span>&lt;span class="l">${JWT_GENERATOR_SIGNATURE_SECRET:pleaseChangeThisSecretForANewOne} &amp;lt;2&amp;gt;&lt;/span>&lt;span class="w">
&lt;/span>&lt;/span>&lt;/span>&lt;/code>&lt;/pre>&lt;/div>&lt;ul>
&lt;li>&lt;strong>&amp;lt;1&amp;gt;&lt;/strong> Set authentication to bearer to receive a JSON response from the login endpoint.&lt;/li>
&lt;li>&lt;strong>&amp;lt;2&amp;gt;&lt;/strong> Change this to your own secret and keep it safe (do not store this in your VCS).&lt;/li>
&lt;/ul>
&lt;h3 id="step2-generate-a-token">Step2: Generate a Token&lt;/h3>
&lt;p>Generate a valid JSON Web Token on &lt;code>https://jwt.io/&lt;/code> using your secret.&lt;/p></description></item></channel></rss>