Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

For DSpace 7 the REST authentication has been rewritten to use JSON Web tokens instead of Tomcat session ID's. This was done to support stateless sessions. The implementation still uses Spring Security similar to DSpace 6.

Warning

This documentation is a historical record for how the REST API authentication was designed and why JSON Web Tokens are used.

While this page may be useful to understand the underlying design, the latest documentation for how to authenticate via the REST API is found in our REST Contract: https://github.com/DSpace/RestContract/blob/main/authentication.md  The authentication examples found below may be outdated


Authenticate

To authenticate yourself, you have to send a POST request to the /api/authn/login endpoint with the following parameters:

...