Dell EMC SmartFabric OS10 User Guide Release 10.5.1

REST Token-Based Authentication

The REST Token-Based Authentication feature uses token-based authentication. Every OS10 REST API call requires basic authentication over HTTPs (with HTTP header 'Authorization: Basic <credentials>'). Instead a token is obtained first by calling the Login REST API using the basic authentication. You can use this token in further REST requests using HTTP Bearer Authentication (with HTTP header 'Authorization: Bearer <token>').

Sample response from login API:

{
    "access_token": <access token>,
    "token_type": "bearer",    
    "refresh_token": <refresh token>
}

Access token is valid for the configured amount of time, from the time token is issued.

Refresh can be done only for the configured number of times. After that new set of tokens needs to be acquired using basic authentication.

Refresh token is valid for the configured validity time of access token that is multiplied by the configured refresh limit.

REST Token-Based Authentication Limitations

The following limitations are applicable in 10.5.1:

• REST token authentication is disabled when FIPS mode is enabled.