Authentication Tutorial

Overview

The authentication feature is mainly used to ensure API security and implement access control to FlightHub 2.

Authentication is the process of verifying user identity. The OpenAPI performs authentication by passing X-User-Token in the Header parameter of an HTTPS request.

Authorization refers to determining whether an authenticated user has permission to access specific resources. FlightHub 2 performs authorization against the provided X-User-Token and X-Project-Uuid. Please ensure that the user corresponding to X-User-Token has the required permissions for the project so it can be accessed normally.

Note: X-User-Token is a JWT ticket. You can use a JWT Decoder (https://fusionauth.io/dev-tools/jwt-decoder) to parse out the user information corresponding to the token. When authentication fails, please check on FlightHub 2 whether the user has permission for the project being accessed.

JWT ticket example:

Interface Usage Flow

Refer to the sequence diagram below to obtain the user Token and project UUID offline. You must pass X-User-Token and X-Project-Uuid in the Header parameter of the OpenAPI interface to communicate with FlightHub 2.

The current FlightHub 2 X-User-Token is the cloud-interconnect organization key. The path to obtain the organization key is: FlightHub 2 -> My Organization -> Organization Settings -> Cloud Interconnect -> Organization Key.

X-Project-Uuid can be obtained from data.list.uuid in the "Get Project List Under Organization" interface.

Take "Add Members to Project" as an example:

Overview#

Interface Usage Flow#

Overview

Interface Usage Flow