Re: [Koha-devel] REST API authentication for external clients

2018-03-02 Thread Julian Maurice
  > > *From:*koha-devel-boun...@lists.koha-community.org > [mailto:koha-devel-boun...@lists.koha-community.org] *On Behalf Of > *Tomas Cohen Arazi > *Sent:* Wednesday, 28 February 2018 2:15 AM > *To:* Julian Maurice <julian.maur...@biblibre.com> > *Cc:* koha-devel@lists.koha

Re: [Koha-devel] REST API authentication for external clients

2018-02-27 Thread David Cook
To: Julian Maurice <julian.maur...@biblibre.com> Cc: koha-devel@lists.koha-community.org Subject: Re: [Koha-devel] REST API authentication for external clients Hi Julian, we need to implement an OAuth2 server inside Koha, using Mojolicious::Plugin::OAuth2::Server [1]. I've worked on an en

Re: [Koha-devel] REST API authentication for external clients

2018-02-27 Thread Jon Knight
nOn Tue, 27 Feb 2018, Julian Maurice wrote: I think we really need an authentication mechanism other than cookies, so people can actually start using the API. There is bug 13920 [2] that hasn't moved since 8 months. I remember that some people disagreed with this patchset because it is crafting

Re: [Koha-devel] REST API authentication for external clients

2018-02-27 Thread Tomas Cohen Arazi
Hi Julian, we need to implement an OAuth2 server inside Koha, using Mojolicious::Plugin::OAuth2::Server [1]. I've worked on an endpoint for authenticating the API against a generic OAuth2 server (as a way to be able to test it :-D). I will file a bug very soon for that. My idea was then to

[Koha-devel] REST API authentication for external clients

2018-02-27 Thread Julian Maurice
Hi all, As you may know [1], BibLibre is working on an interface between Koha and Coral. To achieve that, Coral uses the Koha REST API. But we are facing a problem that is becoming really blocking : the lack of a proper authentication system for the REST API. At the moment, the only way to