-
Notifications
You must be signed in to change notification settings - Fork 2
Authentication
The service can only be accessed through an TLS (1.1 or newer) connection. This protects the access information and payload from theft or tampering.
It's recommended to verify the TLS's certificate validity to avoid a "man-in-the-middle" attack.
Authorization for the service is achieved by standard HTTP Basic Authentication.
For details read up on the HTTP specification or Wikipedia article.
Authorization is handled by adding the HTTP header X-WDSF-API-KEY with the value of the token you can generate in your WDSF profile here.
To access the WDSF API on behalf of an other person one can set the HTTP header "X-OnBehalfOf" to the MIN of the person to impersonate. This allows:
- Software developers to help scrutiny without themselves appearing as scrutiny in a competition.
- Result service providers to upload results on behalf of a scrutiny.
This feature is only available on request (webmaster@wdsf.org).
To gain read-only access to the service register at https://sso.wdsf.org/Register/Account/ServiceConsumer.
The username and password provided during the registration are used for the HTTP Basic Authentication.