Skip to main content

Authorization

eZintegrations platform supports all sort of Authorization for any standard APIs like REST API, SOAP API, gRPC or GraphQL.

The major Authorizations are :-

  • API Key
  • Basic Authentication
  • OAuth1.0
  • OAuth2.0
  • AWS Signature
  • NTLM Authentication
  • Custom Algorithm Signature
  • Any other custom architecture based Authorization


API Key

API Key is key-value pair based authorization where the key is Authorization and the value which is one time string generated from Application while enabling the API for defined set of action with roles and privileges.

There are various application whose API Key are static and its a one time activity to enable those keys, keep them in secret mode and use them for API Authorization

Authorization : noKWB57FVhzjh11FRIv9HEghY94gXHyoFPPS3QlHEtbGIZnMqDsPjsCiWkoDNE7W6UA2gclTtZTs4dZbiP20a9shY06IX5icKkRSdcQBnDTyaRno5BQphBdW0sX6sQto

In eZntegrations API Data Source user can select Type as  No Auth under Authorization and under Headers call the key as Authorization and the value as you get from the application 


 

image.png

And under Headers add the key-value pair

image.png



When working with OAuth 2.0 and sending data in URL-encoded format, you can provide values in the 'refresh token endpoint body' field in the following format :

Refresh Token Endpoint Body :

{
    "grant_type":"password",
    "client_id":"XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",
    "client_secret":"XXXXXXXXXXXXXXXXXXXXXXXX",
    "username":"XXXXXXXXXXXXXXXXXXXXXXX",
    "password":"XXXXXXXXXXXXXXXXXXXXXXXXX"
 }
  • When dealing with OAuth 2.0 and sending data in URL-encoded format as a string, you can provide values in the 'refresh token endpoint body' field using the following format:
Refresh Token Endpoint Body : "client_id=XXXXXXXXXXXXXXXXX&client_secret=XXXXXXXXXXX&grant_type=refresh_token&refresh_token=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
Back to top