[Koha-devel] REST API authentication for external clients

2018-02-27 Thread Julian Maurice
Hi all, As you may know [1], BibLibre is working on an interface between Koha and Coral. To achieve that, Coral uses the Koha REST API. But we are facing a problem that is becoming really blocking : the lack of a proper authentication system for the REST API. At the moment, the only way to authen

Re: [Koha-devel] REST API authentication for external clients

2018-02-27 Thread Tomas Cohen Arazi
Hi Julian, we need to implement an OAuth2 server inside Koha, using Mojolicious::Plugin::OAuth2::Server [1]. I've worked on an endpoint for authenticating the API against a generic OAuth2 server (as a way to be able to test it :-D). I will file a bug very soon for that. My idea was then to implemen

Re: [Koha-devel] REST API authentication for external clients

2018-02-27 Thread Jon Knight
nOn Tue, 27 Feb 2018, Julian Maurice wrote: I think we really need an authentication mechanism other than cookies, so people can actually start using the API. There is bug 13920 [2] that hasn't moved since 8 months. I remember that some people disagreed with this patchset because it is crafting

[Koha-devel] Bugs needing sign off...

2018-02-27 Thread Mark Tompsett
Greetings, I was hoping that https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=16690 https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18908 and https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19547 might get signed off. GPML, Mark Tompsett __

Re: [Koha-devel] REST API authentication for external clients

2018-02-27 Thread David Cook
Julian, could you say more about how you want to authenticate with Koha? I’ve struggled in the past using OAuth2 for machine-to-machine authorization… although that Auth0 link that Tomas provided seems to suggest it is possible. Spotify uses OAuth2 for its REST API, and I had to do a bit of a