The access to API resources is only permitted via a JobRouter user account. Therefore the user has to be authenticated first. All following requests have to contain the data JobRouter needs for the authentication of the user. There are two options for authentication. For both varieties a valid username and the respective password has to be send enclosed.
If Windows authentication (Single-Sign-On) is set in JobRouter and IIS, user data are transmitted automatically.
Authentication via a session ID
A session ID is requested via the Sessions resource of JobRouter. This is valid for 15 minutes. The session ID, together with the session name, will be transferred in a cookie in subsequent requests.
Authentication via a JSON Web Token (JWT)
The JSON Web token is requested via the Tokens resource of JobRouter. The default validity is 10 minutes. With the lifetime parameter a different validity period can be determined (maximum one hour).
The token has to be send in an X-Jobrouter-Authorization header with every request.
This authentication method is available from JobRouter 4.2 on.
