API Authentication Security Improvement
omprakash_gurubaxani
Member
in APIs Ideas
As per API authentication guide here -
The first step to get access to Domo APIs is to generate ClientId/Secret and then make a request to get access token. This request is of type "Basic Auth" where client credentials (ClientId/Secret) are passed as base64 encoded string. Since these creds act like username/password sending them as just base64 encoded over https is secure but not the best form of security as they can easily decoded.
Ask is to update this method to send client creds as part of a POST request in Body to make them more secure and true OAuth (i.e. no use of Basic Auth at all).
Reference -
Tagged:
3
Categories
- All Categories
- 1.7K Product Ideas
- 1.7K Ideas Exchange
- 1.5K Connect
- 1.2K Connectors
- 292 Workbench
- 4 Cloud Amplifier
- 8 Federated
- 2.8K Transform
- 95 SQL DataFlows
- 602 Datasets
- 2.1K Magic ETL
- 3.7K Visualize
- 2.4K Charting
- 695 Beast Mode
- 43 App Studio
- 39 Variables
- 658 Automate
- 170 Apps
- 441 APIs & Domo Developer
- 42 Workflows
- 5 DomoAI
- 32 Predict
- 12 Jupyter Workspaces
- 20 R & Python Tiles
- 386 Distribute
- 111 Domo Everywhere
- 269 Scheduled Reports
- 6 Software Integrations
- 113 Manage
- 110 Governance & Security
- 8 Domo University
- 30 Product Releases
- Community Forums
- 39 Getting Started
- 29 Community Member Introductions
- 98 Community Announcements
- Domo Community Gallery
- 4.8K Archive