Authentication Strategies

Overview

The API Umbrella configuration has the following authentication strategies.

auth_strategies:
      enabled:
        - github
        - google
        - persona

The omniauth library, used by API Umbrella, supports many more authentication strategies.

Specifics

Each authentication strategy has specific considerations.

Github

The Github authentication strategy needs the following information:

• client_id
• client_secret

To set up the Google authentication strategy:

1. Review and follow the Github API Basics of Authentication
2. The Homepage URL should be: <your-domain.com>
3. The Authorization callback URL on the Github OAuth Application Settings should be: (See issue #46)
4. Add your client_id and client_secret to the api-umbrella.yml
5. Restart API Umbrella

Google

The Google authentication strategy needs the following information:

• client_id
• client_secret

To set up the Google authentication strategy:

1. Review and follow the Google OAuth for Login documentation
2. The Redirect URIs on the Google Developers Console should be: (See issue #44)
3. The Javascript Origins should be: <your-domain.com>
4. Add your client_id and client_secret to the api-umbrella.yml
5. Restart API Umbrella

Mozilla Persona