How To Set Authorization Header In Postman

In this activity, you'll event the Postal service dna/system/api/v 1 /auth/token request to generate a security token that you can apply to authorize additional requests. Your Postal service dna/system/api/five i /auth/token request provides a valid username and countersign to DNA Center as a cord that is the base 64 encoding of the username : password string. This encoded cord is the value of the Say-so header that accompanies your request.

Note

To improve readability, the remainder of this department uses a shorthand annotation refers to this request more simply as Postal service /token. In practice, this request would actually Mail service to the post-obit URL: https:// fqdnOrIPofDNACenterPlatform /deoxyribonucleic acid/organization/api/five 1 /auth/token Yous tin can ever detect the full request path for any Dna Center Platform API in the DNA Center API Reference documentation.

Although this guide uses Postman, you can use any HTTP customer or HTTP-enabled code library that yous prefer.

1. Use Postman or another HTTP client to create a POST https:// fqdnOrIPofDNACenterPlatform dna/system/api/v 1 /auth/token request.

   • In this request path, supplant fqdnOrIPofDNACenterPlatform with the IP address of your DNA Center instance. For example, to use the DevNet Always-On Sandbox, supplant fqdnOrIPofDNACenterPlatform with the sandboxdnac.cisco.com domain name.

   • For an introduction to creating requests in Postman, see REST Request Basics.

2. Add to your request an Potency header that provides the base 64 encoding of username : password as its value.

   1. In the Postman Authorization tab below the URL field, pull down the Blazon menu and select Basic Auth.

      Postman displays a login form.

   2. Enter your username and password in the appropriate fields and so click Update Asking.

      Postman sets the value of the Authorisation header to the word Basic followed by the base 64 encoding of the username : password cord.

      Tip

      If you are not using Postman, you can generate the base 64 encoding of username : password in a variety of other ways. For instance, in Python 2.7.1 , you can enter 'username:password'.encode('base64') at the Python command prompt. To catechumen the encoded value back to obviously text, enter 'encoded_string'.decode('base64') at the Python control prompt. (If you tin't cosign successfully, try using the decode command to make certain that the encoded string provides the correct credentials.)

3. Add to your request a Content-Blazon header that has awarding/json as its value.

   1. In Postman, click Headers tab below the URL field.

      Postman displays the headers to be sent with this asking. For instance, the Potency header that you created in the previous step should be visible.

   2. Enter Content-Type in the fundamental field that appears beneath the Authorization header.

      When yous click the key field, an additional, empty key field appears; every bit you blazon, possible blazon-alee matches appear. When you are satisfied with your entry, printing Enter on your keyboard.

   3. In the value field that appears to the right of the Content-Type key that you lot simply created, type application/json and so printing Enter.

   The Content-Type header indicates the MIME blazon of the torso of the asking; in this case, the application/json value specifies that the trunk is JSON. You lot'll meet that nigh responses from Dna Center return this header value, as well, because these responses provide a JSON-formatted response body.

4. Send the asking; for example, click the Transport button in Postman.

   A successful request returns 200 OK and the response body contains a Token aspect that provides the token itself. The token remains valid within the boundaries of session timeout.

   Successful generation of security token

   

   Important

   Treat security tokens as highly confidential data! Before using a token, verify its signature. Shop tokens securely. For more information, see Where to Store Your JWTs. Destroy saved tokens when your application closes or the user logs out. Y'all cannot invalidate a token on demand; information technology remains valid on Deoxyribonucleic acid Heart Platform until it expires. Therefore, it is important for your application to manage tokens securely.

5. To authorize subsequent requests, pass the token every bit the value of the Ten-Auth-Token header of the request; later in this guide, y'all'll use this token to send several requests.

What to exercise next

Examine the HTTP response and the security token that Deoxyribonucleic acid Center returned; run across Examining a Successful Asking.

Source: https://pubhub.devnetcloud.com/media/dna-center/docs/documents/b_DNAC_NB_REST_GSG-ciscotopichtml/c_post_token_dnacp_api_gsg.html

Share this post