From 7a0cef1bfdba2b44b9d3865feca99856f5f35fe1 Mon Sep 17 00:00:00 2001 From: Thien-Thi Nguyen Date: Tue, 22 Dec 2020 22:11:28 -0500 Subject: mention "HTTP basic auth"; add rfc link --- libeufin/concepts.rst | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'libeufin') diff --git a/libeufin/concepts.rst b/libeufin/concepts.rst index 9cfc13e4..157d6fe3 100644 --- a/libeufin/concepts.rst +++ b/libeufin/concepts.rst @@ -38,8 +38,9 @@ Nexus Users The concept of a *nexus user* is used to implement access control to the operations that the nexus provides. -A user has a login name and a (salted, hashed) password. (Other authentication -methods could be added in the future.) +A user has a login name and a (salted, hashed) password. +This is the `HTTP basic auth `_ method. +(Other authentication methods could be added in the future.) A nexus user can be marked as *superuser*. All permission checks are skipped for superusers. Only superusers are allowed to create/modify other users. -- cgit v1.2.3 From 8b56c12d1845b044df381e3cc60bd1e7d8387f9c Mon Sep 17 00:00:00 2001 From: Thien-Thi Nguyen Date: Tue, 22 Dec 2020 22:29:24 -0500 Subject: in examples, replace curl(1) w/ http(1) invocations (httpie) --- libeufin/concepts.rst | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) (limited to 'libeufin') diff --git a/libeufin/concepts.rst b/libeufin/concepts.rst index 157d6fe3..a0f2bb7b 100644 --- a/libeufin/concepts.rst +++ b/libeufin/concepts.rst @@ -67,7 +67,8 @@ Examples: .. code-block:: console # Download latest transactions via the default bank connection and store them locally - $ curl -XPOST $AUTHEADER https://example1.libeufin.tech/bank-accounts/my-acct/fetch-transactions + $ http -a $USER:$PASSWORD POST \ + https://example1.libeufin.tech/bank-accounts/my-acct/fetch-transactions Bank Connections ---------------- @@ -101,12 +102,14 @@ Examples: .. code-block:: console # Manually request the inter-day account report via the EBICS C52 order - $ curl -XPOST $AUTHEADER https://example1.libeufin.tech/bank-connections/my-ebics-testacct/ebics/download/C52 + $ http -a $USER:$PASSWORD POST \ + https://example1.libeufin.tech/bank-connections/my-ebics-testacct/ebics/download/C52 # Download available bank accounts that can be accessed through this connection, # according to the bank server (with EBICS, does a HTD request). # For each of them, create a bank account resource in LibEuFin. - $ curl -XPOST $AUTHEADER https://example1.libeufin.tech/bank-connection/my-ebics-testacct/fetch-accounts + $ http -a $USER:$PASSWORD POST \ + https://example1.libeufin.tech/bank-connection/my-ebics-testacct/fetch-accounts Facades ------- @@ -129,7 +132,8 @@ Examples: .. code-block:: console # Request the Taler-specific history through the facade - $ curl $AUTHEADER https://example1.libeufin.tech/facades/my-taler-wire-gw/taler/history/incoming + $ http -a $USER:$PASSWORD \ + https://example1.libeufin.tech/facades/my-taler-wire-gw/taler/history/incoming Access Control ============== -- cgit v1.2.3