Twidget supports Bearer Authentication to ensure secure access to your endpoints. You can specify which endpoints should be secured or open. Once secured, an endpoint can only be accessed using a valid Bearer Token, which is generated via our API. Additionally, we provide functionality to generate authentication endpoints to handle user sign-up and token generation.
Bearer Authentication is a security mechanism for ensuring that only authorized users can access certain resources. It is commonly used in API security protocols and involves the use of Bearer Tokens.
-
A Bearer Token is a type of access token that is included in the HTTP headers of a request. This token is used to authenticate requests to protected resources:
Format: Typically, a Bearer Token is a string that is generated by the authentication server.
Usage: The client must include this token in the Authorization header of their HTTP requests to access secured endpoints.
Example:
Authorization: Bearer <token>
Bearer token in the Authorization header of a request
User Sign-Up/Login: Users sign up or log in via an authentication endpoint. During this process, they provide credentials which are validated by the server.
Token Generation: Upon successful authentication, a Bearer Token is generated by the server and returned to the user.
Access Secured Endpoints: The user includes the Bearer Token in the HTTP headers when making requests to secured endpoints. The server verifies the token before granting access to the resource.
Twidget allows you to specify which endpoints should be secured. You can do this via a straightforward configuration:
Unsecured Endpoints: These endpoints are open to all users and do not require a token for access.
Secured Endpoints: These endpoints require a valid Bearer Token. Without the token, access to the resource is denied.
Twidget enables you to easily generate the necessary authentication endpoints for user sign-up, login, and token generation. These endpoints include:
Sign-Up Endpoint: Allows new users to register and receive a Bearer Token upon successful registration.
Login Endpoint: Allows existing users to log in and receive a Bearer Token upon successful authentication.
Account workflows: The generator also offers current-customer details, logout, password update and password recovery. It does not generate a separate token-refresh endpoint. Review Creating Authentication Endpoints for the exact generated routes and Customer authentication tools for session and recovery commands.
User Sign-Up: The user sends a POST request to the sign-up endpoint with their credentials.
User Login: The user sends a POST request to the login endpoint with their credentials.
Token Response: Upon successful authentication, the user receives a Bearer Token.
Access Resource: The user includes the Bearer Token in the Authorization header when requesting a secured resource.
Bearer Authentication is a robust security mechanism to protect your API endpoints. By leveraging the features provided by Twidget, you can easily implement and manage authentication, ensuring that only authorized users have access to your secured resources.
Customer authentication tools
Use your workspace's Authentication page to manage customer access and independent login sessions. Build signup, login and logout workflows with the authentication commands in the command picker. These tools use your existing [authentication table](/docs/database/authentication-table). They manage p...
Streaming responses
Send updates progressively while an endpoint is running, instead of waiting for one final response. This is useful for progress messages or generated text that your app can display as it arrives. Enable a streaming endpoint. 1. Open the endpoint and choose Update endpoint. 2. Set Response mode to St...
What is an API
An API (Application Programming Interface) is a set of rules and protocols that allows different software applications to communicate and interact with each other. It defines the methods and data formats that applications can use to request and exchange information, services, or functionalities from...
Action Stats
Action Stats gives Twidget administrators a history of endpoint calls and event runs. It is an admin tool, rather than a workspace feature available to every team member. Find a run. Open Action Stats in the admin sidebar. Filter by workspace, organization, action type, test or real call, result, st...
Create File Endpoints
Overview. Twidget allows you to create file endpoints, which enable you to manage files in your file store. This feature is designed to streamline your workflow by providing predefined endpoints for common file operations. Creating File Endpoints. To create a file endpoint in Twidget, follow these s...