Basic Authentication
The Control Plane REST API supports authentication with a username/password combination (HTTP basic authentication). This allows a user to use a fixed username/password combination which will never expire unless the password has changed.
This is the simplest authentication mechanism, but has some security implications if the credentials are exposed to an attacker. To reduce security exposure, consider Token Authentication instead.
Examples
The user name is supplied in the format <organization>/<user>
along with the password.
Bypassing Authentication on local requests
If the REST server property com.nuodb.controlplane.server.bypassLocalAuthentication
is set to true
, then authentication and access control can be bypassed by issuing requests from a client on the same host as the REST server.