Basic Authentication

The Control Plane REST API supports authentication with a username/password combination (HTTP basic authentication). This allows a user to use a fixed username/password combination which will never expire unless the password has changed.

This is the simplest authentication mechanism, but has some security implications if the credentials are exposed to an attacker. To reduce security exposure, consider Token Authentication instead.

Examples

The user name is supplied in the format <organization>/<user> along with the password.

Bypassing Authentication on local requests

If the REST server property com.nuodb.controlplane.server.bypassLocalAuthentication is set to true, then authentication and access control can be bypassed by issuing requests from a client on the same host as the REST server.