Hi, I would like to ask about user_api_keys. Currently, I am working on integrating our app to use Discourse user_api_keys for authorization. My question is: is there any way to retrieve user_api_keys using the API? Right now, after logging in via /session.json and checking the current user profile…

[صورة] Stephen M J: My question is: is there any way to retrieve user_api_keys using the API? No, they are shown once and then only a hash is stored. [صورة] Stephen M J: to avoid requiring the user to approve authorization a second time after they’ve already authorized it during the firs…

I don’t it is possible to retrieve the value of an API key via the API. Discourse doesn’t save unencrypted API keys to the database. Even if you could retrieve the encrypted value, there wouldn’t be a way to decrypt it on your application. Can you explain your use case a bit more? If a user API key…

Hey @RGJ , thanks for your answer.

Hi @simon , thanks for your response. Let me explain our case in more detail. We are building a mobile app that relies on backend logic from Discourse endpoints. When a user logs in through the app, the login data is sent to the Discourse API via session.json, which returns a cookie. This cookie is …

[صورة] Stephen M J: In this case, we can use the API keys as a global token within the mobile app to access other Discourse endpoints. However, when the user logs out, the token should be removed from the global state so that they cannot access endpoints like creating a new topic. Maybe you c…

Thanks for your input on this problem. I agree that it’s better to store the token in two places: first, in the global state to check the user’s login status, and second, in the database to store the user_api_keys.

[صورة] Stephen M J: am working on integrating our app to use Discourse user_api_keys for authorization. Why not use discourse connect ? That’s the way to do authentication.

Hi, thanks for your suggestion. The reason we aren’t using Discourse Connect here is that we are not connecting Discourse with any other websites or other places. All login functionality will be handled directly through Discourse, and the app will only interact with Discourse.

[صورة] Stephen M J: we are not connecting Discourse with any other websites or other places. Your app is another place. I’m pretty sure that you want to configure your app to be a Discourse Connect client so that people can log in to your app by logging in to Discourse. Then your app can int…

كيفية استرجاع قيمة user_api_keys عبر الواجهة البرمجية

مطور

simon 23 سبتمبر 2024، 6:44ص 6

ربما يمكنك إنشاء رمز جلسة منفصل عن مفتاح API. استخدم هذا الرمز المميز للإشارة إلى حالة تسجيل دخول المستخدم. بهذه الطريقة لن تحتاج إلى حذف مفتاح API عند تسجيل خروج المستخدم.

الموضوع		الردود	مرات العرض
User API keys specification Integrations rest-api , reference	70	35383	22 سبتمبر 2025
Discourse Login & Registeration Development	4	3540	28 سبتمبر 2016
Generating and retrieving user API keys Development	0	527	2 مارس 2023
Allow API use by regular users, not just admins Development rest-api	7	1327	29 أبريل 2023
Generating User Api Keys with REST API Development rest-api	20	8704	8 أبريل 2018

كيفية استرجاع قيمة user_api_keys عبر الواجهة البرمجية

الموضوعات ذات الصلة