Hi, I would like to ask about user_api_keys. Currently, I am working on integrating our app to use Discourse user_api_keys for authorization. My question is: is there any way to retrieve user_api_keys using the API? Right now, after logging in via /session.json and checking the current user profile…

[이미지] Stephen M J: My question is: is there any way to retrieve user_api_keys using the API? No, they are shown once and then only a hash is stored. [이미지] Stephen M J: to avoid requiring the user to approve authorization a second time after they’ve already authorized it during the first …

I don’t it is possible to retrieve the value of an API key via the API. Discourse doesn’t save unencrypted API keys to the database. Even if you could retrieve the encrypted value, there wouldn’t be a way to decrypt it on your application. Can you explain your use case a bit more? If a user API key…

Hey @RGJ , thanks for your answer.

Hi @simon , thanks for your response. Let me explain our case in more detail. We are building a mobile app that relies on backend logic from Discourse endpoints. When a user logs in through the app, the login data is sent to the Discourse API via session.json, which returns a cookie. This cookie is …

[이미지] Stephen M J: In this case, we can use the API keys as a global token within the mobile app to access other Discourse endpoints. However, when the user logs out, the token should be removed from the global state so that they cannot access endpoints like creating a new topic. Maybe you co…

Thanks for your input on this problem. I agree that it’s better to store the token in two places: first, in the global state to check the user’s login status, and second, in the database to store the user_api_keys.

[이미지] Stephen M J: am working on integrating our app to use Discourse user_api_keys for authorization. Why not use discourse connect ? That’s the way to do authentication.

Hi, thanks for your suggestion. The reason we aren’t using Discourse Connect here is that we are not connecting Discourse with any other websites or other places. All login functionality will be handled directly through Discourse, and the app will only interact with Discourse.

[이미지] Stephen M J: we are not connecting Discourse with any other websites or other places. Your app is another place. I’m pretty sure that you want to configure your app to be a Discourse Connect client so that people can log in to your app by logging in to Discourse. Then your app can inte…

API를 통해 user_api_keys 값을 가져오는 방법

개발

simon 9월 23, 2024, 6:44오전 6

API 키와 별도로 세션 토큰을 생성하는 것이 어떨까요? 이 토큰을 사용하여 사용자의 로그인 상태를 표시할 수 있습니다. 이렇게 하면 사용자가 로그아웃할 때 API 키를 삭제할 필요가 없습니다.

글		댓글	조회수
User API keys specification Integrations rest-api , reference	69	38273	9월 22, 2025
Discourse Login & Registeration Development	4	3749	9월 28, 2016
Generating and retrieving user API keys Development	0	544	3월 2, 2023
Allow API use by regular users, not just admins Development rest-api	6	1605	2월 14, 2023
Generating User Api Keys with REST API Development rest-api	20	9048	4월 8, 2018

API를 통해 user_api_keys 값을 가져오는 방법

Related topics