Skip to main content

Security

Global access restrictions

You can restrict access to API or to web via setting (global setting)

зображення.png

Set API key in settings!

 

Users access restrictions

You can restrict access by IP for some user (in user card)

зображення.png

 

User authorization by auth token

Also, if you use different systems to integrate Grusher, you can perform authorization based on a user token.

зображення.png

After clicking on the button to get the token, you will see it.

The token will only be shown once

зображення.png

Supported GET & POST method.

Example:
http://grusher.server/device?ip=192.168.1.1&auth_token=8b78c7d938eda184e2fe36b1fb3945c9

When using an authorization token, the user will be automatically logged in. If the authorization token is missing or invalid, a standard authorization scheme with a username and password will be performed.

Please note! This functionality is disabled on the default authorization page