Forum Discussion

BradElmore's avatar
BradElmore
Qrew Assistant Captain
8 years ago

Where does the Auth ticket come from?

I trying to create a url similiar to below......but I do not know where to get the "auth_ticket" info (ticket=[Auth_Ticket]) -- where do I get this info to enter?   Thanks


https://target_domain/db/target_dbid?a=API_GenResultsTable&ticket=
auth_ticket&apptoken=app_token&qid=5&jht=1&query=
{'6'.CT.'done'}AND{'14'.CT.'USA'}&clist=7.8&slist=6&options=sortorder-A
  • You don't have to worry about supplying the ticket if you are already logged into QuickBase through a browser. In this case the ticket will already have been set in an https only cookie and will be sent to the QuickBase server automatically.
  • MCFNeil's avatar
    MCFNeil
    Qrew Captain
    but if you really wanted a ticket you can get one via this request .

    https://<em>target_domain</em>/db/main?a=API_Authenticate&username=PTBarnum<br>&password=TopSecret&hours=24<br>

    Where you can set the length of how long the ticket is valid.

    THis come in handy if you want to send an email notification with a link that expires.
    • MCFNeil's avatar
      MCFNeil
      Qrew Captain
      It messed up the formatting:
      https://target_domain/db/main?a=API_Authenticate&username=PTBarnum&password=TopSecret&hours=24
    • _anomDiebolt_'s avatar
      _anomDiebolt_
      Qrew Elite
      Placing a URL in an email that includes a username and password is a very bad idea as it needlessly exposes the credentials to future discovery and use. In practical terms, the only place to use API_Authenticate is use from a server or some other place outside the browser.
    • MCFNeil's avatar
      MCFNeil
      Qrew Captain
      You don't put the username and password in the URL that is sent, just the Auth ticket that is set to expire in x number of hours.  
      #ComeOnMan