CKAN Passwordless API
Extension to allow paswordless login to the CKAN API.
Documentation: https://envidat.gitlab-pages.wsl.ch/ckanext-passwordless_api/
Source Code: https://gitlabext.wsl.ch/EnviDat/ckanext-passwordless_api
This plugin is primarily intended for custom frontends built on the CKAN API.
By using API tokens from CKAN core (>2.9), this plugin provides an authentication flow where:
- Users receive a login token via email (via reset key in core).
- API token is returned on valid login token (reset key) submission.
- The API token should then be included in Authorization headers from the frontend –> CKAN calls.
Based on work by @espona (Lucia Espona Pernas) for ckanext-passwordless (https://github.com/EnviDat/ckanext-passwordless).
A second login flow is also supported, using Azure AD:
- User logs in with authorization code flow in frontend (@azure/msal-browser or similar).
- Azure token is passed to azure specific endpoint.
- Token is validated and API token for CKAN is returned.
- The API token should then be included in Authorization headers from the frontend