mirror of
https://github.com/goauthentik/authentik.git
synced 2026-08-30 18:51:39 -07:00
19 lines
623 B
Plaintext
19 lines
623 B
Plaintext
---
|
|
title: Authentication
|
|
sidebar_position: 1
|
|
---
|
|
|
|
For any of the token-based methods, set the `Authorization` header to `Bearer <token>`.
|
|
|
|
### Session
|
|
|
|
When authenticating with a flow, you'll get an authenticated Session cookie, that can be used for authentication. Keep in mind that in this context, a CSRF header is also required.
|
|
|
|
### API Token
|
|
|
|
Users can create tokens to authenticate as any user with a static key, which can optionally be expiring and auto-rotate.
|
|
|
|
### JWT Token
|
|
|
|
OAuth2 clients can request the scope `goauthentik.io/api`, which allows their OAuth Access token to be used to authenticate to the API.
|