mirror of
https://github.com/goauthentik/authentik
synced 2026-04-25 17:15:26 +02:00
19 lines
623 B
Markdown
19 lines
623 B
Markdown
---
|
|
title: Authentication
|
|
sidebar_position: 1
|
|
---
|
|
|
|
For any of the token-based methods, set the `Authorization` header to `Bearer <token>`.
|
|
|
|
### Session
|
|
|
|
When authenticating with a flow, you'll get an authenticated Session cookie, that can be used for authentication. Keep in mind that in this context, a CSRF header is also required.
|
|
|
|
### API Token
|
|
|
|
Users can create tokens to authenticate as any user with a static key, which can optionally be expiring and auto-rotate.
|
|
|
|
### JWT Token
|
|
|
|
OAuth2 clients can request the scope `goauthentik.io/api`, which allows their OAuth Access token to be used to authenticate to the API.
|