Security

To use our Api's you must have to be subscripted to a product, giving you a subscription key. Furthermore you must be Authenticated with an OpenID token. 

You can check the status of subcription requests at any time in your Profile. Approved subcriptions will show in your Profile along with a key. This key is your Ocp-Apim-Subscription-Key and is required for all calls to the Api. If you don't have a subscription check and subscribe our products.  

At the first time you subscribe a product, you will receive an email with instructions to generate a token.

OpenID allows clients of all types, including Web-based, mobile, and JavaScript clients, to request and receive information about authenticated sessions and end-users. Bearer Tokens are the predominant type of access token with OpenId. Bearer authentication is an HTTP authentication scheme that involves security tokens called bearer tokens, that can be understood as “give access to the bearer of this token.” The bearer token is generated by the server in response to a login request. The client must send this token in the Authorization header when making requests to protected resources:

Authorization: Bearer <token>


Generate a token

In each product in your subscription, you can find the "Token Generator" API. The documentation helps you to implement your code for generating a secure token.

You can also try the api, filling the example body with your secrets, that RINA gived you at your first subscription:

Picture