Gets the API key of a user given the username and password via HTTP Basic Authentication.

v1.0.0

Passwords are stored in the Conjur database using bcrypt with a work factor of 12. Therefore, login is a fairly expensive operation. However, once the API key is obtained, it may be used to inexpensively obtain access tokens by calling the Authenticate method. An access token is required to use most other parts of the Conjur API.

The Basic authentication-compliant header is formed by:

Concatenating the role's name, a literal colon character ':', and the password or API key to create the authentication string.
Base64-encoding the authentication string.
Prefixing the authentication string with the scheme: Basic (note the required space).
Providing the result as the value of the Authorization HTTP header: Authorization: Basic <authentication string>.

Your HTTP/REST client probably provides HTTP basic authentication support. For example, curl and all of the Conjur client libraries provide this.

Note that machine roles (Hosts) do not have passwords and do not need to use this endpoint.

Input

{
  "type": "object",
  "properties": {
    "account": {
      "type": "string",
      "description": "Conjur account name"
    }
  },
  "required": [
    "account"
  ],
  "additionalProperties": false
}

Output

{
  "type": "object",
  "additionalProperties": true
}