Infrastructure » DataONE API

Dave and I have been discussing what API methods may need to be defined for supporting somewhat standardized authentication.

So far we have a registry notion of authentication services:
GET /authenticate/ -> List of authentication type names
GET /authenticate/{auth_type} -> Connection info for authentication server

And a few service implementation
GET /portal/XXX -> initiates login procedure which may be direct (LDAP) or take you through a series of redirects as you authenticate with a chosen provider (CILogon, ORCID)
GET /portal/token -> returns the token string associated with the http session
GET /portal/logout -> discards the session

Some of these may need to be moved under the CN webapp, some may need to have new dataone types defined.