Permanent Token Authorization

In the 2017.1 release, we introduce permanent tokens feature that enables token-based authorization for REST API calls in scripts, plug-ins, and applications that communicate with external services. Use the permanent token as the Bearer parameter of the Authorization request header.

General procedures of creating and revoking a token in a user profile are described in the Manage Permanent Tokens page.

Using Permanent Tokens

Permanent tokens give you security and have the following benefits:

• Secure token-based authorization without implementing complex OAuth 2.0 flows.
• Simple management: You can easily create a token in your user profile. If you suspect that your connection has been compromised, you can revoke the token at any moment and generate a new one.
• Granular access to services and operations: A permanent token is created for a user account and lets perform only those operations that this account has permissions for. Thus, you can create various user accounts with different access scopes and permissions and use them for your specific tasks in particular services.

Sample

The following sample shows a REST API request to get settings of a user group in Hub which utilizes a permanent token as the authorization Bearer attribute.