Skip to main content

Manage API Access Tokens

This section provides some task information for how to use API access tokens as part of your API projects in Designer Cloud. An access token is a hashed string that enables authentication when submitted to any endpoint. Access tokens limit exposure of clear-text authentication values and provide an easy method of managing authentication outside of the browser.

Notes:

  • An access token is linked to its creator and can be generated by submitting a username/password combination or another valid token from the same user.

    • If a token is created for userA, userB can be provided the token to impersonate userA.

    • You cannot create access tokens for users without their authentication credentials.

    • Changes to passwords do not affect tokens.

  • After a token has been created, it cannot be modified or extended.

    • You can create an unlimited number of tokens.

  • Access tokens can be used for authentication with any supported version of the APIs.

Enable

API access tokens are enabled by default.

Enable individual access

When access tokens are enabled, by default only administrators are permitted to generate tokens. Optionally, workspace administrators can enable individual users in the workspace to generate and use their own API access tokens. For more information, see Workspace Settings Page.

Generate New Token

API access tokens must be created.

Via UI

Tokens can be generated from the web application.

Steps:

  1. SIgn in to Alteryx Analytics Cloud (AAC).

  2. From the left nav bar, select User menu > Preferences > Access Tokens.

  3. Click Generate New Token.

  4. Specify the number of days for how long the token should live.

    ヒント

    Depending on how your environment is configured, you may be able to enter -1 to create a non-expiring token.

  5. Add a user-friendly description if desired.

  6. Click Generate.

注記

Copy the value of the token to the clipboard and store it in a secure location for use with your scripts. For security reasons, the token value itself cannot be retrieved from the application after it has been created.

For more information, see Access Tokens Page.

Use Token

After a token has been acquired, it must be included in each request to the server, for as long as it is valid.

注記

After a token has been created, it cannot be extended or modified.

注記

API access tokens are not used by users through AACAAC.

After you have acquired the token, you submit it with each API request to the platform.

Example - cURL:

The following example returns a JSON version of the list of available REST API endpoints for your environment:

curl http://<my_workspace_name>.cloud.trifacta.com/v4/open-api-spec -X GET -H "Authorization: Bearer (tokenValue)"

  • <my_workspace_name> is the name of the workspace from which the token was issued.

  • (tokenValue) is the value returned for the token when it was created.

Example - REST client:

If you are submitting your API calls through a REST client, the Authorization header must be specified as follows:

Authorization: Bearer (tokenValue)

Renew Token

New tokens can be acquired at any time.

注記

It is the responsibility of the user to acquire a new API token before the current one expires. If a token is permitted to expire, a request for a new token must include userId and password information.

Delete Token

  • Via UI: In the Access Tokens page, select Delete Token... from the context menu for the token listing. See Access Tokens Page.

このセクションの内容: