Auth Token / API Auth

[D3CK3R]

First off, thank you for creating such an excellent tool—Pangolin looks really good! I noticed that API Auth token/Bearer support is mentioned in your roadmap.

Do you have any updates on when this might be available?
Are there any details on how it might be implemented?
Thank you again for all your hard work, and I appreciate any insights you can share on the timeline or planned approach for API Auth token support.

Best regards,
Tino

[oschwartz10612]

HI!

Thanks for the kind words. I can not tell you when this will happen but it could be a few weeks or months. It is not at the top of our priority list right now.

But you can still interact with the API. You would just need to log in as as a user to do so - you can use the email and password to get a auth token and use the token to auth with the api. Take a look at some of the Bruno templates we have to play around with that if you would like and feel free to ask any questions on the Discord!

[miloschwartz]

I don't think this is particularly hard to add, but as Owen said, would have to come out after we leave beta.

However, we recently released support for direct share links which enable you to pass an access token in the query params. This may be useful for some APIs if the token can stay in the params. After the first successful request with this method, it also returns a cookie which you could pass in subsequent requests. Example:

https://my-api.example.com/api/v1/get-todos/?p_token=abc.123

First requests authenticates, then the proxy returns a session cookie in a header:

Set-Cookie ...