Authentication

To initiate REST API requests, you must first log in to FortiPortal and acquire an API key.

The authorization key must be included in all subsequent API requests in the Authorization header. The key expires in one hour.

To acquire an API key in the GUI:

1. Log in to FortiPortal as an administrator.

2. In the header, click on the cog icon.

3. Click on API Key.

4. In the New API Key dialog, click Regenerate, then copy the API token .

Include the key in the API requests in this manner:

"-H "Authorization: Token <API_key>"

Acquiring a new key does not expire any other generated keys.

To acquire a token in the API:

1. Log in and get a CSRF token.

   Send a POST request to this url:
   https://<ipaddress>/fpc/login/

   Parameters (JSON structure in the payload):

   • username: a valid admin user name
   • password: password for the above name

   If the login is successful, the cookie will contain the CSRF token in the csrftoken field.

2. Retrieve the authorization token.

   Send a POST request to this url:
   https://<ipaddress>/fpc/api/auth/login/

   Include the CSRF token from the previous step in the X-CSRFToken header.

   The JSON response contains the authorization token in the token field.