This article documents the two types of authentication requests used by Liferay Cloud.
The first method is basic authentication which is a HTTP protocol in the Authorization Header encoded when the server requests authentication from a client.
The second is by a user access token. Note that token authentication is required if SSO is enabled. The token from the cookie
access_token is retrieved and then used with the
Here is an example that uses token authentication with the upload API:
Note: Passing the user token in the header
dxpcloud-authorizationonly works for versions
3.2.0or greater of the backup service. Previous versions should be upgraded to at least
3.2.0. Requests to earlier versions must use the header
Authorization: Bearer <PROJECT_MASTER_TOKEN>. To find the project master token, run the command
env grep LCP_PROJECT_MASTER_TOKENin any shell on the Liferay Cloud Console.