Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 12 additions & 14 deletions docs/user/admin/app-tokens.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
sidebar_position: 2
id: app-tokens
title: App Tokens
description: App Tokens in OpenCLoud
description: App Tokens in OpenCloud
draft: false
---

Expand All @@ -12,17 +12,15 @@ App Tokens allow you to connect external apps and services (such as WebDAV clien

This improves security in several ways:

- You never need to expose your login password to third party applications
- App tokens can be revoked. If you're ever afraid that your app token has been compromised, just delete it.
- App tokens have a configurable expiry. This prevents unintended attack vectors.
- You never need to expose your login password to third-party applications.
- App tokens can be revoked. If you think one has been compromised, just delete it.
- App tokens have a configurable expiry date. This reduces the risk of misuse.

In addition to improved security, App Tokens also maximize compatibility with third party applications. Many
applications don't support modern login flows like OpenID Connect, but only accept standard logins with a username and
password instead. Your username in combination with any of your App Tokens serves as just that.
In addition to improved security, App Tokens also maximize compatibility with third-party applications. Many applications do not support modern login flows like OpenID Connect, but only accept standard logins with a username and password instead. Your username together with any of your App Tokens works as the login credentials.

:::important
App Tokens allow third party applications to access all your data. Make sure that you create
individual App Tokens per application and use a reasonable expiration period. If you don't want to
App Tokens allow third-party applications to access all your data. Make sure that you create
one App Token per application and use a reasonable expiration period. If you do not want to
expose access to all your data, consider using a public link instead.
:::

Expand All @@ -31,22 +29,22 @@ expose access to all your data, consider using a public link instead.
- Go to the App Tokens section in your OpenCloud account settings.
- Click on “+ New” to create a new token.

<img src={require("./img/app-tokens/create.png").default} alt="Create App Token" width="400"/>
<img src={require("./img/app-tokens/create.png").default} alt="Create App Token" width="1920"/>

- Enter a name for the token (e.g., "WebDAV Client").
- Select an expiration date for added security.
- Click Confirm.
<img src={require("./img/app-tokens/enter-name.png").default} alt="Enter the name an exparation date" width="400"/>
<img src={require("./img/app-tokens/enter-name.png").default} alt="Enter the name and expiration date" width="1920"/>

## Copy the App Token

- Once the token is created, it will be shown only once.
- Copy it immediately and store it in a secure place.

<img src={require("./img/app-tokens/copy-token.png").default} alt="Copy Token" width="400"/>
<img src={require("./img/app-tokens/copy-token.png").default} alt="Copy Token" width="1920"/>

:::note
If you lose the token, you’ll need to delete it and create a new one.
If you lose the token, you need to delete it and create a new one.
:::

## Use the App Token
Expand All @@ -59,7 +57,7 @@ You can now use the token in place of your password when connecting:

:::info
The username is usually the same as the one you use for your regular login.
However, if the Identity Provider is operating in autoprovisioning mode, only the UUID can be used.
However, if the identity provider is operating in autoprovisioning mode, only the UUID can be used.
You can find this UUID in the Preferences overview page.
:::

Expand Down
Binary file modified docs/user/admin/img/app-tokens/copy-token.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/user/admin/img/app-tokens/create.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/user/admin/img/app-tokens/enter-name.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.