API access
How machines and people authenticate against Gigadrive APIs, and which issuer serves which case.
Gigadrive runs two OAuth issuers. Gigadrive IDP at idp.gigadrive.de signs people in, and the Gigadrive Network API at api.gigadrive.network mints machine tokens from API keys. Both produce a bearer token that the API accepts on the same Authorization header.
Which one you need follows from who is acting. A CI job deploying one application uses an API key. A tool acting for a signed-in person, such as the gigadrive CLI, uses the IDP.
Create an application-scoped key, exchange it for a token, and revoke it.
ScopesThe permission catalogue, and why a scope is not the same as an entitlement.
OAuth clientsSigning users in with their Gigadrive account, and why registration is not self-service.
Single sign-onWhat Gigadrive supports today, and what it does not.
AuthenticationThe Gigadrive Network API reference for the token endpoint and the headers it expects.