Application Token Basic + Pin

1 min

GET

{{url}}/aioc-rest-web/rest/aapm/request/password?passwordExpirationInMinute=30&passwordChangeRequired=false&comment=COMMENT&token=TOKEN&sapmAccountPath=ACCOUNT_PATH&sapmAccountName=ACCOUNT_NAME&pin=PIN&responseType=JSON or default

Request Overview

The Application Token Basic + Pin method provides secret data for bound Vault accounts, with specific parameters depending on whether the account is bound to a single or multiple Vault accounts.

Usage:

Single Vault Account: sapmAccountPath and sapmAccountName parameters are not required.
Multiple Vault Accounts/Groups: Both sapmAccountPath and sapmAccountName must be provided along with the token.
Authentication: This method should be used only if the authentication level is set to BASIC + PIN. The PIN is shared by KRON PAM after the first request to the user’s pre-defined port.
Response Format: To receive the response in JSON format, set the responseType=JSON parameter. If this parameter is not set, the default response type for dynamic accounts is plain text.

Path Parameters

urlstring
Default
url

Query Parameters

passwordExpirationInMinutestring
Default
30
passwordChangeRequiredstring
Default
false
commentstring
Default
COMMENT
tokenstring
Default
TOKEN
sapmAccountPathstring
Description
If there is only 1 Vault Account related to the token, this param. can be null
Default
ACCOUNT_PATH
sapmAccountNamestring
Description
If there is only 1 Vault Account related to the token, this param. can be null
Default
ACCOUNT_NAME
pinstring
Default
PIN
responseTypestring
Description
User has to set this parameter to JSON if JSON response is needed.
Default
JSON or default

Header Parameters

Content-Typestring
Default
application/json
X-XSRF-TOKENstring
Default
{{csrftoken}}

Responses

200

curl

curl --request GET \
     --url '{{url}}/aioc-rest-web/rest/aapm/request/password?passwordExpirationInMinute=30&passwordChangeRequired=false&comment=COMMENT&token=TOKEN&sapmAccountPath=ACCOUNT_PATH&sapmAccountName=ACCOUNT_NAME&pin=PIN&responseType=JSON%20or%20default&passwordExpirationInMinute=30&passwordChangeRequired=false&comment=COMMENT&token=TOKEN&sapmAccountPath=ACCOUNT_PATH&sapmAccountName=ACCOUNT_NAME&pin=PIN&responseType=JSON%20or%20default' \
     --header 'accept: application/json' \
     --header 'x-xsrf-token: {{csrftoken}}'

javascript

var myHeaders = new Headers();
myHeaders.append("accept", "application/json");
myHeaders.append("content-type", "application/json");
myHeaders.append("x-xsrf-token", "{{csrftoken}}");

var requestOptions = {
   method: 'GET',
   headers: myHeaders,
   redirect: 'follow'
};

fetch("{{url}}/aioc-rest-web/rest/aapm/request/password?passwordExpirationInMinute=30&passwordChangeRequired=false&comment=COMMENT&token=TOKEN&sapmAccountPath=ACCOUNT_PATH&sapmAccountName=ACCOUNT_NAME&pin=PIN&responseType=JSON or default&passwordExpirationInMinute=30&passwordChangeRequired=false&comment=COMMENT&token=TOKEN&sapmAccountPath=ACCOUNT_PATH&sapmAccountName=ACCOUNT_NAME&pin=PIN&responseType=JSON or default", requestOptions)
   .then(response => response.text())
   .then(result => console.log(result))
   .catch(error => console.log('error', error));

ruby

require "uri"
require "json"
require "net/http"

url = URI("{{url}}/aioc-rest-web/rest/aapm/request/password?passwordExpirationInMinute=30&passwordChangeRequired=false&comment=COMMENT&token=TOKEN&sapmAccountPath=ACCOUNT_PATH&sapmAccountName=ACCOUNT_NAME&pin=PIN&responseType=JSON or default&passwordExpirationInMinute=30&passwordChangeRequired=false&comment=COMMENT&token=TOKEN&sapmAccountPath=ACCOUNT_PATH&sapmAccountName=ACCOUNT_NAME&pin=PIN&responseType=JSON or default")

http = Net::HTTP.new(url.host, url.port);
request = Net::HTTP::Get.new(url)
request["accept"] = "application/json"
request["content-type"] = "application/json"
request["x-xsrf-token"] = "{{csrftoken}}"

response = http.request(request)
puts response.read_body

python

import requests
import json

url = "{{url}}/aioc-rest-web/rest/aapm/request/password?passwordExpirationInMinute=30&passwordChangeRequired=false&comment=COMMENT&token=TOKEN&sapmAccountPath=ACCOUNT_PATH&sapmAccountName=ACCOUNT_NAME&pin=PIN&responseType=JSON or default&passwordExpirationInMinute=30&passwordChangeRequired=false&comment=COMMENT&token=TOKEN&sapmAccountPath=ACCOUNT_PATH&sapmAccountName=ACCOUNT_NAME&pin=PIN&responseType=JSON or default"

payload = {}
headers = {
   'accept': 'application/json',
   'content-type': 'application/json',
   'x-xsrf-token': '{{csrftoken}}'
}

response = requests.request("GET", url, headers=headers, data=payload)

print(response.text)

200