inecs
f8d3cbdd59
Add the FastAPI app, PostgreSQL migrations, Docker/Helm packaging, API contracts, docs, client examples, and the unit/integration/compatibility test suite for local client and tooling labs without a real vCenter.
1.4 KiB
1.4 KiB
Language / Язык: English | Русский
Session
Durable session identity shared by REST and SOAP:
app/vsphere/security/session.py.
Endpoints
| Method | Path | Notes |
|---|---|---|
| POST | /api/session |
Basic auth → JSON string session id + vmware-api-session-id header/cookie |
| GET | /api/session |
HTTP 200; x-vmware-session-user / x-vmware-session-roles headers |
| DELETE | /api/session |
Invalidates the session, clears cookie |
| POST/GET/DELETE | /rest/com/vmware/cis/session |
Legacy { "value": … } equivalents |
| POST | SOAP SessionManager.Login |
Returns the same session id; sets vmware_soap_session cookie |
| POST | SOAP SessionManager.Logout |
Deletes the session |
Highlights
- Sessions are opaque 32-char hex tokens stored in
vsphere_sessionswith a 2-hour sliding TTL — every authenticated call extendsexpires_at. - The four lab credentials (
vsphere_credentials, scrypt-hashed) are idempotently ensured on first login and by every seed profile (ensure_default_credentials). require_sessionresolves the session from either thevmware-api-session-idheader or cookie; missing/expired → HTTP 401.- Roles are attached to the session at lookup time
(
vsphere_credentials.roles) and drive Authorization.
See Authentication for full request examples.