MiniFinder team has created more secure way of authorization similar to oAuth. Old authorization way (core/login) was valid till 01 Oct 2015. All clients who implemented own login forms or demo-access links should change them to meet new authorization way.

For now two forms exist: extended and simplified.

Form is generally useful for mobile and other apps.

http://{host}/login.html

http://{host}/login.html?client_id=...&access_type=...&activation_time=...&duration=...&lang=...&flags=...&user=...&redirect_uri=...&response_type=...&css_url=...

All parameters are optional

After successful authorization redirect to redirect_uri occurs and next GET-parameters transferred:

• • access_token — 72-symbol token which ma ybe used for authorization in future;

• user_name — authorized user name (if 0x1 flag was stated before token generation).

In case of authorization error redirect occurs to the login form itself, specified error is shown and next GET-parameters transferred:

• svc_error — error code;
• client_id;
• access_type;
• activation_time;
• duration;
• flags.

After getting 72-symbol token you may use it in your authorization apps:

svc=token/login&params={"token":"<access_token>","operateAs":"<optional_sub_user>"}

Form is made for simple embedding into sites via iframe to further quick jump to one or more monitoring sites after authorization On default link to monitoring site will be created. Also you may add links to other sites (using cms_url, lite_url, mobile_url, demo_url).

http://{host}/login_simple.html

http://{host}/login_simple.html?lang=...&cms_url=...&cms_title=...&lite_url=...&mobile_url=...&demo_title=...&demo_url=...&title=...&css_url=...

All parameters are optional