Are DRM APIs bypassing authentication to get device data?

No, the Remote Manager APIs use HTTP Basic Authentication. The username and password are the same as the username and password you use to sign-on to the Remote Manager UI.

As an example, when the API to get the list of devices of an account is called, it will ask for Username and Password:

https://remotemanager.digi.com/ws/v1/devices/inventory

Only if username and password are valid, the API will return the response:

More details on this can be found in the Programmer Guide: Digi Remote Manager :: Remote Manager, in the “Detailed Introduction to Remote Manager APIs” section.

 

Last updated: Jul 17, 2024

Filed Under

Digi Remote Manager

Recently Viewed

No recently viewed articles

Did you find this article helpful?