mirror of
https://github.com/fosrl/docs-v2.git
synced 2026-10-06 12:49:10 +02:00
adjustments
This commit is contained in:
@@ -69,7 +69,6 @@
|
|||||||
}
|
}
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
"manage/access-control/links",
|
|
||||||
{
|
{
|
||||||
"group": "Clients",
|
"group": "Clients",
|
||||||
"icon": "desktop",
|
"icon": "desktop",
|
||||||
@@ -96,18 +95,19 @@
|
|||||||
"icon": "user-group",
|
"icon": "user-group",
|
||||||
"pages": [
|
"pages": [
|
||||||
"manage/access-control/create-user",
|
"manage/access-control/create-user",
|
||||||
"manage/access-control/approvals",
|
"manage/access-control/mfa",
|
||||||
"manage/access-control/rules",
|
"manage/access-control/security-keys",
|
||||||
"manage/access-control/forwarded-headers",
|
"manage/access-control/session-length",
|
||||||
"manage/access-control/login-page",
|
"manage/access-control/password-rotation",
|
||||||
|
"manage/access-control/change-password",
|
||||||
"manage/ssh",
|
"manage/ssh",
|
||||||
|
"manage/access-control/rules",
|
||||||
"manage/geoblocking",
|
"manage/geoblocking",
|
||||||
"manage/asnblocking",
|
"manage/asnblocking",
|
||||||
"manage/access-control/mfa",
|
"manage/access-control/links",
|
||||||
"manage/access-control/password-rotation",
|
"manage/access-control/approvals",
|
||||||
"manage/access-control/session-length",
|
"manage/access-control/forwarded-headers",
|
||||||
"manage/access-control/change-password",
|
"manage/access-control/login-page"
|
||||||
"manage/access-control/security-keys"
|
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
|||||||
@@ -1,6 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: "Links"
|
title: "Shareable Links"
|
||||||
icon: "link"
|
|
||||||
description: "Create Links and use access tokens for browser or programmatic access."
|
description: "Create Links and use access tokens for browser or programmatic access."
|
||||||
---
|
---
|
||||||
|
|
||||||
@@ -8,13 +7,11 @@ import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
|
|||||||
|
|
||||||
<PangolinCloudTocCta />
|
<PangolinCloudTocCta />
|
||||||
|
|
||||||
<img src="/images/links-dashboard.png" alt="Links in the Pangolin dashboard" />
|
Links are special URLs that grant access to one resource without requiring the recipient to sign in as a Pangolin user. Anyone with a web browser on the internet can access the resource if they have a valid Link.
|
||||||
|
|
||||||
Links are special URLs that grant access to one resource without requiring the recipient to sign in as a Pangolin user.
|
|
||||||
|
|
||||||
When you create a Link, Pangolin gives you two ways to use it:
|
When you create a Link, Pangolin gives you two ways to use it:
|
||||||
|
|
||||||
- **Link**: Send this to a person. This is a Pangolin-hosted URL, usually on your Pangolin domain, that validates the Link and then redirects them to the resource.
|
- **Link**: This is a Pangolin-hosted URL that validates the validity of the Link and then redirects them to the resource.
|
||||||
- **Access Token Usage**: Use this only when making direct requests to the resource URL from scripts, tools, or integrations.
|
- **Access Token Usage**: Use this only when making direct requests to the resource URL from scripts, tools, or integrations.
|
||||||
|
|
||||||
## Create a Link
|
## Create a Link
|
||||||
@@ -26,7 +23,9 @@ From the resource authentication flow, create a Link by:
|
|||||||
3. Setting an expiration, or enabling **Never expire** if the link should stay valid until you revoke it.
|
3. Setting an expiration, or enabling **Never expire** if the link should stay valid until you revoke it.
|
||||||
4. Copying the generated link or access-token details immediately after creation.
|
4. Copying the generated link or access-token details immediately after creation.
|
||||||
|
|
||||||
<img src="/images/links-create-modal.png" alt="Create a Link modal" />
|
<Frame>
|
||||||
|
<img src="/images/links-create-modal.png" alt="Create a Link modal" />
|
||||||
|
</Frame>
|
||||||
|
|
||||||
<Warning>
|
<Warning>
|
||||||
Anyone with the Link or access token can use it. Treat both like credentials.
|
Anyone with the Link or access token can use it. Treat both like credentials.
|
||||||
@@ -45,11 +44,13 @@ This is why the two URLs often look different:
|
|||||||
- The **Link** is usually on your Pangolin domain.
|
- The **Link** is usually on your Pangolin domain.
|
||||||
- The **Access Token Usage** examples use the resource URL directly.
|
- The **Access Token Usage** examples use the resource URL directly.
|
||||||
|
|
||||||
<img src="/images/links-access-token-usage.png" alt="Access Token Usage examples" />
|
<Frame>
|
||||||
|
<img src="/images/links-access-token-usage.png" />
|
||||||
|
</Frame>
|
||||||
|
|
||||||
### Query Parameter
|
### Query Parameter
|
||||||
|
|
||||||
By default, Pangolin accepts the access token in the `p_token` query parameter:
|
Pangolin accepts the access token in the `p_token` query parameter:
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
curl "https://resource.example.com/?p_token=<token-id>.<access-token>"
|
curl "https://resource.example.com/?p_token=<token-id>.<access-token>"
|
||||||
@@ -59,6 +60,8 @@ The query-string value is the token ID and token joined with a `.`.
|
|||||||
|
|
||||||
Some deployments may use a different query parameter name.
|
Some deployments may use a different query parameter name.
|
||||||
|
|
||||||
|
The query parameter must be sent in every request to the resource, not just the first time.
|
||||||
|
|
||||||
### Request Headers
|
### Request Headers
|
||||||
|
|
||||||
By default, Pangolin accepts these headers:
|
By default, Pangolin accepts these headers:
|
||||||
@@ -79,6 +82,8 @@ This is the same token data as the query-string form, split into two headers ins
|
|||||||
|
|
||||||
Some deployments may use different header names.
|
Some deployments may use different header names.
|
||||||
|
|
||||||
|
The headers must be sent in every request to the resource, not just the first time.
|
||||||
|
|
||||||
## Expiration and Revocation
|
## Expiration and Revocation
|
||||||
|
|
||||||
- Expiring links stop working automatically when their lifetime ends.
|
- Expiring links stop working automatically when their lifetime ends.
|
||||||
@@ -89,4 +94,3 @@ Some deployments may use different header names.
|
|||||||
|
|
||||||
- Links are best for targeted sharing and automation, not broad long-term access.
|
- Links are best for targeted sharing and automation, not broad long-term access.
|
||||||
- Link-based access does not carry per-user identity headers to the upstream app. For identity-aware upstream integrations, see [Forwarded Headers](/manage/access-control/forwarded-headers).
|
- Link-based access does not carry per-user identity headers to the upstream app. For identity-aware upstream integrations, see [Forwarded Headers](/manage/access-control/forwarded-headers).
|
||||||
- For the underlying auth settings on the resource itself, see [Authentication](/manage/resources/public/authentication).
|
|
||||||
|
|||||||
Reference in New Issue
Block a user