That email needs to be added as an account to the FileMaker file before the user can log in using SIWA. Well, at least to some extent as the user will still have to generate a random email ahead of time. The main difference is that this version allows for Apple’s Hide My Email. After all, it is just another OpenID Connect/OAuth authentication flow. In fact, over two years ago, Steven Blackwell and I authored a white paper that shows how to do this. The ability to use your Apple ID to log into your FileMaker solution is not new. Sign in with Apple enabled for Database Sign In Admin API Changesīesides the new method for logging into the Admin API with the PKI prefix and the JWT token, the Admin API has also been updated to list, add, change and remove key pairs.Īdding a new key requires you to send the name of the JWT token (remember that the name is embedded in the JWT token that you’ll use to log into the Admin API and it has to match exactly), and the public key part of the pair: Since generating key pairs and JWT tokens is fairly standard, at Soliant, we have created the same logic in JavaScript using a simple NodeJS microservice that you can download from GitHub. Instead of that python file, you can use Postman or Insomnia, as shown above, to accomplish this more easily. The other python file (fmadminapi_pki_request_example.py) is just to show how you can use the JWT token to log into the Admin API. You only need fmadminapi_pki_token_example.py. Rather I suggest copying these python files over to a machine that has Python or where you can install Python. Python is not installed by default on your Windows or Linux server, and I do not recommend installing Python on your server to run this code. Two Python example scripts are included in the new ‘Tools’ folder This type of access is extremely well suited for any type of automation however, it cannot be used for logging into the Admin Console or for taking actions through the Admin Command Line Interface. When you let a group view the logs, they will see the full logs, not just log entries related to the files in their folder.Īlong the same lines of providing access to a FileMaker Server without giving away the master password or adding someone to your external authentication group that provides full access, you can now use private/public key pairs to grant access and restrict the validity of that access to the Admin API.This limitation is not just for sub-admin groups but for external authentication as a whole. While this works for macOS and Windows, it does not for Linux. If your server is on Ubuntu, you cannot use local accounts and local groups that exist in the OS of the server.Their privilege does not extend to the Admin CLI or the Admin API. These groups only have rights to the Admin Console.There are some other Linux-specific feature changes in the other sections below.Īdd people to a single External Authentication group that gives them access to everything To enable: Enabling the XML API in the Admin CLI To enable: Enable the XML API by making an Admin API call By default, the XML API is off in the Admin CLI The Admin Console does not have a setting to enable the XML API You have to make an Admin API call or enable/disable it from the Admin CLI. There is no setting on the Admin Console to enable the XML API. That brings the Linux version closer to feature parity with its macOS and Windows siblings.īringing back the XML API is a surprise move, and it is unknown at this point what effect this has on the Data API allotment. The XML API is now available in the Linux version of FileMaker Server. Ubuntu 20 LTS (Long Term Support) will be supported through 2030 with security patches and until 2025 with active updates: Ubuntu 20 LTS and active updates timeline XML API If you are upgrading your server from 19.5 to 19.6, we suggest that you install Ubuntu 20 fresh instead of upgrading the OS from 18 to 20. With FileMaker Server 19.5, you could pick either Ubuntu 18.04 LTS or 20.04 LTS now, you need to use Ubuntu 20.04. There are two noteworthy changes that are relevant only to the Linux version of FileMaker Server.
0 Comments
Leave a Reply. |