topic Identify forma/autodesk user from extension in Forma Site Design Developer Forum

Identify forma/autodesk user from extension

akolymparis — Tue, 10 Oct 2023 10:43:59 GMT

Greetings,

We need our REST service (that underpins our extension) to be able to identify and validate the user (forma/autodesk) that calls our endpoints, so we can provide them with valid permissions to our system.

Can you suggest a possible way to achieve this?

Thanks in Advance,
Aristotelis

Re: Identify forma/autodesk user from extension

henrik_steenJL382 — Tue, 10 Oct 2023 13:31:17 GMT

Hello!

I think you are talking about "retrieving authenticated calls from Forma" as described here: https://aps.autodesk.com/en/docs/forma/v1/reference/http/#retrieving-authenticated-calls-from-forma - is that right?

We intentionally do not expose any information about the end user who are initiating these types of requests. There might not even be an end user for e.g. an automated process (future work). Permissions should be coupled to the Forma project and not a user of the Forma project.

If you need to set up this connection the currently only way to solve this is to build a custom left menu panel embedded view. In the embedded view application you have access to the active project ID and can sign in the user in your product and let the user authorize the Forma project to data on your side.

Henrik

Re: Identify forma/autodesk user from extension

akolymparis — Wed, 11 Oct 2023 10:54:17 GMT

Hello,

Thank you for your reply!
We had to deliberate a bit on what you were saying.
Indeed we need to take some steps to align our business model to the requirements, but the extension endpoints look like to be the way to go.

Thank you very much,
Aristotelis