With LeanIX 3.2 developers can now use API Tokens to access the REST APIs in a more secure way. Learn how to do this in this 10 minute presentation

1. CHANGE FROM API KEYS
TO API TOKENS
Supporting Information for LeanIX Release3.2

2. Summary: Stronger security with new API Tokens
2
• Administrators can now create API tokens which are used to access
the LeanIX APIs.
• The advantageof usingthe new API token over an API key is that
for every usecase a dedicated token is assigned and an expiry date
can be given.
• We havemigrated your API Keys to API Tokens with expiry date in
3 months. Pleasemake sure you useAPI Tokens from then on.
• All existing applications which usean API Key will continueto work
for 3 more months usingthe API Keys (until Sept, 15th)

3. Unified access to all LeanIX APIs with API Tokens
3
EAMAPI
• Create, Read, Update, Delete all Fact Sheets
• Create, Read, Update Comments
• …
• https://app.leanix.net/demo/api/v1
Metrics API
• Createnew data points in time-series database
• Read series data
• ...
• https://app.leanix.net/services/metrics/v1/docs
Survey API
New API
• Read results of a survey run
• Read all meta-data of a questionnaire
• ...
• https://app.leanix.net/services/poll/v1/docs
MTM API
• Create, Read, Update, Delete usersof account
• Create, Read, Update, Delete user permissions
• ...
• https://app.leanix.net/services/mtm/v1/docs

4. Before release 3.2: every user had one API Key
4

5. With release 3.2: Admins cancreate multiple API
Tokens, assigndescription and expiry date
5
Link to REST API Documentations

6. To increasesecurity, new API Tokens are only shown
once – make sure you store them in a passwordsafe
6

7. Interactive REST API Documentation (Swagger) now
alsouses API Tokens
7

8. Example: OAuth2 flow with new API Tokens
8
YourApp
OAuth2
(MTM)
Metrics
POST /services/mtm/v1/oauth2/token
Header: Authorization: Basic XXX
XXX = base64(“ApiToken: <API Token>”)
AccessToken in JWT Format
POST /services/metrics/v1/points
Header: Authorization: Bearer <AccessToken>

9. SDK-Example: Java(leanix-sdk-java)
9
ApiClient client = new ApiClient();
client.setBasePath("https://app.leanix.net/demo/api/v1");
client.setApiKey(”<API-KEY>");
OLD
API-Keys
(until 2.1.4)
NEW
API-Tokens
(from 2.1.5)
ApiClient apiClient = new ApiClientBuilder()
.withBasePath("https://app.leanix.net/demo/api/v1")
.withApiToken(”<API-TOKEN>")
.withTokenProviderHost(”app.leanix.net")
.build();
For more details see: https://github.com/leanix/leanix-sdk-java