# API Permissions

# HTTP Request Permission Verification

All request parameters from the device will be sent with a Basic authentication format; The server can carry out permission verification accordingly.

Headers

Parameter name Parameter value Required
Authorization Basic ******************** Yes

Server verification (java): Obtain the Authorization part of the request header

request.getHeader("Authorization");

Verification

public class BasicUtil {  
  private static final char connector = ':'; 
  /**  
   * @param user username   
   * @param password   
   * @param ciphertext   
   * @return verification result   
   */  
  public static boolean basicAuthentication(String user, String password, String ciphertext) {
    BASE64Encoder encoder = new BASE64Encoder();    String src = user + connector + password;
    return encoder.encode(src.getBytes()).equals(ciphertext); 
  }
}

Response: 401

if(!Base64Util.basicAuthentication(userName, password,authorization)){
    return ResponseEntity.status(HttpStatus.UNAUTHORIZED).body(null); 
}