vCloud Director version 9.1 (API version 30.0) added the ability to use Bearer Authentication for user authentication. Bearer Authentication is a very simple standard authentication method used in many API environments. Previously, vCloud Director used the x-vcloud-authorization header as the authorization token. As of the vCD 9.1 release, using the x-vcloud-authorization header has been deprecated and will possibly be removed in future vCloud Director versions.
How to authenticate using Bearer Tokens
- Make a POST request to /api/sessions/. Make sure to include the proper Accept header: “application/*+xml;version=30.0”, along with your username@Organization and password.
- The response from the /api/sessions request will include a X-VMWARE-VCLOUD-ACCESS-TOKEN header.
- For all subsequent vCloud Director requests, send an Authorization header containing Bearer along with the value returned in the X-VMWARE-VCLOUD-ACCESS-TOKEN header.
