Proxy Authorization in API Using Headers
Learn how to authenticate Geonode API requests using the Authorization header.
API authorization ensures secure access to Geonode’s proxy services.
This guide explains how to authenticate requests using the Authorization header.
Step 1 — Get your API credentials
Before setting up authentication, make sure you have your Geonode API credentials.
→ How to access your Geonode API credentials
Step 2 — Generate the Authorization header
Geonode’s API uses Basic Authentication, which requires your username and password encoded in Base64.
-
Open the API documentation for the endpoint you want to test (for example, Retrieve Usage Statistics).
-
Click Try it on the API page.
-
A popup will appear asking for your username and password. Enter them.
-
The system automatically generates the
Authorizationheader for you — containing the Base64-encoded string.
-
Copy the generated header or the encoded string.
You can use it directly in your API requests or store the Base64 value in your code securely.
Step 3 — Follow best practices
- Generate once, reuse: Create your token once and reuse it for multiple requests.
- Store securely: Keep it in a
.envfile or secret manager. - Avoid hardcoding: Never paste credentials directly into your source code.
- Always use HTTPS: This encrypts your traffic and protects sensitive data.
- Rotate regularly: Update your credentials periodically.
When you do, generate a new token.
Troubleshooting
- Check that your header is formatted correctly:
- Encode exactly
username:password— no extra spaces or characters. - Use HTTPS in all requests; avoid using insecure HTTP.
- Test your setup with tools like Postman or cURL to confirm it works.
- If your credentials are compromised, change your password, regenerate your API key, and update the token.
If you encounter any issues, refer to the troubleshooting section or Geonode support.