Authentiction protocol

Hi @nbislicense,

We do not use SOAP. All communication with SonarQube happens via HTTP (HTTPS being highly recommended). Authentication and authorization happen using one of the following methods:

  • A token generated by the user (mostly for analysing code, and third-party tool access)
  • A JWT session (for the UI)