SSL mutual authentication

[pierreguillot]

Hi, we gave you a few links about authentication mechanism in SonarQube :

Authentiction protocol

Hi @nbislicense, We do not use SOAP. All communication with SonarQube happens via HTTP (HTTPS being highly recommended). Authentication and authorization happen using one of the following methods: A token generated by the user (mostly for analysing code, and third-party tool access) A JWT session (for the UI)

Unique session identifiers

Hi, SonarQube authentication mechanism does not rely on Session, but on JWT. So authentication is stateless. About user token, here is the algorithm. Basically a SecureRandom byte array encoded as hexadecimal and hashed with SHA-384.

Basically, token, JWT, or delegated Oauth2 authentication. Could you please clarify your question, and tell us why theses answers are not sufficient?