In rally rest api security token generated through https://rally1.rallydev.com/slm/webservice/v2.0/security/authorize is valid for how much time? Will it expire automatically?

[Legacy User]

In rally rest api security token generated through https://rally1.rallydev.com/slm/webservice/v2.0/security/authorize is valid for how much time? Will it expire automatically? We are not planning to use api key, we need to use only security token. 

 

As for every PUT/POST request we need a security key, can i get the security token once and store it for all later PUT/POST requests.

 

Please share your thought on this. Thanks

[Legacy User]

Hi Anil, i am trying to figure out connecting to rally through rally api similiar to you, but i have not been much successful so far. I am one step behind you. Every time, i try to get my rally api key through https:/rally1.rallydev.com/login, i was not successful. Today, after seeing your comment, i registered on ca community portal and i may have to wait 24-48 hours before i ll be able to login. But, is it possible for you to let me know, how you are able to generate rally api key?

 

Any help in this regard would be great help!!!

[Legacy User]

I generated API key from https://rally1.rallydev.com/login/accounts/index.html#/keys  and API keys tab.

[davse04]

Hi anil.vanaparthi,

A Security Token expires with an HTTP session. While this may not be a problem in a browser that keeps the session, if you are using it outside of the browser, e.g. in the terminal with a CURL command, then you need to manually maintain a session cookie.

 

If you are doing this in external code, you could trap errors checking for a HTTP 401. If you get that error, re-request a new token and proceed with the previous request.

 

Let me know if that helps,

Sean Davis

[Legacy User]

Thanks for the reply Sean.

 

I always get "Not authorized to perform action: Invalid key" message. I am doing the rest call from a java application, where each rest call is done on a new http client request. Is this because of new http request always, the security token is getting invalid always?

[davse04]

Hi Anil,

Are you also sending the basic authentication credentials with the security token? If not, please give that a try.

 

Thanks,

Sean Davis

[Legacy User]

I am sending basic authentication credentials as well, but it is still failing. Thanks.

[davse04]

Can you please post your full request (Mask your security token and/or password)? I need to see how you are using the token. Here is a link to the webservices documentation (Must be logged into CA Agile Central). See "Using Security Token" Under the Authorization section. 

 

Thanks,

Sean Davis

[Mark Athas]

Years, later, also having problems with getting an authorization token, see: