Authentication

Authentication in Interact is outlined below:

• An Identity Server is provided which is implemented by the OpenId Connect protocol.
• All users' API calls are authorized.
• All API calls between applications are authorized.
• The access token is stored in HTTPS cookies only which cannot be intercepted or modified.