<api-user_name>

Enter a name that identifies the user.

email <email_str>

Type the email address of the user that is used for contact

purpose.

comments <comments_str>

Optionally, enter a description or comments for the user.

uuid <uuid_str>

Enter a unique identifier for the requesting user.

api-key <api-key_str>

Specify an API key for the API user; the minimum length is 40 characters.

key-mode {dynamic | jwt | standard}

Standard

Once the API user is created successfully, an API key and UUID are automatically assigned to this user by FortiWeb.

Dynamic

FortiWeb adopts RSA algorithm to generate token. It uses public key to encode, and private key to decode a random string with minimum length 64.

You need to enter the RSA key for dynamic key.

JWT

JSON Web Token (JWT) is an open standard (RFC 7519) that defines a way for transmitting information –like authentication and authorization facts– between two parties: an issuer and an audience.

For the JWT key, you need to enter the value for the following fields so that FortiWeb can communicate with the JWT server to validate the key.

url <jwt_url>

The URL that FortiWeb uses to communicate with the JWT server.

headers <jwt_hearders>

The headers append to the URL.

params <jwt_parameters>

The parameters append to the URL.

phantom-token-name <token_name>

The name of the phantom token used for JWT key.

token-name <token_name>

The name of the token used for JWT key.

header-verification <string>

The header verification used for JWT key.

payload-validation <string>

The payload verification used for JWT key.

rsa-key

The RSA key used for Dynamic key or JWT key.

create-time <create-time_str>

Specify the API user creation time.

<ip-access-list_id>

The index number of the IP entry.

<ip_str>

Specify the IP addresses from which the API key can only be used.

<http-referer-list_id>

The index number of the referer HTTP header entry.