# Rest API Calls with Kerebros Encryption **URL:** \ **Category:** Ignition\ **Tags:** ignition81, scripting\ **Created:** [March 25, 2025, 2:02pm UTC](https://forum.inductiveautomation.com/t/rest-api-calls-with-kerebros-encryption/104157 "2025-03-25T14:02:26Z")\ **Posts on this page:** 1\ **Showing post:** 23
**Author:** ![Cody\_Morgan](https://avatars.discourse-cdn.com/v4/letter/c/db5fbb/32.png) [@Cody\_Morgan](https://forum.inductiveautomation.com/u/Cody_Morgan)\ **Post date:** [May 7, 2025, 2:07pm UTC](https://forum.inductiveautomation.com/t/rest-api-calls-with-kerebros-encryption/104157/23 "2025-05-07T14:07:58Z")
> Kerberos in Ignition I reached out to our Sales Engineering team, and here is what they suggested: > We don't have a working example of this and it is not likely a very simple concept to implement like that. More than likely some java libraries will need to be used in order to authenticate with Kerberos. Here's a project that I have found that might be useful as a starting point, but would require either wrapping this in a module or rewriting it in a way to work within jython. > [kerberos-auth-example/src/main/java/net/curiousprogrammer/auth/kerberos/example/KerberosAuthExample.java at 953e9f157b0aadbcf27b0d9ca67c2ef014ed3062 · jumarko/kerberos-auth-example · GitHub](https://github.com/jumarko/kerberos-auth-example/blob/953e9f157b0aadbcf27b0d9ca67c2ef014ed3062/src/main/java/net/curiousprogrammer/auth/kerberos/example/KerberosAuthExample.java) Good luck, and if you get this to work, please do share with the rest of us! > I was able to get "Basic" to work without issues. The issue is how to make it work in Ignition without hardcoded credentials of any sort as this is unaccepted in any business. If it helps, there are a few topics on the forum related to secrets management, they can help give you some ideas on how to keep hardcoded credentials out of your Ignition scripts (if you can tolerate BASIC auth): > [@How are you hiding your API keys?](https://forum.inductiveautomation.com/t/how-are-you-hiding-your-api-keys/96689): > > I'm just curios how you guys are hiding you api key in the scripting module, are you hashing it in a database or something similar? Just looking for suggestions. Thanks! > [@Good way to make sure my gateway scripts only run on the server?](https://forum.inductiveautomation.com/t/good-way-to-make-sure-my-gateway-scripts-only-run-on-the-server/33777/): > > More of a design question than anything. I have gateway scripts, some of which involve emailing our companies clients. On occasion, I’ve had coworkers unknowingly backup the gateway to a development machine with an old database copy, and then all of a sudden our clients are getting emails with outdated information that they already received. Not great. Currently I’ve been telling people to not export/import gateway scripts, but there are other scripts that don’t involve emails that are essen… > [@Secrets management](https://forum.inductiveautomation.com/t/secrets-management/42205): > > I do a lot of API integrations, and right now I’ve got API authentication information in plain text in my scripts - however this is not a best practice. I’m wondering if there is a way to put secrets into a vault or key store in Ignition that I can reference in my scripts to tighten up my security. Newer versions of PI Web API support OIDC, which might be more doable? --- _[View the full topic](https://forum.inductiveautomation.com/t/rest-api-calls-with-kerebros-encryption/104157)._