---
title: Authentication
description: 'Use one of the following schemes to authenticate to the InfluxDB OSS v2 API: Token authentication Basic authentication Querystring authentication'
url: https://docs.influxdata.com/influxdb/v2/api/authentication/
estimated_tokens: 2008
product: InfluxDB OSS v2
version: v2
---

[Download InfluxDB API Spec](/openapi/influxdb-oss-v2-api.yml)

Use one of the following schemes to authenticate to the InfluxDB OSS v2 API:

-   Token authentication
-   Basic authentication
-   Querystring authentication

## Basic Authentication

### Basic authentication scheme

Use the HTTP Basic authentication scheme for InfluxDB `/api/v2` API operations that support it:

### Syntax

`Authorization: Basic BASE64_ENCODED_CREDENTIALS`

To construct the `BASE64_ENCODED_CREDENTIALS`, combine the username and the password with a colon (`USERNAME:PASSWORD`), and then encode the resulting string in [base64](https://developer.mozilla.org/en-US/docs/Glossary/Base64). Many HTTP clients encode the credentials for you before sending the request.

***Warning**: Base64-encoding can easily be reversed to obtain the original username and password. It is used to keep the data intact and does not provide security. You should always use HTTPS when authenticating or sending a request with sensitive information.*

### Examples

In the examples, replace the following:

-   **`USERNAME`**: InfluxDB username
-   **`PASSWORD`**: InfluxDB [API token](/influxdb/v2/reference/glossary/#token)
-   **`INFLUX_URL`**: your InfluxDB URL

#### Encode credentials with cURL

The following example shows how to use cURL to send an API request that uses Basic authentication. With the `--user` option, cURL encodes the credentials and passes them in the `Authorization: Basic` header.

```sh
curl --get "INFLUX_URL/api/v2/signin"
    --user "USERNAME":"PASSWORD"
```

#### Encode credentials with Flux

The Flux [`http.basicAuth()` function](/flux/v0.x/stdlib/http/basicauth/) returns a Base64-encoded basic authentication header using a specified username and password combination.

#### Encode credentials with JavaScript

The following example shows how to use the JavaScript `btoa()` function to create a Base64-encoded string:

```js
btoa('USERNAME:PASSWORD')
```

The output is the following:

```js
'VVNFUk5BTUU6UEFTU1dPUkQ='
```

Once you have the Base64-encoded credentials, you can pass them in the `Authorization` header–for example:

```sh
curl --get "INFLUX_URL/api/v2/signin"
    --header "Authorization: Basic VVNFUk5BTUU6UEFTU1dPUkQ="
```

To learn more about HTTP authentication, see [Mozilla Developer Network (MDN) Web Docs, HTTP authentication](https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication).\_

## Query String Authentication

Use the query string authentication scheme with InfluxDB v1-compatible API operations. Pass your InfluxDB username and API token as query parameters using `u` for username and `p` for password (API token).

### Syntax

`?u=USERNAME&p=INFLUX_API_TOKEN`

### Example

```sh
curl --get "INFLUX_URL/query" \
    --data-urlencode "u=USERNAME" \
    --data-urlencode "p=INFLUX_API_TOKEN" \
    --data-urlencode "q=SHOW DATABASES"
```

Replace the following:

-   *`INFLUX_URL`*: your InfluxDB URL
-   *`USERNAME`*: your InfluxDB username
-   *`INFLUX_API_TOKEN`*: your [InfluxDB API token](/influxdb/v2/reference/glossary/#token)

Query string authentication exposes your credentials in the URL and server logs. Use [Token authentication](#section/Authentication/TokenAuthentication) for production environments.

## Token Authentication

Use the [Token authentication](#section/Authentication/TokenAuthentication) scheme to authenticate to the InfluxDB API.

In your API requests, send an `Authorization` header. For the header value, provide the word `Token` followed by a space and an InfluxDB API token. The word `Token` is case-sensitive.

### Syntax

`Authorization: Token INFLUX_API_TOKEN`

### Example

#### Use Token authentication with cURL

The following example shows how to use cURL to send an API request that uses Token authentication:

```sh
curl --request GET "INFLUX_URL/api/v2/buckets" \
    --header "Authorization: Token INFLUX_API_TOKEN"
```

Replace the following:

-   *`INFLUX_URL`*: your InfluxDB URL
-   *`INFLUX_API_TOKEN`*: your [InfluxDB API token](/influxdb/v2/reference/glossary/#token)

### Related endpoints

-   [`/authorizations` endpoints](#tag/Authorizations-\(API-tokens\))

### Related guides

-   [Authorize API requests](/influxdb/v2/api-guide/api_intro/#authentication)
-   [Manage API tokens](/influxdb/v2/security/tokens/)