Web service keys, commonly referred to as WSKeys, are the primary method used for authenticating and authorizing interactions with web services available on the OCLC WorldShare Platform. WSKeys authenticate clients sending requests to web services, in effect, creating a “secure pipe” between a remote client and the data and functionality available on the Platform.
Web service keys typically have a secret associated with them. This secret is exactly that, a string which is only known to the client consuming the Platform and the Platform. Some methods of authenticating client require the use of both the WSkey and its secret to verify the identity of the client.
A WSKey can have one more more web service associated with it. To use a particular WSkey with a particular web service, that key must have that web service associated with it. Additionally, often WSkey limit access to a particular institution(s) data. For example: a WSkey associated with University of Wisconsin Madison and the WorldCat Knowledge base can only access University of Wisconsin Madison's WorldCat Knowledge base data. Typically a WSKey only has access to data for a specific institution. However, some WSKeys can access data for multiple institutions.
The Platform uses several patterns to authenticate clients. The mechanism used by each specific service is based on the data contained in the web service and the operations which clients are performing. Simple read web service which contain no personally identifiable information use a simple mechanism for authenticating clients. Web services which perform write operations, contain personally identifiable information or financial data use stricter authentication mechanisms.
Primarily WSkeys are used in three patterns to authenticate clients:
Requests for Production WSKeys must go through a validation process to verify the requestor's standing in relation to either their organization or the data they want to access, or both.
To request a WSkey for a particular web service or view existing WSkey information, login to Service Configuration. Have questions about requesting a WSKey? Check out our How to Request a WSKey Documentation.
The OCLC Developer Network supports the use of OCLC Web Services—a set of tools and APIs that expose data and services for WorldCat and our member libraries and partner institutions or companies. learn more »
© 2010 OCLC Domestic and international trademarks and/or service marks of OCLC Online Computer Library Center, Inc. and its affiliates