Lastline Authentication

generated: '2026-07-19'
method: searched
source: https://analysis.lastline.com/analysis/api-docs/html/api.html#authentication
docs: https://analysis.lastline.com/analysis/api-docs/html/api.html#authentication
note: >-
  Captured from the live first-party Lastline Analyst API documentation (copyright 2009-2021 VMware,
  Inc.), still served at analysis.lastline.com and user.lastline.com and verified HTTP 200 on
  2026-07-19. No OpenAPI/Swagger definition was ever published, so this profile is transcribed from
  the prose reference rather than derived from a spec.
summary:
  types:
  - http
  - apiKey
  api_key_in:
  - query
  - formData
  oauth2_flows: []
  session_based: true
schemes:
- name: HTTPBasic
  type: http
  scheme: basic
  standard: RFC 7617
  description: All Lastline Analyst API endpoints accept HTTP Basic Authentication, carrying the API
    key as the username and the API token as the password.
  sources:
  - https://analysis.lastline.com/analysis/api-docs/html/api.html
- name: KeyAndToken
  type: apiKey
  in: request-parameter
  parameters:
  - name: key
    description: Lastline Analyst API key.
    required: true
  - name: api_token
    description: Secret Lastline Analyst API token.
    required: true
  description: Credentials may be embedded directly in each request as the `key` and `api_token`
    parameter pair instead of using HTTP Basic. Both values are ASCII text and are only ever sent
    over HTTPS.
  sources:
  - https://analysis.lastline.com/analysis/api-docs/html/api.html
sessions:
  supported: true
  login_operation: login
  login_path: /analysis/login
  ping_operation: ping
  description: A client may call login() to validate credentials once and establish an HTTP session;
    subsequent requests may present the session token instead of the credentials. ping() verifies an
    active session.
  expiry_error: ANALYSIS_API_AUTHENTICATION_REQUIRED
  opt_out_header: x-nsx-lastline-no-session
  opt_out_description: >-
    Setting `x-nsx-lastline-no-session: 1` mandates that the API not establish a session for the
    request.
credential_issuance:
  self_service: false
  description: API key and API token were issued by Lastline (later VMware) to customers; there was
    no public self-service signup for the Analyst API.
oauth2: false
openid_connect: false
mutual_tls: false