EVE API - Authentication

Every page that requires authentication will require the same two pieces of information: userID and apiKey. These are very simple to get and just require the user to visit a page on the MyEVE website and get them. In an example wallet application, if the user indicates that they want to add a new character, the flow should be something like this:

• User wants to add a new user to the program/web site
• User is directed to input their user ID and API key which they can get:
  http://myeve.eve-online.com/api/default.asp
• On all requests, application/web site sends the authentication parameters as POST arguments
  • userID: 222834
  • apiKey: RGdosyTMjlKIeESvEhAIbpfRAQeoTCcQHRDlZNAjRbImKMvxMdPNr8IFtlkdYEeg

Authentication is really just a matter of passing in the API key and user ID. There is nothing special you have to do with the data. The user provides it and you pass it in. Errors are generally of the form 'authentication failure' if you provide invalid data.

Note that user credentials are cached for a few minutes (typically 5). If the user changes their API key on the web site, the new one won't work until the old one expires from all of the web server caches. It may be worth mentioning to your users that if they get an authentication failure, try again in a few minutes.