Source: link with authorization

How to fetch a file from a private account using a login form, Basic authorization, or a Bearer token.

The “Link with authorization” source is used when a supplier file is not available directly. Eofferix must first sign in, receive cookies or send an Authorization header, and then download the XML, CSV, XLSX, JSON, or another source file.

Authorized URL source settings
The source card lets you choose the authorization scenario and enter the final file URL.

When to use it

  • The supplier URL opens a login page unless the user is authorized.
  • The file is available after a standard login form with a username and password.
  • The supplier provided Basic credentials or a Bearer token for a private URL.

How to choose the authorization scenario

  • Login form and cookies - Eofferix opens the login page, sends form parameters, stores cookies, and then requests the file.
  • Basic authorization - the username and password are sent in the standard HTTP Authorization header.
  • Bearer token - the token is sent as Bearer in the Authorization header.

Setup steps

  1. Create a source and choose “Link with authorization”.
  2. Paste the final file URL into “File URL”.
  3. Select the authorization scenario.
  4. For Basic, fill in the username and password. For Bearer, fill in the token.
  5. For a login form, enter the login page URL and, when needed, the form submit URL and POST or GET method.
  6. Fill in form parameters if automatic detection is not enough. Parameter values may contain {login}, {password}, and {token}.
  7. Run the access check. When it succeeds, fetch the file and continue with structure settings.

How to check the result

  • The access check finishes without an error.
  • The downloaded file has the expected format, not a login page or an error page.
  • The source card shows a working file and the next setup blocks become available.

If the file was not downloaded

Check that the URL points to the actual file, not just to an account page. For login forms, compare parameter names with the real supplier form. If the supplier uses two-factor authentication or one-time codes, ask for a technical URL, Basic access, a token, or FTP/FTPS export.