action conjur_get_apikey {
  label: "Gets the API key of a user given the username and password\nvia HTTP Basic Authentication.\n"
  description: "Passwords are stored in the Conjur database using `bcrypt`\nwith a work factor of 12. Therefore, login is a fairly expensive operation.\nHowever, once the API key is obtained, it may be used to inexpensively\nobtain access tokens by calling the Authenticate method. An access token\nis required to use most other parts of the Conjur API.\n\nThe Basic authentication-compliant header is formed by:\n1. Concatenating the role's name, a literal colon character ':',\n   and the password or API key to create the authentication string.\n2. Base64-encoding the authentication string.\n3. Prefixing the authentication string with the scheme: `Basic `\n   (note the required space).\n4. Providing the result as the value of the `Authorization` HTTP header:\n   `Authorization: Basic <authentication string>`.\n\nYour HTTP/REST client probably provides HTTP basic authentication support.\nFor example, `curl` and all of the Conjur client libraries provide this.\n\nNote that machine roles (Hosts) do not have passwords and do not need to\nuse this endpoint.\n"
  provider: conjur
  method: GET
  path: "/authn/{account}/login"
  encoding: json
  input: {
    type: "object"
    properties: {
      account: {
        type: "string"
        description: "Conjur account name"
      }
    }
    required: ["account"]
    additionalProperties: false
  }
  output: {
    type: "object"
    additionalProperties: true
  }
}