Workspace

## Overview

Workspaces provide isolated environments for organizing applications, managing user permissions, and controlling resource allocation across tenants.

## Features

### 1. User Permission Assignment

Administrators can assign specific users to a workspace when creating it. Users assigned to a workspace can only manage applications within that workspace.

### 2. Client-Side Encrypted Access

`appKey` and `appSecret` are used to generate signed URLs for securely sharing tenant application access. Signed links are valid for **15 minutes** by default.

**Steps to generate a signed URL:**
1. Record the `appKey` and `appSecret` from the Access Authorization settings.
2. Sort `appKey`, `appSecret`, and the current `timestamp` (long integer) alphabetically.
3. Compute a **SHA-1 digest** of the concatenated sorted string.
4. Append `appKey`, `timestamp`, and `signature` as query parameters to the URL.

> **Security Note:** Never include `appSecret` in the URL query string when calling `enterAppli`, `getEnterAppliURL`, or `getAppliList` to prevent credential leakage.

### 3. Limiting Concurrent Users

Administrators can set a concurrency limit per workspace. Setting it to `0` means no limit. The total concurrent users across all workspaces cannot exceed the system's overall authorization quota.

### 4. SDK ID Encryption

Users can generate an encryption key for secondary development. The encrypted `sdkId` must be passed when integrating the client-side SDK.

## Signature Code Examples

### Java

```java
public static String getSignature(String key, String secret, String timestamp) {
    String[] arr = new String[] { key, secret, timestamp };
    Arrays.sort(arr);
    StringBuilder sb = new StringBuilder();
    for (String s : arr) { sb.append(s); }
    try {
        MessageDigest md = MessageDigest.getInstance("SHA-1");
        byte[] digest = md.digest(sb.toString().getBytes());
        return byteToStr(digest);
    } catch (NoSuchAlgorithmException e) {
        e.printStackTrace();
    }
    return null;
}
```

### PHP

```php
sort($arr, SORT_NATURAL);
$string = implode('', $arr);
$signature = sha1($string);
```