I have an API where the client calling in must include a signature. This is based on similar to oauth and how amazon do it (signature v2) My question is is the default standard to also add a signature in the response going back to the client?
Asked
Active
Viewed 34 times
0
-
Have a look at token-based systems. – ChrisBint Nov 22 '12 at 12:51
1 Answers
0
I have looked at other APIs like twitter and Amazon. They do not add authentication details in the response to the client

Noel
- 5,037
- 9
- 46
- 69