Questions tagged [restful-authentication]

Questions about authentication for RESTful services.

Services designed using REpresentational State Transfer architecture must often authenticate clients. How best to do this can be a complex topic, as in true REST each client request to the server will contain all the information necessary to complete it (including authentication).

Resources

1447 questions
0
votes
1 answer

Implementing REST based authentication

I am working on a REST system, and am about to start developing a way in which a user authenticates in order to use the service. After researching hashing methods, I have read WikiPedia - Basic Authentication However I have some questions about…
JosephG
  • 3,111
  • 6
  • 33
  • 56
0
votes
2 answers

Authorization in WebAPI (MVC4)

I've been tasked with the following by our client: Make it so an authenticated user cannot modify another users information Currently, the phone app sends our API the users username and password as so over HTTPS as a BASIC auth header:…
0
votes
1 answer

RESTful URLs for two login forms

If I two different type of accounts for my site (say user and admin; they are completely different, so an admin cannot be a user with administrative permissions.), what is the best way to create restful urls for it? For one, I was just going to…
Kousha
  • 32,871
  • 51
  • 172
  • 296
0
votes
2 answers

Is solely using HTTPS adequate for securing API RESTful web-application?

I'm researching a new web-application that I want to develop using HATEOAS, RESTful principles. I'm looking into authentication schemes and the information for authentication of web-apps (via browsers, not machine-to-machine), seems a bit…
David Kerr
  • 1,376
  • 2
  • 15
  • 20
0
votes
1 answer

What is wrong with this method? (I need some awesome Ruby Coders)

Ignoring rolerequirement with restfulauthentication method in a subdomain scope I have created a site which utilizes subdomains and searches whether or not the user is at: subdomain.domain.com or domain.com. If the user is in subdomain.domain.com,…
JZ.
  • 21,147
  • 32
  • 115
  • 192
0
votes
1 answer

windows azure java client calling RESTFUL API

Can we connect to windows-azure mobile service from a java client as mentioned in the below url ? http://msdn.microsoft.com/en-us/library/windowsazure/jj710106.aspx because when i connected it is giving me 403 error. I was able to connect with…
0
votes
1 answer

Online application with RESTful webservice design

I am just woundering, how we can use RESTful architecture/webservice to implement online shopping kind of application ? Say we want to build anything like Amazon where user can login and do shopping. First time, we will perform authentication using…
sauumum
  • 1,638
  • 1
  • 19
  • 36
0
votes
1 answer

Securing REST Service using a simple Token

I have a drop-down in my application for which i populate the data using an Ajax call as shown below. This works fine and my Web API URL is "http://example.com/Service.svc/json/getairports" $(function () { …
0
votes
1 answer

Linking iOS app to DynamoDB via JSON

Before I begin, the question I will ask may be considered 'newbie', however due to the lack of time I need help and cannot find a simple answer through most documentation provided. I have created an iOS application that currently is referencing an…
0
votes
1 answer

Restlet - how to update authenticator verifier map after a new user is created?

My quest to deal with a java restlet server continues. I was able to set-up my routing as desired, in particular there is a User resource which can be created with a POST call on an URL. When this happens, a new user is created on the Database. From…
T. Rossi
  • 465
  • 1
  • 6
  • 23
0
votes
0 answers

Unable to stub current user using restful authentication plugin

I'm working on a Rails 2.1 app. This app uses 'rspec', '1.2.9' and 'rspec-rails', '1.2.9' . This app uses restful authentication plugin. There is a :login_required before filter method that I have in my Application Controller which basically does…
boddhisattva
  • 6,908
  • 11
  • 48
  • 72
0
votes
1 answer

Restful Authentication plugin and Users model

I have a question about using the restful-authentication plugin. I have it working just fine with the "out of the box" setup. I am trying to add a user partial form nested into a form of another model. I can not seem to figure out how to have this…
looloobs
  • 761
  • 2
  • 11
  • 24
0
votes
1 answer

cross site authentication which is compatible with OAuth 2.0

In my case, company B (domain B) hosts a portal, which has link to my web app (domain A). If user clicks on hyperlink on the portal to my domain, he/she should be automatically logged into my app. Existing poilicies that i cannot change: User also…
Jimm
  • 8,165
  • 16
  • 69
  • 118
0
votes
1 answer

Social networks as login for RESTful web service

I am working on a RESTful web service implementation and wanted to provide security for my RESTful web service, but I dont want to take the pain of registering user and maintaining and asking new customers to create another account. I was planning…
pbathala
  • 1,390
  • 2
  • 18
  • 39
0
votes
2 answers

How to build PHP API authentication with Facebook token and username/password

I'm building a very simple API using silex (php micro-framework). I have an idea on how to authenticate user using Facebook connect or username / password. I want to build this API to provide data to my mobile app. My API is using HTTPS. The…
maxwell2022
  • 2,818
  • 5
  • 41
  • 60