Questions tagged [restful-authentication]

Questions about authentication for RESTful services.

Services designed using REpresentational State Transfer architecture must often authenticate clients. How best to do this can be a complex topic, as in true REST each client request to the server will contain all the information necessary to complete it (including authentication).

Resources

1447 questions
0
votes
1 answer

How to do API authentication with curl

I'm new to creating API's and I am making an API for my php site. Now in any case what I am currently doing is having my script do a cURL call to some php file which does all the processing. Aka im doing a POST call for example to an api file which…
0
votes
1 answer

Android: Rest PUT - how send data on server

I'm a litte bit frustrated. I've got a problem. I'm trying to send all inputs of a user via put REST request to the server. This is how the request json object look on the server: { id: "123", text: "My Name is Peter..., age": 15, …
0
votes
1 answer

Flask login together with client authentication methods for RESTful service

Here is the situation: We use Flask for a website application development.Also on the website sever, we host a RESTful service. And we use Flask-login for as the authentication tool, for BOTH the web application access and the RESTful service…
appletwo
  • 1,128
  • 1
  • 8
  • 6
0
votes
1 answer

HMAC restful authentication

I miss understanding something using HMAC authentication for my RESTFull service . HMAC sing nature is concluded on request header , and this is clue . But what about the body of the request , it's not hashed , how we should secure them . Does…
Wasim
  • 1,915
  • 5
  • 24
  • 39
0
votes
1 answer

AuthComponent for mobile (iphone) app development

We are building an iPhone App which will access our backend server using CakePHP 2.x.x Client is iPhone App using iOS SDK Server is using Cakephp2.0. We are able to create http POST for controller/action (users/login). This action is currently…
bluesclues9
  • 121
  • 1
  • 2
  • 7
0
votes
1 answer

Security Issue in WCF jQuery AJAX Call via GET method

I'm consuming WCF Services through jQuery AJAX call using GET method. Since I'm unable to get the WCF Call through jQuery AJAX using POST method work, I'm using GET method. With GET method, the URLs of WCF methods are exposed through JavaScript.…
Firnas
  • 1,665
  • 4
  • 21
  • 31
0
votes
1 answer

Not able to access Web API method using XMLHttpRequest but using Restclient Plugin and etc

I have run in to a problem. Please help with your expertise. I am developing web solution for a company. They have provided me Web API Method (REST). This API is in their domain. I am too access this from my domain. Even client has also already…
Rajul
  • 186
  • 1
  • 3
  • 14
0
votes
2 answers

Appannie api basic authentication

I'm trying to access appannie.com's api. I can't seem to get past the authentication. Here's what I have, any thoughts?
Dev01
  • 13,292
  • 19
  • 70
  • 124
0
votes
2 answers

Cannot get object from Session

I have the following scenario: I access to a web application - that makes use of spring security, create an object in session, let us say a cart with some entries. I access the application using a restful client. I do have: user, password,…
0
votes
1 answer

how to return multipart-MIME type message

client code.... HttpPost httpPost = new HttpPost(); MultipartEntity multipartEntity = new MultipartEntity(); FormBodyPart xmlPart = new FormBodyPart("soap-req", new StringBody(returnXml(), "text/xml",…
0
votes
1 answer

Explanations on Hmac User Authentication

I'm trying to implement the authentication system explains in this article Hmac User Authentication. I don't understand the following part : Server sends back: let MESSAGE = (USERNAME,REALM,SALT,SESSIONID,ENCRYPTED_SESSION_KEY) in…
Balmat
  • 163
  • 1
  • 1
  • 8
0
votes
1 answer

User authorization on a rest service via an access token

I have a mobile application (HTML 5, JavaScript) and a Restful service (Java, Jersey) to cater the mobile application. Mobile application sign in is handled via a Facebook (Sign in using Facebook account). And currently there is no any security…
Asanka
  • 429
  • 3
  • 10
0
votes
1 answer

Restful Authentication -- how to log in a user without password

I've got a cross-website integration to handle. Basically I'm passing a param into the rails application and if it evaluates correctly ... then I'd like to log a user in. Can this be done without the users password? something like simply evaluating…
carl crott
  • 753
  • 1
  • 9
  • 21
0
votes
1 answer

Web API in SPA template returning status 401 Unauthorized when passing username and password

When testing the WebAPI authentication in the SPA template, I can create a user, sign in, and retrieve sample to-do's using this url from Google Chrome: http://myhost.com:49688/api/TodoList When I try to retrieve the todo's using curl or via…
0
votes
1 answer

What is the correct flow when using oAuth with the Reso​urce Owners Password​s Credentials Grant​

i am looking to build a client to my RESTful hypermedia based API and after reviewing many options am learning towards oAuth* to become the de facto method for authorizing access to the API. I think i am understanding the overall oauth concepts,…
Modika
  • 6,192
  • 8
  • 36
  • 44