Questions tagged [restful-authentication]

Questions about authentication for RESTful services.

Services designed using REpresentational State Transfer architecture must often authenticate clients. How best to do this can be a complex topic, as in true REST each client request to the server will contain all the information necessary to complete it (including authentication).

Resources

1447 questions
-1
votes
1 answer

Custom AuthenticationFilter Setting `LoginProcessingUrl` is Invalid

I'm building an OAuth2 Authorization server that supports Restful API with Spring Authorization Server and Spring Security. I want a SPA application built by React to provide a login interface at /login and submit the login information to the…
-1
votes
1 answer

Can any body answer my question about Oauth2?

I am buiding an app using svelteKit and django rest framework. SvelteKit is responsible for rendering HTML page(SSR) and django rest framework is responsible for providing restful API. Both App server and browser will fetch my restful API. I want…
-1
votes
1 answer

How to authenticate with firebase rules (RESTful)

I am not sure where I pass my auth uid token when I am making a request to firebase. I've tried: [myfirebaseurl]/path/1234.json?auth=[uid that i set]. Along with putting the UID in headers, content, and authorization. I am currently testing on…
Luxxe
  • 11
  • 7
-1
votes
1 answer

'No Access-Control-Allow-Origin header' Error when fetching data from Deezer API

I'm creating a React application that fetches data from Deezer Api Currently, I'm trying to get top albums https://api.deezer.com/chart/0/tracks : I created a function that requests the data fetchTopAlbums = () => { return…
-1
votes
1 answer

Can't authenticate with Api Key in Header

im trying to access a restful api but I can't seem to get the authorization header to work It works in curl. here's the documentation var request = URLRequest(url: URL(string:…
nOk
  • 2,725
  • 4
  • 13
  • 26
-1
votes
1 answer

Restful LDAP Authentication Service using springboot

I am writing a program that validates the username and password sent over HTTP POST and validate against ldap and sends the response back to the user whether the validation is success or not. My Websecurity Configurer implementation package…
Sree
  • 921
  • 2
  • 12
  • 31
-1
votes
1 answer

php to iphone code - CCHmac kCCHmacAlgSHA256

I am trying to login to my server using hmac sha256 encryption, i have working code in php, but can't get it working in iphone and traced it to that the hmac in iphone is yielding different output to php code, given same inputs php code is …
Maysam Torabi
  • 3,672
  • 2
  • 28
  • 31
-1
votes
1 answer

RESTful Call in C# using basic authentication returning error message

I am trying to call a Restful service on OSB. My code is: string url = _httpGetText + "&$filter=" + filter; WebRequest request = WebRequest.Create(url); request.Method = "GET"; ServicePointManager.SecurityProtocol = …
Edney Holder
  • 1,140
  • 8
  • 22
-1
votes
2 answers

Which grant type : Implicit or Auth code (with No secret key) is suitable for Single Page Application(SPA)?

I went thru multiple posts saying how implicit grant is a security risk and why auth code grant with AJAX request to Authorization server should be used after redirecting to application (without client_secret passed to Auth server). Now in 2019…
-1
votes
1 answer

Local Storage with RESTful API for user authentication. Is this a safe method?

I would really like some opinions on whether the following is a safe method as user authentication, and if not, please point out it's shortcomings. React front end PHP / MySQL based RESTful API on remote server 1) user signs up, data is posted to…
spice
  • 1,442
  • 19
  • 35
-1
votes
2 answers

Limiting the number of request by user in any given hour [Nodejs]

I'm building a server side application using Nodejs and Express and for some reason i was thinking about how to limit the number of request by user in a fixed amount of time to prevent hackers from spamming and trying to break down the server. I am…
-1
votes
1 answer

How to add authentication to REST API

I am currently learning REST APIs, but I still quite don't understand how to authenticate clients when making calls to the API. How developers usually do this? please refer me to a good tutorial.
user8107078
-1
votes
1 answer

how to add Cross Origin Resource Sharing in my java fie

I have written this it's not correct HttpClient httpClient = HttpClientBuilder.create().header("Access-Control-Allow-Origin", "*") .header("Access-Control-Allow-Methods", "GET, POST, DELETE, PUT") …
Vijay
  • 93
  • 1
  • 8
-1
votes
1 answer

What stateless mean in REST

Communication between clients and servers must be stateless. Servers should not store any information about the context of clients between calls. What about session information that is used to maintain authentication? How to authenticate an…
Romper
  • 2,009
  • 3
  • 24
  • 43
-1
votes
1 answer

Do we need to know about the database schema for designing Rest API?

I have to develop an android application where I may not be provided with the database schema for security purposes. The way they are suggesting is to use Restful API as an interface between the application and the database. Is it possible to design…