web services - How to authorize user in RESTful request? -


from posts rest services, see should not used sessions with rest, , every request there need send user credentials rest service. don't see continues how make authorization in next requests after login.

in project, authenticate (login) user, checking credentials database server.

if every rest request comes user credentials again, mean that, need of authorization after login, need check credentials again database? means, after login, every click , surfing pages, need access database check user credentials, login.

or...

am missing thing?

is there way remember in server side user had logged in before , authorised?

do keep secret key related user in server, , check etc.? but, not mean keeping session?

rest => not session => send credentials every request

does above mean, => authorize user in authentication ?

or other alternatives?

thank clarifications.

i think best approach:

rest => not session => send credentials every request

take on oauth. version 1.0 may useful you.

spring security have implementations oauth in java.


Comments

Popular posts from this blog

linux - xterm copying to CLIPBOARD using copy-selection causes automatic updating of CLIPBOARD upon mouse selection -

c++ - qgraphicsview horizontal scrolling always has a vertical delta -