restful-authentication Questions

3

I was trying to get data from a vendor's REST API from Power BI. When getting data, under Web API, it keeps throwing this error. See attached screenshot. It is a POST method where you can filt...
Galactopoietic asked 12/8, 2019 at 19:51

4

Solved

The structure and protocol aside, I was wondering where JWT fits into client/server communication? Is it here to replace authentication and session cookies? Is it here to relieve servers of stori...
Robin asked 28/7, 2015 at 21:29

16

I have the following endpoint: http://millennium.iwise.com.br:6017/api/millenium_eco/Tabelas_preco.lista If I try to open via browser, it asks me credentials and then works fine - as seen on image...
Retrogression asked 23/3, 2016 at 19:30

3

Solved

I've been coding a RESTful service in Java. This is what I've understood till now: Token authorization is done using JSON Web Tokens (JWT) which have three parts: the header, the payload, and the s...

12

Solved

I'm building a RESTful API with Django and django-rest-framework. As authentication mechanism we have chosen "Token Authentication" and I have already implemented it following Django-REST-Framewor...
Rarebit asked 28/1, 2013 at 17:21

9

I am currently developing a REST-API which is HTTP-Basic protected for the development environment. As the real authentication is done via a token, I'm still trying to figure out, how to send two a...

6

Solved

I am writing a Java Rest Web Service and need the caller's IP Address. I thought I saw this in the cookie once but now I don't see it. Is there a consistent place to get this information? I saw on...
Domett asked 29/9, 2010 at 19:23

5

Solved

A similar question is posted here: What's an appropriate HTTP status code to return by a REST API service for a validation failure? The answer in the thread above states that "For instance if ...

2

Solved

For a RESTful enterprise application I need all calls to be authenticated, but I cannot provide a common group/rolt that all users of the system have. I authenticate and authorize over LDAP (which ...
Gastrectomy asked 15/12, 2011 at 11:5

4

Solved

I have a POST call in Postman that returns this JSON object: { "token": "eyJhbGciOiJIUzUxMiJ9.eyJzdWIiO3Jsb3Blei5hbnRvbmlvODVAZ21haWwuY29tIiwiZXhwIjoxNTkzNjc0MzUxLCJpYXQiOjE1MzMxOTQzNTF9.oTPVkcgF...

5

Solved

I am building a REST API for a DotNetNuke 6 website, making use of DNN's MVC-based Services Framework. However, I don't have any background in authentication, so I'm not even sure where to start. ...
Gough asked 16/4, 2013 at 19:0

4

I am a bit confused while trying to get Postman to work when testing the API of my application. Namely, I am using Passport authentication; however, I do not know which type it defaults to or uses ...

4

Solved

I am trying to call a locally hosted WCF REST service over HTTPS with basic auth. This works and the Authorization header comes thru just fine and all is happy: ServicePointManager.ServerCertific...
Smilacaceous asked 20/7, 2013 at 12:59

3

When I used the passport package , I encountered this error Call to a member function createToken() on null Why do I get this error? This is my code : $users = Users::where('Email' , $usern...
Sanguinaria asked 18/4, 2018 at 13:6

4

Solved

The JWT spec mentions a jti claim which allegedly can be used as a nonce to prevent replay attacks: The "jti" (JWT ID) claim provides a unique identifier for the JWT. The identifier valu...
Remember asked 6/3, 2015 at 21:18

9

Solved

Is using sessions in a RESTful API really violating RESTfulness? I have seen many opinions going either direction, but I'm not convinced that sessions are RESTless. From my point of view: authent...
Bodice asked 20/5, 2011 at 6:13

2

Solved

I have developed a web application using dot net core 1.1. It was working fine till I've updated to asp core 2.0. Then when trying to use the application, it reports this error: InvalidOperation...
Coburn asked 19/7, 2017 at 10:46

8

Solved

I am using node with express + mongoose and trying to use passport.js with restful api. I keep getting this exception after authentication success (I see the callback url on the browser): /Users/n...

3

I'm looking at Kong to replace my current hand-rolled NodeJS API gateway. Currently I have a user service that handles authentication (written in Django) by providing a JWT back upon login, which t...

2

Solved

I'm writing a web app (REST API) using Spring, Spring Security. Right now I have Basic authentication and a really straightforward authorization using username, password and roles. I want to improv...

5

Solved

Although I "think" I understand it I need some clarity. With PURE Restful authentication, things do get a bit unwieldy and using forms helps a lot with the UI of the application (i.e., get to have ...
Diopside asked 17/8, 2011 at 20:31

6

For some reason I'm getting an InvalidAuthenticityToken when making post requests to my application when using json or xml. My understanding is that rails should require an authenticity token only ...
Barnard asked 7/8, 2009 at 16:0

2

Solved

I understood the purpose of the CSRF Token protection. However, I think this protection is useless and we should remove it in the case of a REST API requiring an authentication token in the header...

3

Solved

I am leading a large team of azure functions developers. So, most of the examples quoted by Microsoft using the azure web interface don't work for me. I am developing Azure functions locally using ...

4

Solved

For the purpose of securing REST API using JWT, according to some materials (like this guide and this question), the JWT can be stored in either localStorage or Cookies. Based on my understan...
Deciduous asked 15/1, 2016 at 18:38

© 2022 - 2024 — McMap. All rights reserved.