News for hackers. Stuff that matters.

A comment on Ask HN: What's the recommended method of adding authentication to a REST API?. Parent comment

Re:Ask HN: What's the recommended method of adding authentic... by alex_duf on Tuesday January 16, 2018 @06:22AM (#16157395)
I would agree, always start simple - unless you manipulate sensitive data - a shared secret is a good place to start (api-key or basic/digest auth)

You can always introduce other forms of authentication later. I have a slight preference for basic/digest auth as the secret isn't part of the URL, and therefore not cached/logged by any network equipment.

[ Parent | on HN ]
Re:Ask HN: What's the recommended method of adding authentic... by webster23 on Tuesday January 16, 2018 @04:09PM (#16162622)
The api-key does not need to be part of the URL, you can also put it in the Authorization header.

edit: typo

[ Parent | on HN ]