News for hackers. Stuff that matters.

A comment on Ask HN: What's the recommended method of adding authentication to a REST API?. Parent comment

Re:Ask HN: What's the recommended method of adding authentic... by mring33621 on Tuesday January 16, 2018 @11:01AM (#16159110)
I was planning to use custom headers over HTTPS for a similar thing, but then I read that some firewalls will strip custom headers, even over HTTPS. Can anyone with experience comment? Thanks.
[ Parent | on HN ]
Re:Ask HN: What's the recommended method of adding authentic... by matwood on Tuesday January 16, 2018 @12:58PM (#16160291)
Just use a Bearer token in the Authorization header from the OAuth spec: https://tools.ietf.org/html/rfc6750#section-2.1
[ Parent | on HN ]