0

For rest security I want to send an application key and a hash with every request. Actually I would like to have it as url parameter like

 DELETE api.project.com/model/1?client=12345?hash=abcdef

Do you see any problem with this? Is there another way to send this data?

1 Answer 1

2

You should use Authorization HTTP header in request. If you send it as a query parameter it can be cached in many places i.e. user's browser, http caching proxy which may lead to leak of user's credentials.

On SO: Custom HTTP Authorization Header

Sign up to request clarification or add additional context in comments.

Comments

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.