将用户凭证传递给休息服务的最佳方法

Question

I am building REST Service which will provide Authentication functionality( Connects To LDAP to Authenticate user Credentials).What is the best way to pass user credentials to REST. Is that best practice to send user credentials in Request body (POST), if not what are the best practices for this kind of scenarios.

Answer 1

There are several ways to do this. Amazon has a pretty interesant method of authentication that uses headers with timestamp tokens with symmetric passwords. I used this one as a model to design a solution at the company that i work for.

Here is the link. Its pretty easy to implement:

http://docs.aws.amazon.com/AmazonS3/latest/dev/RESTAuthentication.html