Answer the question
In order to leave comments, you need to log in
REST authorization, will this method work?
Good day!
A method for authorizing REST requests is considered, the idea is as follows:
the user logs into the application using his credentials and receives a token to access the rest service. The service itself issues tokens. All exchange over normal http. The token is put into the database and contains the expiration time. After that, the token is encrypted before being given to the user. Only the rest service knows how to decrypt this token. After the token arrives at the rest service, it decrypts it and determines all the necessary data for authenticating the rest client. How safe and convenient is it?
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question