M
M
Max Ba2019-05-20 10:29:59
API
Max Ba, 2019-05-20 10:29:59

Why do I need authorization in the WEB API?

I read and am surprised, double authorization is used everywhere. Most often, a standard, server one, where a token is issued and all work is already done with it.
Here is a site, you send it a POST array and it returns JSON. A classic of any API in fact.
Why can't I send a username and password with every POST request?

Answer the question

In order to leave comments, you need to log in

2 answer(s)
E
Evgeny Romashkan, 2019-05-20
@EvgeniiR

Authentication can be more difficult than entering a username and password. Here you want to enter a two-factor through Google authenticator/sms/email, and logging in with a new one every time will not be an option.
Well, store the username and password of the client in clear text on the client all the time the application is running .. Not everyone will like it.

M
Makssof, 2019-05-20
@makssof

What is token based authentication?

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question