Security Token (S'ha redirigit des de: API key)

 Compartiu 

http://upload.wikimedia.org/wikipedia/commons/4/4f/Nonce-cnonce-uml.svg

APIs

1. REDIRECT Token-Based_Authentication#Introducci.C3.B3

Vegeu també

• Token
• Token-Based Authentication
• API Rate Limiting
• Nonce/cnonce
• Digest access authentication
• API

• Web API

• PHP:

• PHP Seguretat

• codeigniter-restserver
• codeigniter-restclient
• Json
• CSRF
• REST
• Laravel REST

Enllaços externs

• Designing a Secure REST (Web) API without OAuth': http://www.thebuzzmedia.com/designing-a-secure-rest-api-without-oauth-authentication by Riyad Kalla covers the best way to secure you rest api. But as this article aims at very beginners I am not going with any complex model. So for now we can go with generating a random api key for every user. The user is identified by the api key and all the actions can be performed only on the resources belongs to him.