Questions tagged [restful-authentication]
Questions about authentication for RESTful services.
1,446
questions
1
vote
0
answers
177
views
Implementing Resource Owner Password Grant Oauth2 authentication using REST api on Flutter
I am currently building an android/ios/web app in flutter that uses oauth2 authentication with backend spring boot oauth2 server.Since I am new on flutter I don't have any idea about implementing the ...
0
votes
1
answer
78
views
Unauthorized status from mobile Xamarin Forms application with Axelor Rest web-services
I want to connect to the Axelor server with a Xamarin forms application, I use this method to test the rest services connectivity :
Login login = new()
{
...
0
votes
0
answers
117
views
Parallel request with Retrofit, Coroutines and Suspend functions any request 401 after we call refresh token, update access token then call same req
Parallel request with Retrofit, Coroutines and Suspend functions any request 401 after we call refresh token, update access token then call the same request again,
class ServiceInterceptor() : ...
-1
votes
1
answer
170
views
React Axios Basic Authentication, how to prevent pop up dialog box from showing
I have implemented an API with Basic Authentication
When I provide the correct username and password to the authentication, it works fine,
However, the problem is when i provide the wrong username / ...
1
vote
1
answer
184
views
Getting 401 error due wrong placement of token jwt error
public getOrderID(filters: any) {
let params = {
orderID: filters.orderID,
};
let token = this._currentUser.getValue().token;
const Headers = new ...
0
votes
0
answers
15
views
What is the purpose of token to request an API while having secret key?
I know tokens are obtained using secret key in API authentication and also know token can expire for security reasons but I'm unable to understand following:
If someone has stolen your secret key for ...
0
votes
1
answer
27
views
How to implement a single secure RESTful API layer for both web client and micro-services
I am currently implementing a API project using express-js.
There are multiple clients for the API. This includes a front-end web app and some backend services.
I am looking at using a normal session ...
0
votes
0
answers
208
views
Proper way to test 3rd party user authentication (haskell)
I'm writing an app in Haskell that makes use of a 3rd party restful API.
I'm also writing a test suite using hspec to make sure that my app behaves correctly.
BLUF: what is the proper way to test that ...
0
votes
0
answers
52
views
Consume a restful service with authentication
Today I'm dealing with an issue creating a client to consume a restful service with a Bearer JWT. After appying the swagger codegen maven plugin I got the following GET operation what I need to ...
1
vote
1
answer
266
views
Customized Password Reset URL for Django Rest API Password Reset
I am new to Django and have implemented a password reset endpoint for my rest API using the django-rest-passwordreset library. It works fantastic, but I want to customize the url returned in my email ...
0
votes
0
answers
33
views
Is it good idea to Authorize REST API using SHA-2 signature for B2B?
There is one secenario where external cleint will be hitting my rest API. So instead to implemented basic authentication, I am thinking to verify request using signature.
json Structure from external ...
0
votes
0
answers
72
views
C# ASP.NET - Restful APIs - do they contain, or how to handle, granular permissions?
The APIs that we are writing do require authorization through a bearer token, but I'm talking more granular permissions for that User.
Let's say we had a Supervisors Controller, it would have these ...
0
votes
1
answer
31
views
how to add facebook authentication to my Rest app in JAVA
I created a RESTful application with jersey and now I'm trying to add a facebook authentication interface to my app and i'm kinda stuck how to connect authentication to my rest method .
package ...
2
votes
3
answers
1k
views
use laravel jwt authentication only for api without affecting web
I have an issue with authentication in laravel web, I only what to use the JWT authentication for the api only, I notice whenever I change guard in defaults to web 'guard' => 'web' and I try to ...
1
vote
0
answers
89
views
RESTful resource creation in multiple steps
There are situations where resource creation requires more than one step.
Example
A session resource is created when a user authenticates. So the API call responsible for authentication would be a ...
3
votes
1
answer
644
views
Calling API through requests Library to get access token
I am trying to get the access token for a specific API, the curl command is given below:
curl --location --request POST 'https://example.com/oauth/connect/token' \
--header 'Content-Type: ...
-1
votes
1
answer
392
views
Custom AuthenticationFilter Setting `LoginProcessingUrl` is Invalid
I'm building an OAuth2 Authorization server that supports Restful API with Spring Authorization Server and Spring Security.
I want a SPA application built by React to provide a login interface at /...
0
votes
2
answers
113
views
Multiple objects to single endpoint with asp.net
I'm building a Restful API with asp.net core. I have an endpoint that are used to authenticate users. I have two kinds of Users where one is an Admin and one is "FilmStudio". I succesfully ...
0
votes
1
answer
553
views
400 Bad Request for too long request parameter in PUT request
I'm trying to hit a PUT api through URL
https://localhost:9002/serialNumbers/700027601?consignmentCode=700027601_c0&productSku=120398ID&serialNumbers=1@120398ID@000N@12345,@120398ID@000N@12346,...
2
votes
1
answer
164
views
Why not to have two access_tokens and two refresh_tokens stored one in cookie and one in localstorage to protect from XSS and CSRF
Background
Scenario is that we have a REACT SPA and a single API which is both a resource server and an authentication server. We want to implement simple tokens based auths. There is no dedicated SSO ...
-1
votes
1
answer
62
views
Can any body answer my question about Oauth2?
I am buiding an app using svelteKit and django rest framework. SvelteKit is responsible for rendering HTML page(SSR) and django rest framework is responsible for providing restful API.
Both App server ...
0
votes
1
answer
1k
views
Consume SOAP XML in Rest WebService
I am able to consume xml based request in rest webservice. Below is the sample code how I am consuming XML request in my rest webservice.
Now, I want to consume soap request XML and I know SOAP is a ...
0
votes
1
answer
414
views
How to Validate a RESTful endpoint that the call is not happening from CURL or POSTman or any similar tool
We have few restful endpoints service developed in Quarkus. We test all the endpoints using CURL and POSTMAN or similar tool. After testing, We call all the endpoints from Andriod code from our mobile ...
-1
votes
1
answer
42
views
How to authenticate with firebase rules (RESTful)
I am not sure where I pass my auth uid token when I am making a request to firebase.
I've tried:
[myfirebaseurl]/path/1234.json?auth=[uid that i set].
Along with putting the UID in headers, content, ...
1
vote
1
answer
352
views
React + Django send raw password in HTTP request, security discussion
I am new to Django and I am working on the user authentication part. I used the Django provided User model, and use auth() and login() method when the user login.
I have a question about the password ...
0
votes
0
answers
115
views
Python REST POST Handling Large Requests
I'm working on a machine learning application in python that will be contained in a docker on a kubernetes cluster. In this implementation I'll be using Google Cloud Platform.
A user will access the ...
0
votes
1
answer
1k
views
How to Impement Spotify's Authorization Code With PKCE in Kotlin
So I want to use Spotify's Web API. I have read some documentation that you' ll need to implement an Authentication code with PKCE. I am not 100% sure on how to do that and can use some help with that....
0
votes
0
answers
277
views
Spring Security ROLE_ADMIN and ROLE_USER problem
I have a simple shopping application which has 2 types of roles "ADMIN" and "USER".
Controller method:
@PostMapping("/admin/category/addProducts")
public void ...
0
votes
1
answer
53
views
NodeJS Authorize with JWT token
I'm trying to use a JWT token to authorize the user before allowing them to GET a "welcome" page.
Here's the code for the endpoint;
var apiRoutes = express.Router();
apiRoutes.use(bodyParser....
0
votes
1
answer
169
views
Preventing spoofing attack - how to ensure my client receives orders from the real server?
I'm working on a Chrome extension that integrates with a website. My users can do actions on this website when they are logged in to it.
I have a Socket.IO server that delivers commands to my Chrome ...
0
votes
1
answer
109
views
How to do user validation on a Mongoose request through Restful
So I want to first find the comment a user wants to delete and then check to see if the usernames match up to validate that the user has permission to do this (I know usernames are not the most secure ...
0
votes
1
answer
101
views
Java Oauth request_token flow example, without libraries
I have this piece of code:
String yourUrl = "https://api.discogs.com/oauth/request_token";
String currentSeconds = String.valueOf(System.currentTimeMillis() / 1000);
String ...
1
vote
1
answer
371
views
ORDS RESTful Service + Angular with Authentication
So I'm not having much luck finding much info on how to do this so here we go. I am using Oracle Apex + Angular where I want my front end built in angular and then Oracle Apex as a middle man of the ...
1
vote
1
answer
852
views
How to properly put the auth token in the header for a GET request
I have am trying to do a get request to api with blockcypher.com. In the docs they simply append the api token to the URL with ?token= or if it's part of multiple parameters &token=. What's the ...
0
votes
1
answer
377
views
Concurrent requests for Symfony4 REST API (LexikJWTAuthenticationBundle)
I'm a bit lost right now and could use a push in the right direction.
In short
PHP Symfony 4 project (mostly default configuration), hosted on Google Cloud App Engine
REST API, authentication via ...
0
votes
1
answer
190
views
Azure AD Authentication through restful api
I'm now working with the Azure AD authentication through this two samples, and it's all worked fine:
Sample1
Sample2
But is there any way to authenticate Azure AD with restful API like below?
POST ...
0
votes
1
answer
1k
views
How to secure the API in NestJS, using Firebase Auth gmail in Client?
How can we secure the NestJS API endpoints?
Client
Android Native Application with Firebase Gmail Auth.
SERVER
NestJS Framework with ExpressJS, TypeORM ,MySQL
Our user authenticating by Firebase Auth &...
0
votes
1
answer
340
views
Python Client connecting to HP ALM 12.20
I'm trying to use requests to connect my python client to HP ALM so I can export Defects and Requirements.
My problem is that when I try to connect to ALM I get this error.
requests.exceptions....
0
votes
1
answer
482
views
How do I "scale" a Flutter app so that it supports multiple users?
I come from a web dev background and I got into Flutter a couple months ago (last year) it's awesome. I like developing multi-platform apps with Flutter or even React Native.
The thing is, I haven't ...
2
votes
0
answers
151
views
Restrict Restful Api Access to Flutter client only?
I need to create a Restful API backend for my flutter app using NodeJS with Mysql. I'd like to restrict endpoint access to just the Flutter client. The user shouldn't have to register and the only ...
0
votes
1
answer
60
views
getting 415 error while posting in requests in rest api , trying to run cms query
Hi I am new to python and REST API,
I am getting 415 error while trying to run a query in cms using requests.post
I am not able to pass content-type and Accept along with the logon token.
I am able to ...
0
votes
1
answer
106
views
issue with consuming restful webservice from openweather Api?
i was trying to retreive weather details from openweathermap api , some how i am not able to get it working with below errors . Any help would be highly appreciated
Controller
@Controller
public class ...
2
votes
1
answer
1k
views
PasswordCheckFailedException: CWWIM4537E No principal is found from the 'Client01' principal name
I am trying to create a OAuth2.0 Authentication server using IBM Websphere.
I have followed steps from here.
Steps:
Created OAuthProvider using OauthConfigSample.xml template.
Installed IBM provided ...
1
vote
1
answer
233
views
How to connect to Restful API via PHP? CDK Global Lightspeed API
I have been provided the following documentation: https://www.scribd.com/document/352616763/Lightspeed-Web-Service-Developer-Guide and am trying to connect via PHP and return data from the API.
The ...
1
vote
0
answers
160
views
how to configure any restful api package like laravel/passort or dingo/api in laravel version 5.0.35 (*without composer)
I am trying to create rest api's in laravel(version 5.0.35).
Official documentation is not provided for 5.0
https://laravel.com/docs/5.0/api-authentication
Tried Laravel passport but I assume it works ...
0
votes
0
answers
574
views
org.springframework.web.HttpRequestMethodNotSupportedException: Request method 'POST' not supported Exception in spring Boot application
I am developing a spring boot based web application. thyme leaf is the template used. Currently csrf is enabled in my application.
what i did was created a rest controller and sent a post request from ...
0
votes
1
answer
90
views
Debug VUE app for REST API call protected using Auth0 in VS Code
I'm trying to debug Auth0 code for a VUE app calling a REST API endpoint protected by Auth0.
In VS Code I have a weird behavior during debugging.
Consider the following code:
<template>
<...
0
votes
0
answers
219
views
The endpoint should return a unique identifier so that API consumers can trace back to the originally uploaded file
I am new to Node.js that is why probably this question might sound silly. I am trying to create a restful API that can load a csv file in the same format as a .csv file given and the endpoint should ...
0
votes
2
answers
197
views
How to store auth data for RESTful API
I am developing an Angular application that consumes a RESTful API. Authentication is done with a basic HTTP Authorization header.
What is the best practice to store the credential to be send with ...
1
vote
1
answer
2k
views
FedEx Api: Bad Request Error, Missing or duplicate parameters. Please modify your request and try again
For some reason, I'm getting a 400 Bad Request error when I'm sending my authentication to FedEx for my API.
Here is my code:
$payload = [
'grant_type' => 'client_credentials',
...