cabinw
V2EX  ›  API

REST(API)的Login如何实现

  •  
  •   cabinw ·
    cabinw · Oct 23, 2012 · 6006 views
    This topic created in 4993 days ago, the information mentioned may be changed or developed.
    我用Tornado,基本的登陆方式为session,secure_cookie那一套,但是这不合适纯API的调用,那么纯API可以用什么方式登陆或者说认证呢?

    Amazon的方法:
    http://docs.amazonwebservices.com/AmazonS3/latest/dev/RESTAuthentication.html

    一篇Secure REST(API)的分析:
    http://www.thebuzzmedia.com/designing-a-secure-rest-api-without-oauth-authentication/

    Stackoverflow的一个讨论:
    http://stackoverflow.com/questions/4608225/how-do-i-implement-login-in-a-restful-web-service
    2 replies    1970-01-01 08:00:00 +08:00
    luin
        1
    luin  
       Oct 23, 2012
    我直接用的HTTP Basic Auth,走HTTPS协议...
    Livid
        2
    Livid  
    MOD
    PRO
       Oct 23, 2012
    如果需要比 HTTP Basic Auth 更复杂的方案,那么就用 OAuth + HTTPS 吧。
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Solana   ·   1204 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 31ms · UTC 23:38 · PVG 07:38 · LAX 16:38 · JFK 19:38
    ♥ Do have faith in what you're doing.