asp.net - Accepting requests from authorized application -


my asp.net api accepts requests authenticated , registered users. want add new api methods should respond requests coming applications -- website created.

how handle "application authentication" scenario in asp.net api app?

simple way go pass secret key [key] in requests header server verify. make more secure , ensure no man-in-the-middle can sniff secret key better approach pass token sha(key:timestamp) along timestamp use in sha function.

once receive such request on api server should verify received timestamp not old/expired , construct servertoken=sha(key:timestamp). if token header same servertoken request authenticated.


Comments

Popular posts from this blog

Is there a better way to structure post methods in Class Based Views -

performance - Why is XCHG reg, reg a 3 micro-op instruction on modern Intel architectures? -

jquery - Responsive Navbar with Sub Navbar -