Search code examples
restwifsts-securitytokenservice

REST base service clients sharing STS issued token


What prevents REST based service clients to share the STS issued token with each other?


Solution

  • Bearer token are like passwords and can be shared or replayed.

    Codeplex Link