Search code examples
httptoken

HTTP token authentication

After the authentication is successful, my server sends a token ("auth=34dfea103....34df") to the client.

Is it possible (with a HTTP header) to mention to the client that if they want to access private data, they must return the token to prove they are identified?

Or - if it's not possible, can each request require a user name and password?

Solution

  • Maybe are you talking about HTTP-Authentication? If you are using Tomcat server, it's easy to achieve this.

    See my post here about HTTP-Authentication ; I give a like towards french documentation for Tomcat server.