[REST API] Provide an authorization token
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 823
- Forks
- 117
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 8
Description
I didn't find a solution for authorization token. Can you provide this? E.g. you logged in with basic authentication and further requests need the token only? I don't want to store user credentials on the client side (security).
From the Android docs:
"Where possible, don't store user names and passwords on the device. Instead, perform initial authentication using the user name and password supplied by the user, and then use a short-lived, service-specific authorization token."
Thanks for you work! :-)
Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names the REST API and the Android authentication guidance but no source files, tests, or entry points. Start by locating the existing REST API authentication flow and reviewing how credentials are handled; done should provide a documented short-lived authorization-token flow for subsequent requests without storing user credentials.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- api, authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100