hyunbin7303 / TodoRestful

TODO Restful
MIT License
1 stars 0 forks source link

Investigation for Bearer Authentication #41

Closed hyunbin7303 closed 4 years ago

hyunbin7303 commented 4 years ago

Bearer Authentication

Bearer authentication (also called token authentication) is an HTTP authentication scheme that involves security tokens called bearer tokens.

The bearer token allowing access to a certain resource or URL and most likely is a cryptic string, usually generated by the server in response to a login request.

The client must send this token in the Authorization header when making requests to protected resources: Authorization: Bearer <token>

The Bearer authentication scheme was originally created as part of OAuth 2.0 in RFC-6750 but is sometimes also used on its own.

Similarly to Basic authentication, Bearer authentication should only be used over HTTPS (SSL).

Copy from: https://swagger.io/docs/specification/authentication/bearer-authentication/#:~:text=Bearer%20authentication%20(also%20called%20token,security%20tokens%20called%20bearer%20tokens.&text=The%20client%20must%20send%20this,Authorization%3A%20Bearer