Hi All I want to simplify a few things for the coders and avoid headers. Can we create session tokens like this? http://xxx.xxx.xx.xxx/api/v2/user/session?method=get&api_key=4d18fd67a5d1ffce16dxxxxxxxxxxxxxxxxx&email=user@myemail.com&password=user123&duration=20&accept=json If so, why does the ab…

Take a look at: https://wiki.dreamfactory.com/DreamFactory/API#API_Key (Thanks @juniorconte for the tip.)

You are correct that your scenario is not workable. To create a session, you must POST to user/session with a POST payload that includes the user’s email and password

OK, no worries and with thanks. And then even if we have POSTed to get the session token we still cannot use a URL only because the params need to be in the header too right?

You can pass the api key and session token in the URL as parameters rather than headers. ex:http://myurl/api/v2/db/_table/todo?api_key=myapikey&session_token=mysessiontoken

Thanks Drew, you are right, and I tested it. After the session token is generated, a heck of lot of data can be consumed in http without the need for posting headers. So as a simple url does the trick in most cases.

Can a session token be generated in pure HTTP?

Authentication & Security

charliefinale December 28, 2015, 3:54pm 3

I believe the answer to my question is currently “no” because according to this post parameters are not accepted in the url - only in the headers. Can someone correct me if I am mistaken?

Topic		Replies	Views
Basic HTTP Authentication Authentication & Security	1	2266	September 22, 2015
Bad Request. No token or API key provided REST API	3	2918	January 7, 2017
Get the session token in headers Server-Side Scripting	4	3049	May 4, 2016
Session info for authentication Authentication & Security	1	1327	January 2, 2019
Curl. Bad request. No token or api key provided. On login uncategorized	1	1975	February 6, 2017

Can a session token be generated in pure HTTP?

Related topics