REST Authentication | Day 61 (part two)

Which form of REST API authentication uses a username/password combination?

Basic authentication

In REST API Basic authentication, credentials are encoded in [format].

Base64

Is Base64 encoding secure?

No. Encoding is easily reversible; it is not encryption.

REST API Bearer authentication uses a […] for authentication.

token (also called a bearer token)

In REST API Basic authentication, in which part of the message are the credentials included?

In the HTTP Authorization header

In REST API Bearer authentication, in which part of the message are the credentials included?

In the HTTP Authorization header

In REST API Bearer authentication, are the bearer tokens valid indefinitely?

No; they expire after a set period of time

API key authentication uses a […] key issued by the API provider.

static (non-expiring)

In API key authentication, in which part of the message should the client specify the key?

The HTTP Authorization header (recommended).
*Other options: URL, cookie

REST API […] authentication provides access delegation.

OAuth 2.0

What are the four entities in OAuth 2.0?

Resource owner
Client app
Auth server
Resource server

OAuth 2.0: A […] can be used to renew access tokens without user reauthentication.

refresh token