Jeremy's IT Lab CCNA REST Authentication Day 61

API key authentication uses a [...] key issued by the API provider.

static (non-expiring)

In API key authentication, in which part of the message should the client specify the key?

The HTTP Authorization header (recommended).*Other options: URL, cookie

In REST API Basic authentication, credentials are encoded in [format].

Base64

In REST API Basic authentication, in which part of the message are the credentials included?

In the HTTP Authorization header

In REST API Bearer authentication, are the bearer tokens valid indefinitely?

No; they expire after a set period of time

In REST API Bearer authentication, in which part of the message are the credentials included?

In the HTTP Authorization header

Is Base64 encoding secure?

No. Encoding is easily reversible; it is not encryption.

OAuth 2.0: A [...] can be used to renew access tokens without user reauthentication.

refresh token

REST API [...] authentication provides access delegation.

OAuth 2.0

REST API Bearer authentication uses a [...] for authentication.

token (also called a bearer token)

What are the four entities in OAuth 2.0?

Resource owner

Client app

Auth server

Resource server

Which form of REST API authentication uses a username/password combination?

Basic authentication