Re: Web Services Authentication

[Alfredo Delgado <alfredo.delgado@xxxxxxxxx>]

You could have them make an initial POST request to a service that starts a
sessions and returns a session id that they'd have to provide in followup
requests. However, if you're only accepting connections via SSL then it'd
be possible for them to pass authentication token(s) in the request headers
with every request and bypass the need for a session.

On Tue, Aug 13, 2013 at 3:45 PM, Alvin Strasburger <alvins@xxxxxxxxxxxxx>wrote:

> This is our first attempt to open certain web services for select
> customers.
> Is it possible for the i-Series Integrated Web Server to authenticate a
> REST
> request prior to sending the request to a program?  In testing, we have
> been
> unable to keep the server from returning a login screen.  Is it possible
> for
> a web service consumer to send a REST request that includes both the
> Userid/Password info as well as the data request?  If so, what setting do
> we
> need to add to the server and how should the request be formatted?
>
>
>
> Thanks,
>
> Alvin
>
> Alvin Strasburger
>
> Printgear Sportswear
>
> Phone    803-744-2310
>
> Toll Free 800-763-7763
>
>  <mailto:alvins@xxxxxxxxxxxxx> mailto:alvins@xxxxxxxxxxxxx
>
>  <http://www.printgear.com/> www.printgear.com
>
>
>
>
>
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.