Skip to main content
10 events
when toggle format what by license comment
Sep 14, 2018 at 11:00 vote accept Andy Tilston
Sep 14, 2018 at 10:57 comment added Sid I guess this is for security purpose, if we send plain text info in header related to user credentials, anyone can intercept and alter or misuse it so it is always better to generate some hashed/encrypted tokens in such scenarios.
Sep 14, 2018 at 10:50 comment added Andy Tilston That's great, thanks Sid. I've now been able to work this out. Out of interest what's the reasoning behind having to pass these tokens around?
Sep 14, 2018 at 10:49 comment added Sid I think only delete requires the token and create booking does not has token in body, it requires all booking related data in body. I have attached screenshot for token creation and my bad i have mentioned there token generated in create booking API, it is separate API as mentioned in above comments. [edited my answer as well :) ]
Sep 14, 2018 at 10:47 history edited Sid CC BY-SA 4.0
added 91 characters in body
Sep 14, 2018 at 10:36 comment added Andy Tilston Thanks Sid. And then do I then need to add this token when I create a booking, and then delete it later on? If you could provide screenshots of the flow you used that would help with my understanding
Sep 14, 2018 at 10:30 comment added Sid Hi @Andy use this API to get the token for your User restful-booker.herokuapp.com/apidoc/…
Sep 14, 2018 at 10:23 comment added Andy Tilston Hi Sid, thanks for your comment. How do I obtain the cookie from the "create booking API?
Sep 14, 2018 at 10:15 review First posts
Sep 14, 2018 at 11:35
Sep 14, 2018 at 10:14 history answered Sid CC BY-SA 4.0