Reputation: 7041
Hi I'm using grails Spring security core to authenticate my application.
The problem is that i have some controller methods that should be accessed from an ios mobile application, how do I send the security credentials from the mobile app, to keep it authorised ?
and should I send them with every request or get a token and send back?
Thanks
Upvotes: 0
Views: 338
Reputation: 35951
For APIs it's better to use a stateless token based authentication
Take a look at http://grails.org/plugin/spring-security-rest - this plugin adds token-based auth to Spring Security Core, that's what you need
Upvotes: 3