RESTful authentication. Client-side, stateless unauthentication
I'm implementing a set of RESTful services for some developments and one of these is an authentication service . This authentication service authenticates two kinds of identities: Applications . AppKey-based authentication so clients must register for a key in order to access to the rest of the services . Users . Well-known credentials (user+password)-based user authentication so humans and machines can work with these RESTful services through client applications. These RESTful services are stateless . When a client application authenticates against the authentication service , or when a human