Problem: We have a Spring MVC-based RESTful API which contains sensitive information. The API should be secured, however sending the user\'s credentials
Why don't you start using OAuth with JSON WebTokens
http://projects.spring.io/spring-security-oauth/
OAuth2 is an standardized authorization protocol/framework. As per Official OAuth2 Specification:
You can find more info here