As I know authentication can be achieved by SOAP header by passing the user name and encrypted password. One of my client is interested the token based authentication. As I explained him, token is second level authentication after soap header authentication
which is created on the server. If user authenticates done successfully on the server then server creates token based on the user identity and returns to the client. Then client sends the token with username in uri to get resource from the server. Service
validates the token. If token is valid the service response to the client. Please let me know where is issue in my understanding and please let me know the answer of the below question.
How to implement token based authentication in web service and what are the pros and Cons?
Go to the complete details ...