Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I am using the Java Toolkit for Rally REST API, and I am concerned about security of credentials being passed using the RallyRestApi class. Does RallyRestApi use an HTTP GET or POST method for authenticating?
Here is the usage example from the Java Toolkit for Rally REST API page:
RallyRestApi restApi = new RallyRestApi(new URI("https://rally1.rallydev.com"), "user@company.com", "password");
Thanks,
Nick.
The toolkit uses basic auth, which basically sends the username/password in an encoded header. As long as you are connecting to the server via SSL (https protocol rather than http) your credentials will not be passed in clear text.