I’m slowly beginning to unerstand REST and theres one thing thats confusing me .
I understand that most of the things in REST is a “resource” . So i was wondering what kind of a resource would we be referring to in the case of a user signup / login ?
Is it users ? Then does it mean that a POST on users would signup for a new user . If that is the case , then how do i authenticate a user ? a GET on users with an encoded password / username pair?
I’m really confused with this.
I may be COMPLETELY wrong in my understanding given that i’m just starting to understand REST.
Any help is appreciated !
Thanks!
It’s a bit of an unusual but common problem for REST. Keep thinking about resources.
When you login you’re asking the server to create a session for you to access certain resources. So in this case the resource to create would be a session. So perhaps the url would be /api/sessions and a POST to that url with a session object (which could just be an object consisting of a username or password and perhaps the UUID) would create a session. In true REST you’d probably point to a new session at /api/sessions/{UUID} but in reality (and for security purposes) you’d probably just register a session cookie.
That’s my own personal approach to login forms if I were to implement them myself but I always tend to use Spring security for that job so this requirement never really takes much consideration.