A REST API service requires basic authentication. A user's credentials are "ned/33662255" and the Base64 encoding of the credentials is "a2lsbGE6NDU4ODI5". Which requirement must be met for a…

The correct answer is A. The header must include. HTTP Basic Authentication requires the client to include an Authorization header in the HTTP request - not in the payload/body. The correct header format is: Authorization: Basic <Base64-encoded-credentials>. The Base64 string encodes the username:password pair. Placing…

Understanding and Using APIs

Question

A REST API service requires basic authentication. A user's credentials are "ned/33662255" and the Base64 encoding of the credentials is "a2lsbGE6NDU4ODI5". Which requirement must be met for a request to be authenticated?

Options

AThe header must include:
BThe payload must include:
CThe header must include:
DThe payload must include:

How the community answered

(33 responses)

A
91% (30)
C
6% (2)
D
3% (1)

Explanation

HTTP Basic Authentication requires the client to include an Authorization header in the HTTP request - not in the payload/body. The correct header format is: Authorization: Basic <Base64-encoded-credentials>. The Base64 string encodes the username:password pair. Placing credentials in the payload (options B and D) is incorrect for Basic Auth - the server reads the Authorization header, not the body. Basic Auth is a header-based mechanism defined in RFC 7617.

Topics

#REST API#Basic Authentication#HTTP Headers#API Security

Community Discussion

No community discussion yet for this question.

Full 200-901 Practice