I am implementing a system for a customer where they are asking me to use a fixed hash to protect the API as authorization. So this fixed value will be sent in the HEADER of the HTTP call as
Meanwhile, when I was looking for RFC implementations I got to know that
Authorization: <type> <credentials> pattern was introduced by the W3C in HTTP 1.0. Can somebody please tell me what I am doing is wrong (going against this standard).
So I was reviewing other APIs using a fixed hash value, and noticed that they are sending this in the URL parameters itself. eg:
POST https://language.googleapis.com/v1/documents:analyzeEntities?key=API_KEY I would like to know what is the standard they are following.