ruby on rails - OK to use an http header to send ssl signature between 2 apps? -


we have 2 rails applications talk each other via api's. decided wanted secure calls using openssl public , private keys. before sending request, create signature of document using private key. on other app verify signature public key , received document.

this works our puts , posts because can add document , signature in body.

however want gets, , not want add body get, apparently no-no. appropriate send signature , document http headers in request? document small - few arguments in json string.

the other option have use posts or puts instead of gets


Comments

Popular posts from this blog

javascript - Bootstrap Popover: iOS Safari strange behaviour -

Magento/PHP - Get phones on all members in a customer group -

session - Logging Out Using PHP -