ruby on rails - OK to use an http header to send ssl signature between 2 apps? -
we have 2 rails applications talk each other via api's. decided wanted secure calls using openssl public , private keys. before sending request, create signature of document using private key. on other app verify signature public key , received document.
this works our puts , posts because can add document , signature in body.
however want gets, , not want add body get, apparently no-no. appropriate send signature , document http headers in request? document small - few arguments in json string.
the other option have use posts or puts instead of gets
Comments
Post a Comment