Securing web services with HTTP Basic security

After encryption, the next important aspect…of web services security is authentication.…Making sure that the user making the request has an authenticated account.…As with encryption, there are good tools for this built into every modern…HTTP server product, such as Apache or Internet Information Services.…Basic security is a method that allows an HTTP…client, whether a web browser or a web services consumer,…to pass in a username and password with each request.…

On a web page, basic security typically starts with a challenge dialog.…The client makes the request, a dialog box pops up asking for…their username and password, and the…request is sent again with that information.…In a web service environment, the username and…password can be included in the initial request since the developer…will know from the service documentation that basic service is being used.…Basic security is said to be a stateless…authentication model, because each request is authenticated separately.…

You don't need to use cookies, that is tokens that are passed…