Understanding basic security and authorization
In any application, security should always be at the forefront when designing and building. This is true when considering which users should be able to access which data and becomes even more important when you begin to expose certain data to the outside world. Thankfully, Mendix makes it really easy to wrap your web services with security. Natively, Mendix offers a few choices when it comes to security. These are as follows:
- None: Just as the name indicates, no security or authentication is needed. This method should be used very sparingly and perhaps only during the testing phase of development.
- Username and password: This is often referred to as "basic authorization." This requires the other application or client to pass a valid username and password in the Authorization header of the request.
- Active session: This is another layer of security that requires the requesting client to have an active session and...
