I've got a simple
ASP MVC 6 WebAPI I'm currently working on in which registered users can call request data using a sample of the URL below:
b8pE5Qodiw refers to the unique API code for a confirmed user. This is generated by the application and the user is not able to use it until they confirm their email.
I'm generating the code following the answer on this SO question
From a security standpoint, are their potential issues with having the user
API code in the URL and how I'm generating the API code?
Is there a best practice of how
RESTful services generate API URL's