Thank you all for your answers. Yes, I can pass the token in the querystring if I put the token check in each and every function of the API. But when I put the token check in the exposed call action, passing the token in the querystring does not work. I'd like to find a way to do a token check without checking in each and every API function (i.e., by doing the check in the exposed API call), but I'm guessing this will involve extending the Service module.
On Sep 15, 4:55 pm, pbreit <pbreitenb...@gmail.com> wrote: > Can you just pass the token in the querystring? > > Once you start worrying about performance you can cache the token lookup > query.
