Home › Constant Contact Web Service APIs › REST API Reference

REST API Authentication - Overview

Tue, 03/31/2009 - 00:06 — Anonymous

API Authentication Overview

While the Constant Contact REST APIs technically supports several authentication models, at this point developers should leverage our Basic Authentication model.
 

Basic Authentication Over HTTPs

The Basic Authentication model should be used for all new development projects.

OAuth Authentication (Support Retracted)

Constant Contact developed and deployed support for an OAuth based Authentication model. However, due to a recently announced and acknowledged security vulnerability with the protocol, we are retracting support for our OAuth model. We are investigating the issue and considering appropriate API adjustments. Developers can and should leverage Basic Authentication. (For more information on the OAuth based vulnerability, please see this reference on the OAuth site).

Digest Authentication (Support Withdrawn July 31st 2009)

Constant Contact has deprecated support for the use of Digest Authentication with the REST APIs. Applications which are already using Digest Authentication will need to migrate their applications to another Authentication model by August 2009. Existing applications are encouraged to migrate to the OAuth based authentication model.