# API: Can I authenticate without putting the key in the URL?

**URL:** <https://meta.discourse.org/t/api-can-i-authenticate-without-putting-the-key-in-the-url/29425>\
**Category:** Development\
**Tags:** rest-api\
**Created:** [29 Maggio 2015, 6:17pm UTC](https://meta.discourse.org/t/api-can-i-authenticate-without-putting-the-key-in-the-url/29425 "2015-05-29T18:17:35Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![mc0e](https://avatars.discourse-cdn.com/v4/letter/m/c77e96/32.png) [@mc0e](https://meta.discourse.org/u/mc0e)\
**Post date:** [29 Maggio 2015, 8:13pm UTC](https://meta.discourse.org/t/api-can-i-authenticate-without-putting-the-key-in-the-url/29425/3 "2015-05-29T20:13:19Z")

</div>

Using POST where I mean GET might work, but it’s icky at best. Arguably it’s a bug if POST is accepted in most contexts where GET is what’s meant, and I would be wary about assuming that wouldn’t become the case if it’s not now.

I wonder if there’s an OAuth based approach to be had?

---

_[View the full topic](https://meta.discourse.org/t/api-can-i-authenticate-without-putting-the-key-in-the-url/29425)._