A RESTful API should be stateless. This means that request authentication should not depend on cookies or sessions. Instead, each request should come with some authentication credentials.
Out-of-the-box, OroPlatform provides the following authentication mechanism:
Please note that WSSE authentication is deprecated and will be removed in one of the future LTS releases. Use OAuth authentication instead.
Looking to make a digital commerce investment? Evaluate the best B2B eCommerce platforms on our comparison page.