rest - How to authenticate an http request that isn't POST? -

i'm creating restful api, don't conceptually understand how authenticate http requests aren't post.

for example, should return list of objects if receive request, want response list if request comes registered on site. post, username , pass request, get, delete, , put?

i'm using django server-side , java (android) on client side. might use tastypie, still need authenticate.

thanks!

authorization handled (aptly named) http authorization header.

the authorization header contains credentials/tokens/secret codes/etc., attained, server can use satisfy it's authentication , authorization requirements.

the authorization head can sent http request.

feel free http basic or http digest authentication examples of how authorization header can used. consider looking @ how amazon web services uses authorization header more complicated example.