When using a api it is somtimes better to not have the extra overhead of keeping track of session. This is when token authentication can be of use. Token authentication is a header is set with a secret key the only you know and than tested against a hash in a table on the server.

The setting needed in rdrrXaaa.ini to set up basic authentication

You need to set BasicAuthActive=1 to be able to use basic authentication. The header will then be read on every request to check for the Authorization header.

AuthHashType Can be MD5, SHA1, SHA256, SHA384 and SHA512
AuthSaltPre The text to put in front of a password before doing the hash.
AuthSaltPost The text to put after the password before doing the hash.
TokenAuthActive Tell system to accept token authentication on the server. You can have both session and token turned on, but if the TokenAuthActive is set to 1 and there is a ApiKey heeader set, this takes preference to session.
TokenAuthFieldLevel The field used for security levels fortoken authentication calls to the server. Default is Level.
TokenAuthFieldToken The field used for storing the hash that should be matched with api key given in html header.
TokenAuthLevelDefault The default level assigned to a call set with token authentication and where no level field is set.
TokenAuthTable Table to use for basic authentication.