title: Should I pass Credentials via HTTP Header or Post body as JSON to REST Api?
body: <p>I am trying to create a Rest Api using a token based Authentication.</p>
  
  <p>Is there any best practice in passing credentials from client to server for generating the token. As a <strong>HTTP Header or as a JSON String in post body</strong>?</p>
  
  <p>I have been searching around but was not able to find any concrete answers.</p>