title: Passing parameters in the message header with a REST API
body: <p>I'm developping a REST API and I need to tranport cryptograms to authenticate the message for each request in a applicative process (MAC encryption from secret keys). I was thinking about putting them in the message header to avoid adding non-data information in the message body which contains the posted/retrieved object (XML or JSON).</p>
  
  <p>Is it a best practise ? </p>
  
  <p>Can I add as many parameters I want in the header ? I've read that I must prefix them with "x-". The behavior of this parameter is exactly the same than Path or Query params ?</p>
  
  <p>I'm using Jersey. </p>
  
  <p>Thank you for you help.</p>