It seems that sending this request with every XML request is the only way to use the UPS tracking API:
<?xml version="1.0" ?> <AccessRequest xml:lang='en-US'> <AccessLicenseNumber> YOURACCESSLICENSENUMBER </AccessLicenseNumber> <UserId> YOURUSERID </UserId> <Password> YOURPASSWORD </Password> </AccessRequest>
Therefore, you cannot use it in a desktop application because your users will be able to find your password. And yes, I could run the backend on my own server, but it's uselessly complicated. Does the UPS provide a reasonable authentication method without having to insert a copy of the password in every copy of my application?
UPS api , , . api - : api (, , api). , api, , ( , ). api .
( ) -, , , IP-, csrf .., - , . .
, .
, . , , , - . ?
, : http://oreilly.com/pub/h/4106 ( , )