Q: Which authentication options are allowed by the server and how does it work?

A: The following options are supported:

• HTTP basic authorization – Client asks for session by resource “post /login” with HTTP basic authorization in query header. If server responds with error 405, server doesn’t support authorization by sessions and it is necessary to use basic authorization.
• Authorization by session – Authorization by session is done by adding parameter “X-SessionID“ into HTTP header to each query. Basic Authorization is done by HTTP standard in header of each query for the server.

You can set this in ./settings/phxspe.properties