I\'m designing an API for a mobile app, and I hope to keep it RESTful. API\'s are authorized using Basic HTTP Auth, however, When the user open the app for the first time, h
GET https://api.example.com/auth
With Authorization header set.