turn off nonce

Hello,

why is it necessary to create nonce before make some request that requires nonce?

Let’s assume I need to create auth cookie. For that I need two requests and some logic to take and put nonce to second request:

https://foo.bar/api/get_nonce/?controller=user&method=generate_auth_cookie

.. taking nonce ..

https://foo.bar/api/user/generate_auth_cookie/?nonce=..putNonceHere..&username=...&password=...

Much easier way would be without nonce:

https://foo.bar/api/user/generate_auth_cookie/?username=...&password=...

It would be nice to have possibillity (in config) to turn off nonce check.

Best regards
Walery

https://www.ads-software.com/plugins/json-api-user/