API请求方法

var settings = {
  "async": true,
  "crossDomain": true,
  "url": "https://urlexampleapi.com",
  "method": "GET",
  "headers": {
    "Content-Type": "application/json; charset=utf-8",
    "Accept": "application/json",
    "appKey": "mykeyhere",
    "appToken": "mytokenhere"
  }
}

$.ajax(settings).done(function (response) {
  console.log(response);
});

Hi everyone, I want to make this request to a certain api, but I know that is insecure to pass my credentials on header. What would be the best practice to apply on this case? Any suggestion would be appreciated

Thanks!

You can prefer using https and other approach are mentioned in the following question

how-to-send-password-securely-over-http