Securing HTTP-based APIs With Signatures

I work at EMC on a platform on top of which SaaS solutions can be built.cloudsecurity

This platform has a RESTful HTTP-based API, just like a growing number of other applications.

With development frameworks like JAX-RS, it’s relatively easy to build such APIs.

It is not, however, easy to build them right.
 

Issues With Building HTTP-based APIs

The problem isn’t so much in getting the functionality out there. We know how to develop software and the available REST/HTTP frameworks and libraries make it easy to expose the functionality.

That’s only half the story, however. There are many more -ilities to consider.
rest-easy
The


Source : http://www.javacodegeeks.com/2013/08/securing-http-based-apis-with-signatures.html

Back to Top