#rest-security

How-to: Security of REST authentication schemes #computers #answer #it

Security of REST authentication schemes

Background:

I’m designing the authentication scheme for a REST web service. This doesn’t “really” need to be secure (it’s more of a personal project) but I want to make it as secure as possible as an exercise/learning experience. I don’t want to use SSL since I don’t want the hassle and, mostly, the expense of setting it up.

These SO questions were…

Fixed RESTful Authentication #dev #it #asnwer

RESTful Authentication

What does RESTful Authentication mean and how does it work? I can’t find a good overview on google. My only understanding is that you pass the session key (remeberal) in the URL, but this could be horribly wrong.

Answer: RESTful Authentication

I really doubt whether the people enthousiastically shouting “HTTP Authentication” ever tried making a browser-based application…

Fixed Best Practices for securing a REST API / web service #dev #it #asnwer

Best Practices for securing a REST API / web service

When designing a REST API or service are there any established best practices for dealing with security (Authentication, Authorization, Identity Management) ?

When building a SOAP API you have WS-Security as a guide and much literature exists on the topic. I have found less information about securing REST endpoints.

While I understand REST…

How to: Security of REST authentication schemes

Security of REST authentication schemes

Background:

I’m designing the authentication scheme for a REST web service. This doesn’t “really” need to be secure (it’s more of a personal project) but I want to make it as secure as possible as an exercise/learning experience. I don’t want to use SSL since I don’t want the hassle and, mostly, the expense of setting it up.

These SO questions were…

How to: RESTful Authentication

RESTful Authentication

What does RESTful Authentication mean and how does it work? I can’t find a good overview on google. My only understanding is that you pass the session key (remeberal) in the URL, but this could be horribly wrong.

Answer: RESTful Authentication

It’s certainly not about “session keys” as it is generally used to refer to sessionless authentication which is performed within…