-3

Previously, I did not have to work with HTTP authentication on the server. But they gave me an assignment.

Quotation:

"We have enough password authentication. While we decided that there will be enough authentication layer between the client (AngularJS) and the Web server (RESTful, Jersey)."

Can you help with advice or suggest literature?

observer
  • 2,925
  • 1
  • 19
  • 38

1 Answers1

-2

REST API resources are stateless. It needed to be secure. On every rest call, authentication must happen to ensure right person access these APIs. It does not mean username and password to be used on the every call.

Industry standard authentication protocols help reduce the effort of securing your API. Custom security protocols can be used, but only under very specific circumstances. This blogs cover few of the major one like OAuth1.a, OAuth2.1 etc.

This link explain Token Based Authentication, every thing you need to start securing your APIs

Vish
  • 832
  • 7
  • 21