Questions tagged [restful-authentication]

Questions about authentication for RESTful services.

Services designed using REpresentational State Transfer architecture must often authenticate clients. How best to do this can be a complex topic, as in true REST each client request to the server will contain all the information necessary to complete it (including authentication).

Resources

1447 questions
0
votes
1 answer

OAuth2 multiple servers accessing service

I have a server-side app that does some work with an API secured with OAuth 2.0. When I launch the app, I go through the OAuth authentication flow and get the access and refresh tokens. Now, the problem is: my app works across multiple servers doing…
MarcWan
  • 2,943
  • 3
  • 28
  • 41
0
votes
1 answer

Spring Security REST authorization

I'm tired to find how I can login by Spring Security REST json. I write backend for Android/iOS.Here is my security.xml:
0
votes
1 answer

Create product using Oauth & curl

Im trying to create product using RESTful Api. Achieved this functionality using RESTCLIENT firefox addon but failed using script. I can able to list products But im not able to create product using script. Getting access denied error. Can anyone…
Palanikumar
  • 1,706
  • 5
  • 28
  • 51
0
votes
2 answers

Implementing RESTful service and consume xml at the service and map it to a bean class

Can anyone please explain hot to implement RESTful service and post data in an xml and cnsume the xml at the service and map it to a java bean class? It would be better if an example can be posted. I have tried it using a json object using this…
0
votes
4 answers

PHP RESTful Webservice with Slim Framework, Authentification needed or against statelessness?

I'm writing a RESTful Webservice with the Slim Microframework and use GET for reading data from a mysql database (select query) and also POST/PUT/DELETE for insert/update/delete rows in the database. My question is now, is this not a big security…
Danny Archer
  • 215
  • 4
  • 12
0
votes
1 answer

Spring Security Remember-Me REST web service - how to return token back in the 200 response with the Persistant Token Approach

I have my rest web services secured with Spring Security. I'm returning the the appropriate responses (401 for failure, 200 for success, etc) via the various handlers. The client does not want to store the credentials on the device, so I cannot…
SBerg413
  • 14,515
  • 6
  • 62
  • 88
0
votes
2 answers

Symfony2 won't load custom authentication provider, loads DaoAuthenticationProvider

This is a continuation of my last question. Hi, I'm implementing, in a Symfony2 application, a custom authentication provider in order to authenticate against the Wordnik REST API. On application load, no matter what request path, this is the…
Daniel B.
  • 1,650
  • 1
  • 19
  • 40
0
votes
1 answer

Api and consumer flow

I am developing an API for a social network website. This API will basically get all the requests from the users (get friend list, post a status update etc) and reply back if necessary. We will implement OAuth 2.0 protocol for authentication.…
0
votes
1 answer

OpenAm: SSO implementation using RESTful API

I am a bit confused implementing SSO with RESTful API. So far, I have used RESTful API to authenticate and get a token-id. How should SSO can be implemented? To get a token validated, it must be saved somewhere as a cookie or something. Is there…
nebula
  • 3,932
  • 13
  • 53
  • 82
0
votes
1 answer

Configuring Glassfish 3.1.2 Server to allow PUT, DELETE

I am having a problem configuring my Glassfish 3.1.2 Server to allow PUT, DELETE request for a RESTful webservice created with the Netbeans "Create new RESTful webservice from Database" wizard. Weirdly, I managed to get one webservice working the…
0
votes
1 answer

Spring MVC based RESTfull Web Services authentication using 'Remember Me'

I have restful APIs in place. I have used Spring MVC annotations. I have a requirement to authenticate a userid and on authentication create a session and allow the user to call other APIs till session lasts. My question is: Does creation of a…
Puneet Pandey
  • 960
  • 2
  • 14
  • 28
0
votes
1 answer

Authenticating and posting data from android application to cakePHP website

I'm building an application that post data from Android device to cakephp backend (Web Service). I ended up with making my own authentication object and sending access token like this : class MyAuthenticate extends BaseAuthenticate { public…
0
votes
1 answer

Image access with custom headers

I'm securising my RESTful php API by autorizing only HTTP requests with a valid access token in the header. I added to all my AJAX requests the header with the token: $.ajaxSetup headers: auth_token: auth_token In order to secure the image…
SuperSkunk
  • 1,268
  • 12
  • 24
0
votes
1 answer

How to implement RESTful services over SSL?

When I am Running my RESTful client in Eclipse, getting the following error: java.net.ConnectException: Connection refused: connect at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.PlainSocketImpl.doConnect(Unknown…
0
votes
1 answer

How to provide authentication for web service post requests in cakephp

I'm developing webstite using cakePhp. I use the Auth component from cake and also the Acl component for users/permissions. All work fine in the web end. I now want to call some controllers' actions from another device (Android) phone and I want to…