售 价:¥
温馨提示:数字商品不支持退换货,不提供源文件,不支持导出打印
为你推荐
RESTful Java Web Services Security
Table of Contents
RESTful Java Web Services Security
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Support files, eBooks, discount offers, and more
Why subscribe?
Free access for Packt account holders
Preface
What this book covers
What you need for this book
Who this book is for
Conventions
Reader feedback
Customer support
Downloading the example code
Errata
Piracy
Questions
1. Setting Up the Environment
Downloading tools
Downloading links
Creating the base project
First functional example
Testing the example web service
Summary
2. The Importance of Securing Web Services
The importance of security
Security management options
Authorization and authentication
Authentication
Authorization
Access control
Transport layer security
Basic authentication by providing user credentials
Digest access authentication
An example with explanation
Authentication through certificates
API keys
Summary
3. Security Management with RESTEasy
Fine-grained and coarse-grained security
Securing HTTP methods
HTTP method – POST
HTTP method – GET
Fine-grained security implementation through annotations
The @RolesAllowed annotation
The savePerson method
The findById method
The @DenyAll annotation
The @PermitAll annotation
Programmatical implementation of fine-grained security
Summary
4. RESTEasy Skeleton Key
OAuth protocol
OAuth and RESTEasy Skeleton Key
What is RESTEasy Skeleton Key?
OAuth 2.0 authentication framework
Main features
OAuth2 implementation
Updating RESTEasy modules in JBoss
Setting up the configuration in JBoss
Implementing an OAuth client
The oauth-client project
The discstore project
The oauth-server project
webapp/WEB-INF/ jboss-deployment-structure.xml
Running the application
SSO configuration for security management
OAuth token via Basic Auth
Running the application
Custom filters
Server-side filters
Client-side filters
Example usage of filters
Summary
5. Digital Signatures and Encryption of Messages
Digital signatures
Updating RESTEasy JAR files
Applying digital signatures
Testing the functionality
Validating signatures with annotations
Message body encryption
Testing the functionality
Enabling the server with HTTPS
Testing the functionality
Summary
Index
买过这本书的人还买过
读了这本书的人还在读
同类图书排行榜