Home/ Questions/Q 7946093
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-04T01:03:04+00:00

I am writing a Spring Restful Web Services Project. I need to write secure

  • 0

I am writing a Spring Restful Web Services Project. I need to write secure Web Services. For Security I am already using Spring Security+SSL, however now i need some security for encryption and message signing. I know how to encrypt the message from code, however i am looking for a mechanism to enable automatic encryption/decryption and message signing.

I have been searching for different alternatives for security including spring WSS and others but most of them are for SOAP. Could some one suggest me some better security mechanism and a link for the same.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    There are multiple ways to secure your restful webservices, unfortunately there are many links which provides information to secure a soap web services, but as restful gaining popularity, it is of utmost necessity to find a way to secure and to find a way to manage sessions of your restful web service.
    So to secure my Spring MVC with restful support, You need to atleast consider for three Aspect

    1) Authentication. — For Authentication Spring Security can be used.
    2) Authorization. — For Authorizing a request OAuth can be used.
    3) Securing the communication. — SSL can be used to secure the communication channel.
    4) Encryption — Again Oauth can solve the purpose
    5) Message Signing. — Again Oauth can solve the purpose

    So , to secure a restful webservice spring security + OAuth can be used. The other security mechanisms which can be used are Http Basic Security and Digest Security.

    Here is a very good example securing a spring restful webservice with spring security:
    http://java.dzone.com/articles/securing-restful-web-service

    Also to use spring security in conjunction with OAuth you can follow this tutorial:

    Spring security with OAuth

    • 0