Book Image

Restful Java Web Services Security

By : René Enríquez
Book Image

Restful Java Web Services Security

By: René Enríquez

Overview of this book

Table of Contents (12 chapters)

OAuth and RESTEasy Skeleton Key


In this section, we will review some concepts related to OAuth as an authentication framework, RESTEasy Skeleton Key, and how they work together. You will check out some features of these technologies and get your hands dirty with some code as a practical example.

What is RESTEasy Skeleton Key?

RESTEasy Skeleton Key provides a unified way for browser and JAX-RS clients to be secured. This allows executing and forwarding requests in a network of applications and services in a secure and scalable way, without interacting with a central authentication server every time a request appears.

OAuth 2.0 authentication framework

This enables third-party applications or services access to an HTTP resource on behalf of the resource owner. It also prevents the third-party application or service from getting in contact with the owner's credentials. This is possible through issuing access tokens via browsers and using a direct grant.

With the two concepts explained in a nutshell...