The State of Securing RESTful APIs with Spring

Recorded at SpringOne2GX 2015.
Web / Javascript track
Speaker: Rob Winch
Slides: www.slideshare....
The many benefits of a RESTful architecture has made it the standard way in which to design web based APIs. For example, the principles of REST state that we should leverage standard HTTP verbs which helps to keep our APIs simple. Server components that are considered RESTFul should be stateless which help to ensure that they can easily scale. We can leverage caching to gain further performance and scalability benefits.
However, the best practices of REST and security often seem to clash. How should a user be authenticated in a stateless application? How can a secured resource also support caching? Securing RESTful endpoints is further complicated by the the fact that security best practices evolve so rapidly.
In this talk Rob will discuss how to properly secure your RESTful endpoints. Along the way we will explore some common pitfalls when applying security to RESTful APIs. Finally, we will see how the new features in Spring Security can greatly simplify securing your RESTful APIs.

[@deyanzd]

Sarcasm and Criticism for RESTful APIs security, that was the right name for this video.

[@raypul1]

the speaker is talking a lot about what should not be done. Rather than what should be done.

[@rthorat14]

This is really useful

[@deantesoriero]

Is there a part two to this?

[@Spelter]

look at the conference videos, i saw part 2 but not 1, cant say how the name was

[@aprofromuk]

github link pls ?

[@HarshaSuranjith]

at the end, feels like a waste of time

[@hellorsanjeev11]

You had courage to watch it all the way to the end, I gave up in first 15 minutes. Yup! waste of time.

[@LakshmananMe]

can't look at the video..looks rainbowy fonts and feels looking at an illusion.

[@younghyunyoo546]

Too much sarcasm. But Very good video.

[@leowilliams6848]

How dare you blaspheme JavaScript. Foolish Mortal!!!