From the course: Programming Foundations: APIs and Web Services

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Secure web services

Secure web services

From the course: Programming Foundations: APIs and Web Services

Start my 1-month free trial

Secure web services

- When allowing access to data via web services, security is very important. We want to limit who can view or even update data. Only trusted individuals should have access. So, how does web service security work? Let's use a cell phone as an example. In order to call your friend, you have to unlock your phone by entering a passcode. This passcode is like the key or the token used to secure a web service. Let's say your friend will not answer calls from random numbers, and she only answers your call because she knows it's you. You were able to call her because you have the key or token to unlock your phone. Web services that are secure behave in a similar manner. If an unsecured request is made to a web service to retrieve data, if that request lacks the proper key or API token, that request is rejected. Let's discuss a few common web service security principles: authentication and authorization. Authentication is about validating the identity of a client that is attempting to call a…

Contents