Map Implementing secure JAX-RS applications

The IBM® runtime environment for Java API for RESTful Web Services (JAX-RS) is driven by a servlet derived from the Apache Wink project. Within the WebSphere® Application Server environment, the lifecycle of servlets is managed in the web container. Therefore, the security services offered by the web container are applicable to REST resources that are deployed in WebSphere Application Server.

About this task

You can define and add security constraints on the REST resources using the same tooling that is used to assemble REST applications. These constraints are captured in the J2EE web deployment descriptor that is associated with your application. The following list describes security definitions that you can include in the deployment descriptor: All the security mechanisms supported by the web container are applicable to REST resources, including the use of the Kerberos-based SPNEGO authentication mechanism.

Procedure

  1. Configure the development environment.
  2. Define the resources in JAX-RS web applications.
  3. Configure the JAX-RS application.
  4. Secure JAX-RS applications within the web container.
  5. Secure JAX-RS resources using annotations.
  6. (optional) Secure JAX-RS clients using SSL.
  7. Assemble JAX-RS web applications.
  8. Deploy JAX-RS web applications.
  9. Administer the secure JAX-RS application.

Results

You have developed and deployed a secure JAX-RS web application on the application server. You can also use the administrative console to administer your secure JAX-RS application.




In this information ...


Related concepts

(Index)

IBM Redbooks, demos, education, and more


Use IBM Suggests to retrieve related content from ibm.com and beyond, identified for your convenience.

This feature requires Internet access.



Terms and conditions for product documentation | Feedback

Last updated: Apr 22, 2018 11:08:28 AM CDT
http://www14.software.ibm.com/webapp/wsbroker/redirect?version=v800webmob&product=was-nd-mp&topic=twbs_jaxrs_impl_securejaxrs
File name: twbs_jaxrs_impl_securejaxrs.html