All geek questions in one place

How to safely perform REST with sensitive data?

we are introducing a new web service. The web service will store sensitive data, and there are several types of users with different permissions. Therefore, some types of users cannot access (and some cannot change, etc.) Certain data types. How does it work in REST? I am very new to REST, so sorry if this sounds noobish.

+3
source share
3 answers

Your first step is to provide some SSL transport encryption. This should make sure that there are no people in medium attacks and no one is monitoring the data. Secondly, you need to figure out some kind of authentication method. A popular method is to create a login service to which you send the username and password and return some limited life key. Then you send this key along with all requests for submission, and the server checks it before returning any data. If you have different user levels, as well as key verification, check also if this user should have access to this information.

+5
source

No matter what, you probably want to encrypt using HTTPS.

.

, cookie .

+1

, (Google apis). .

. HTTP POST ( SSL) http://you/auth (- MD5) - MD5 , .

HTTP 200 OK .

. ( - , ), . , ( SSL).

, , . .

, .

+1

Source: https://habr.com/ru/post/1738251/

More articles:


All Articles