I need to make sure that my restful webservice is secured. What are the features that I could utilize like
1. Https support
2. safe from sniffing.
3. Digital Signature.
JAX-RS runs within a servlet container, so you get all the features of a servlet container (i.e. HTTPS, etc.). Resteasy client runs on top of Apache Http Client which supports HTTPS and a few different auth protocols. As for digital signatures, i’ve written a digital signature framework. See our doco for more info. Also, see my latest blog “Decentralized Auth Ideas”. This is something I’m also prototyping.
The 2.2.1 manual indicates Resteasy “… does ship thirdparty libraries licensed under Apache ASL 2.0 and LGPL”. In our company we would like to use Resteasy for our new projects but managers do not want to use libraries that are LGPL’ed (the way I understand it is that it would be cumbersome to cleanly figure out what work is derived from/depends on which library and its consequences). Does Resteasy functionality depend on these thirdparty libraries? If not, is it possible to have a distribution without these thirdparty libraries (and the license notice to reflect this)?
The base JAX-RS implementation does not depend on any thirdparty library. Resteasy is modularized into many maven modules. You can pick and choose which ones you want to use when you create your project.
Jun 24, 2011 @ 04:33:11
I need to make sure that my restful webservice is secured. What are the features that I could utilize like
1. Https support
2. safe from sniffing.
3. Digital Signature.
Jun 24, 2011 @ 12:49:19
JAX-RS runs within a servlet container, so you get all the features of a servlet container (i.e. HTTPS, etc.). Resteasy client runs on top of Apache Http Client which supports HTTPS and a few different auth protocols. As for digital signatures, i’ve written a digital signature framework. See our doco for more info. Also, see my latest blog “Decentralized Auth Ideas”. This is something I’m also prototyping.
Jul 19, 2011 @ 16:15:14
The 2.2.1 manual indicates Resteasy “… does ship thirdparty libraries licensed under Apache ASL 2.0 and LGPL”. In our company we would like to use Resteasy for our new projects but managers do not want to use libraries that are LGPL’ed (the way I understand it is that it would be cumbersome to cleanly figure out what work is derived from/depends on which library and its consequences). Does Resteasy functionality depend on these thirdparty libraries? If not, is it possible to have a distribution without these thirdparty libraries (and the license notice to reflect this)?
Thanks in advance for your help.
Aug 03, 2011 @ 13:04:13
The base JAX-RS implementation does not depend on any thirdparty library. Resteasy is modularized into many maven modules. You can pick and choose which ones you want to use when you create your project.