Reputation: 21
I am using WSO2 Identity Server for the first time and we are evaluating WSO2 IS to enable OAuth 2.0 authentication for the REST services. I have 2 specific questions in this regard:
Thanks
Upvotes: 2
Views: 1956
Reputation: 4342
http://docs.wso2.org/wiki/display/ESB470/Securing+REST+APIs
This shows how to use an ESB handler to secure a particular REST endpoint. In that case your API needs to be fronted by WSO2 ESB.
Upvotes: 1
Reputation: 6207
Just trying to do the same exact thing. The only resource i've found so far that points in the right direction is this article. Seems that you need to use wso2esb in front of your REST API to intercept all incoming calls. The ESB needs to be configured with a message handler responsible for authorizing and authenticating each request with the IS. Once the request is autenticated its passed on to the API. If you advance on this issue please leave your findings!
Upvotes: 2