CODEWITHSUNDEEP
securityodata
user380719
user380719

Reputation: 9903

How do I secure an OData service?

OData is great because it's simple.

However, I don't see any security specification for OData.

What is common practice? HTTPS + (username, pwd)

Upvotes: 2

Views: 1226

Answers (1)

zudokod
zudokod

Reputation: 4094

There is mentioned in the spec, it is similar to Atom publishing protocol. So security definitions for both are same.

OData Spec (section 5)

The Atom Publishing Protocol is based on HTTP. Authentication can be done HTTP Authentication like Basic and Digest Access Authentication The use of authentication mechanisms to prevent POSTing or editing by unknown or unauthorized clients is RECOMMENDED but not required.

Upvotes: 1

Related Questions