Databases
StackOverflow2013
Postsdbo
PO
 

Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>You could take a look into Shiro: <a href="http://shiro.apache.org">http://shiro.apache.org</a> It is a very nice framework to "secure" APIs (authorization, authentication and other things for security). You can implement a "basic authentication" to "login" your users (via a username/password), then provide them with an API key, which you can use to perform a "bearer token authentication" to allow them to access the resources of your API. To do that you would define what shiro calls "filters", which are defined over API resources... this is defined in a "shiro.ini" as the following:</p> <pre><code>[main] authcBasicRealm = com.yourapp.shiro.UserAuthenticatorRealm tokenValidatorFilter = com.yourapp.shiro.BearerAuthenticationTokenFilter tokenValidatorRealm = com.yourapp.shiro.BearerAuthenticationTokenRealm [urls] /rest/hello/login/** = ssl[8443], noSessionCreation, authcBasic /rest/hello/hello = ssl[8443], noSessionCreation, tokenValidatorFilter </code></pre> <p>You need to implement/extend some of the Shiro default filters to make them work with your DB to get your user authentication data, etc. The nice thing is that they provide many tools to handle security issues, e.g.: to generate API keys, to salt and encrypt, etc. Take a look on their tutorials, they are in general very good.</p> <p>There are other frameworks, namely Java EE has support for security and also Spring provides support for security. Take a look at this very nice presentation by Mat Raible where he presents and demos these three frameworks: <a href="http://www.slideshare.net/mraible/java-web-application-security-denver-jug-2013">http://www.slideshare.net/mraible/java-web-application-security-denver-jug-2013</a></p>
    singulars
    1. This table or related slice is empty.
    1. POREST API key generation strategy
      singulars
      1. PTQuestion
    1. PTAnswer
    1. USemgsilva
    1. USemgsilva
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. COI do not want to use another framework for security. But, thanks anyway.
      singulars
      1. PO
      1. USSalil
    2. COI understand... but if you want to manage all those different aspects of security in your web service (basic authorization over HTTPS, then generate and give key to users, then authenticate the key, etc.) you will probably be doing the type of operations I presented yourself... which I avoid to do myself, since I am no security expert, and prefer to rely on a framework designed to cope with those things. Java EE, Spring also have frameworks/libraries to deal with security if you are using one of those (I updated my answer with reference to those).
      singulars
      1. PO
      1. USemgsilva
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload