Enable REST API Security

You can control who may access your REST API Endpoint Group simply by doing configurations in AlchemyJ. For instance, you may define whether a user needs to log in and has some specific authorities to access a specific endpoint. Refer to Authentication for REST API for different security control examples.

Example 1 - Session-based security with LDAP authentication

This example is to configure the REST API can be accessed only when login authentication is passed, the user authentication information is kept in session.

Example 2 - Session-based security with LDAP authentication and function entitlement

This example is to configure the REST API can be accessed only when the login user has specified function entitlement, the user authentication information is kept in session.

Example 3 - JWT security with LDAP authentication

This example is to configure the REST API can be accessed only when login authentication is passed, the user authentication information is kept in JSON web token.

Example 4 - Database token security

This example is to configure the REST API can be accessed with Token and the Token information is kept in Database.