What is best approach to implement custom token security mechanism for rest services?

[sarah.kho]

Hi,

I am wondering whether any article or document exists to show how we can use spring and spring security to implement a custom token based authentication/ access control for some restful services using spring security...

I am using basic authentication now, but that seems to be not suitable for restful web services, any comment link or idea is welcome.

[sarah.kho]

Any comment on this?

Thanks.

[cnmconsulting]

Are you doing web services, rest services or both??

[sarah.kho]

Just rest services.
Thanks.

[Luke Taylor]

Why do you say that basic authentication isn't suitable for RESTful apps?

[cnmconsulting]

Why do you say that basic authentication isn't suitable for RESTful apps?

Exactly, basic auth is one of the base level form of security that can be used for rest.

Otherwise you need to look at other HTTP security examples. REST uses. straight HTTP security.

[kolodrevskiy]

Hey guys,
did you find useful information about token authentication for rest with spring security? can you put some example here please?