Deconstructing REST Security

Explore the complexities of REST security in this 53-minute conference talk from Devoxx. Dive into OAuth 2.0 as it relates to REST, distinguishing between stateful and stateless approaches. Examine the Amazon-style HTTP Signatures method and compare architectural differences among these security protocols. Gain practical insights through detailed examinations of actual HTTP messages, empowering you to potentially implement these security measures yourself. Learn from David Blevins, an experienced Open Source Java EE developer and specification contributor, as he breaks down complex security concepts into understandable components for back-end REST developers.