spring-projects / spring-projects/spring-security
SEC-2936: Rest API Authentication support
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
raintung (Migrated from SEC-2936) said:
Rest API look like not support authentication, Rest API it is common usage that easy to authenticate that don't require the session. Every API call need authenticate again.
Ex. Token authenticate
I don't find the any web filter can support the rest API. Was it customized?
I think it should be standard filter in the Spring web security. Please correct me it I am wrong or miss something.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the issue's examples and the Spring Security web-filter configuration to determine how REST API authentication is currently handled. Clarify whether the requested outcome is token authentication or a standard filter for stateless requests; the work is done only when the supported approach and its expected per-call authentication behavior are defined.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- api, authentication, backend, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100