RESTful Java Web Services Security -- Table of Contents -- RESTful Java Web Services Security -- Credits -- About the Authors -- About the Reviewers -- www.PacktPub.com -- Support files, eBooks, discount offers, and more -- Why subscribe? -- Free access for Packt account holders -- Preface -- What this book covers -- What you need for this book -- Who this book is for -- Conventions -- Reader feedback -- Customer support -- Downloading the example code -- Errata -- Piracy -- Questions -- 1. Setting Up the Environment -- Downloading tools -- Downloading links -- Creating the base project -- First functional example -- Testing the example web service -- Summary -- 2. The Importance of Securing Web Services -- The importance of security -- Security management options -- Authorization and authentication -- Authentication -- Authorization -- Access control -- Transport layer security -- Basic authentication by providing user credentials -- Digest access authentication -- An example with explanation -- Authentication through certificates -- API keys -- Summary -- 3. Security Management with RESTEasy -- Fine-grained and coarse-grained security -- Securing HTTP methods -- HTTP method - POST -- HTTP method - GET -- Fine-grained security implementation through annotations -- The @RolesAllowed annotation -- The savePerson method -- The findById method -- The @DenyAll annotation -- The @PermitAll annotation -- Programmatical implementation of fine-grained security -- Summary -- 4. RESTEasy Skeleton Key -- OAuth protocol -- OAuth and RESTEasy Skeleton Key -- What is RESTEasy Skeleton Key? -- OAuth 2.0 authentication framework -- Main features -- OAuth2 implementation -- Updating RESTEasy modules in JBoss -- Setting up the configuration in JBoss -- Implementing an OAuth client -- The oauth-client project -- The discstore project -- The oauth-server project.

webapp/WEB-INF/ jboss-deployment-structure.xml -- Running the application -- SSO configuration for security management -- OAuth token via Basic Auth -- Running the application -- Custom filters -- Server-side filters -- Client-side filters -- Example usage of filters -- Summary -- 5. Digital Signatures and Encryption of Messages -- Digital signatures -- Updating RESTEasy JAR files -- Applying digital signatures -- Testing the functionality -- Validating signatures with annotations -- Message body encryption -- Testing the functionality -- Enabling the server with HTTPS -- Testing the functionality -- Summary -- Index.