"A comprehensive guide to designing and implementing secure services. A must-read book for all API practitioners who manage security." - Gilberto Taccari, Penta
API Security in Action teaches you how to create secure APIs for any situation. By following this hands-on guide you’ll build a social network API while mastering techniques for flexible multi-user security, cloud key management, and lightweight cryptography.
A web API is an efficient way to communicate with an application or service. However, this convenience opens your systems to new security risks. API Security in Action gives you the skills to build strong, safe APIs you can confidently expose to the world. Inside, you’ll learn to construct secure and scalable REST APIs, deliver machine-to-machine interaction in a microservices architecture, and provide protection in resource-constrained IoT (Internet of Things) environments.
Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications.
About the technology
APIs control data sharing in every service, server, data store, and web client. Modern data-centric designs—including microservices and cloud-native applications—demand a comprehensive, multi-layered approach to security for both private and public-facing APIs.
About the book
API Security in Action teaches you how to create secure APIs for any situation. By following this hands-on guide you’ll build a social network API while mastering techniques for flexible multi-user security, cloud key management, and lightweight cryptography. When you’re done, you’ll be able to create APIs that stand up to complex threat models and hostile environments.
What's inside
Authentication
Authorization
Audit logging
Rate limiting
Encryption
About the reader
For developers with experience building RESTful APIs. Examples are in Java.
About the author
Neil Madden has in-depth knowledge of applied cryptography, application security, and current API security technologies. He holds a Ph.D. in Computer Science.
Table of Contents
PART 1 - FOUNDATIONS
1 What is API security?
2 Secure API development
3 Securing the Natter API
PART 2 - TOKEN-BASED AUTHENTICATION
4 Session cookie authentication
5 Modern token-based authentication
6 Self-contained tokens and JWTs
PART 3 - AUTHORIZATION
7 OAuth2 and OpenID Connect
8 Identity-based access control
9 Capability-based security and macaroons
PART 4 - MICROSERVICE APIs IN KUBERNETES
10 Microservice APIs in Kubernetes
11 Securing service-to-service APIs
PART 5 - APIs FOR THE INTERNET OF THINGS
12 Securing IoT communications
13 Securing IoT APIs
- 576 pages
- English
- ePUB (mobile friendly)
- Available on iOS & Android
eBook - ePub
API Security in Action
About this book
Trusted by 375,005 students
Access to over 1 million titles for a fair monthly price.
Study more efficiently using our study tools.
Information
Table of contents
- API Security in Action
- Copyright
- contents
- front matter
- Part 1. Foundations
- 1 What is API security?
- 2 Secure API development
- 3 Securing the Natter API
- Part 2. Token-based authentication
- 4 Session cookie authentication
- 5 Modern token-based authentication
- 6 Self-contained tokens and JWTs
- Part 3. Authorization
- 7 OAuth2 and OpenID Connect
- 8 Identity-based access control
- 9 Capability-based security and macaroons
- Part 4. Microservice APIs in Kubernetes
- 10 Microservice APIs in Kubernetes
- 11 Securing service-to-service APIs
- Part 5. APIs for the Internet of Things
- 12 Securing IoT communications
- 13 Securing IoT APIs
- Appendix A. Setting up Java and Maven
- Appendix B. Setting up Kubernetes
- index
Frequently asked questions
Yes, you can cancel anytime from the Subscription tab in your account settings on the Perlego website. Your subscription will stay active until the end of your current billing period. Learn how to cancel your subscription
No, books cannot be downloaded as external files, such as PDFs, for use outside of Perlego. However, you can download books within the Perlego app for offline reading on mobile or tablet. Learn how to download books offline
Perlego offers two plans: Essential and Complete
- Essential is ideal for learners and professionals who enjoy exploring a wide range of subjects. Access the Essential Library with 800,000+ trusted titles and best-sellers across business, personal growth, and the humanities. Includes unlimited reading time and Standard Read Aloud voice.
- Complete: Perfect for advanced learners and researchers needing full, unrestricted access. Unlock 1.4M+ books across hundreds of subjects, including academic and specialized titles. The Complete Plan also includes advanced features like Premium Read Aloud and Research Assistant.
We are an online textbook subscription service, where you can get access to an entire online library for less than the price of a single book per month. With over 1 million books across 990+ topics, we’ve got you covered! Learn about our mission
Look out for the read-aloud symbol on your next book to see if you can listen to it. The read-aloud tool reads text aloud for you, highlighting the text as it is being read. You can pause it, speed it up and slow it down. Learn more about Read Aloud
Yes! You can use the Perlego app on both iOS and Android devices to read anytime, anywhere — even offline. Perfect for commutes or when you’re on the go.
Please note we cannot support devices running on iOS 13 and Android 7 or earlier. Learn more about using the app
Please note we cannot support devices running on iOS 13 and Android 7 or earlier. Learn more about using the app
Yes, you can access API Security in Action by Neil Madden in PDF and/or ePUB format, as well as other popular books in Computer Science & Cloud Computing. We have over one million books available in our catalogue for you to explore.