Design and Build Great Web APIs

Supporting Machine-to-Machine Security

Adding support for machine-to-machine (M2M) security to your API takes just a few steps. You need to add a few modules to your project that contain the functionality to communicate with OAuth providers and evaluate JWTs. You also need to modify your own API service interface to look for and process JWTs when they appear. Finally, you need to import the OAuth authentication parameters you collected from the third-party provider (see ​Collecting API Identity Parameters​).

Company-Secure
	For the example in this chapter, I’ve forked the existing company sample API service to one named company-secure. I’ll show ...