July 2019
Beginner to intermediate
300 pages
7h 48m
English
This refers to having the ability to enforce authentication and authorization policies against API endpoints. Authentication refers to having the ability to verify a caller's identity based on the credentials (typically just username/password) supplied as part of a call. For example, the simplest type of authentication is HTTP basic authentication, where credentials are provided by the caller in the HTTP header and validated against a Lightweight Directory Access Protocol (LDAP) server. More complex authentication capabilities can be based, for example, on client certificates and/or tokens as opposed to a username/password.
Authorization, however, refers to having the ability to verify that ...
Read now
Unlock full access