RESTful Java Web Services - Third Edition

Using JWT to secure RESTful services

We will now see how to secure RESTful services using JWT. Let's take the HR service developed in the previous chapter for this purpose. For illustration purposes, we will be abstracting the authentication as part of HRService. In a real-life scenario, the authentication service will be deployed in a separate server. The authentication function will validate the user credentials and respond back with the JWT token for valid users; otherwise, it sends an unauthorized status in response, as follows:

    /**    * Performs authentication of the user and generates JWT Token    *    * @return JWT Token in the Response    */    @POST    @Path("/login")    @Consumes(APPLICATION_FORM_URLENCODED) public Response authenticateUser(@FormParam("login") ...