-
Notifications
You must be signed in to change notification settings - Fork 193
Blog post: A high-security API management infrastructure using Apache… #715
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
I noticed that I should create a JIRA before the pull request? But I find there is no JIRA about creating a blog post in [1]. |
|
Hello @zregvart, |
oscerd
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
just a minor finding.
| Although the existing API management infrastructure has taken a security measure as token issuance & management, there are also three drawbacks of its security: | ||
|
|
||
| 1. Inadequate token validation. | ||
| 1. No API access management for each API. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think here we have point 2 and point 3 not 1.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@oscerd can you elaborate, the point of this project as I understood it to add additional token validation, i.e. test for invalidated tokens. Look at the Drawback 1: Inadequate token validation section
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I meant say it should .1,.2 and .3 and not .1,.1 and .1
|
@tadayosi |
|
@oscerd |
|
@davsclaus |
|
@Yang-Xie-OSS thanks for the blog post! The preview is here https://pr-715--camel.netlify.app/blog/2021/12/api-management-infra/ |
zregvart
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks! This looks good to me, I'll leave this for a bit for any other folk to add comments before we merge this.
… Camel
Here is a blog post that introduces a high-security API management infrastructure using Camel and Keycloak.