我如何进行身份验证对于Biztalk server 2010中的restful apis [英] How Can i do the authentication For restful apis in Biztalk server 2010

问题描述

需要保护Biztalk解决方案中的api调用。请建议我最好的。



我们有来自客户的AD服务器，我们可以验证用户名密码。



在biztalk server 2010中使用了http适配器并创建了restful apis。



现在必须保护api调用。从我的一位朋友那里听说我们可以使用.net Oauth库来创建和验证api调用的令牌。他是在.net项目中完成的。 
$


----------------------- --------------------------------
$


谢谢，



Rajeshwari ML

Hi ,

Need to secure the api calls in Biztalk Solution. Please suggest me the best ones.

we have AD Server from Client where we can validate the Username Password.

Have used http adapter and created restful apis in biztalk server 2010.

now have to secure the api calls. have heard from one of my friend that we can use .net Oauth library to create and validate the token for api call. he has done it in .net project. 

-------------------------------------------------------

Thanks,

Rajeshwari M.L

推荐答案

嗯，请记住，"restful api"和身份验证彼此无关。

Well, keep in mind that a "restful api" and authentication have nothing to do with each other.

意思是，您可以使用任何标准技术来验证任何REST / WebAPI或其他任何内容。  没关系。

Meaning, you can use any standard technique to authenticate any REST/WebAPI or whatever.  It doesn't matter.

所以，你和对方只需要就你们都能支持的最容易实现的内容达成一致。  这可能是凭据，证书，NTLM（如果你们都在同一个域名）。

So, you and the other side just need to agree on what's you both can support that is the easiest to implement.  This could be Credentials, Certificates, NTLM (if you're both on the same domain).

我会说，甚至不考虑oAuth 。  在99.999％的情况下，它是净负值，因为它比您需要的更复杂，除非您拥有全球分布的节点或每天处理50,000个用户，否则没有任何好处。

I'll say it, do not even consider oAuth.  In 99.999% of cases, it's a net negative since it's way more complication than you need and unless you have globally distributed nodes or handle 50,000 user per day, there's zero benefit.

证书，因为它们很酷，可能是你最好的选择。

Certificates, as uncool as they are, are probably you best option.

这篇关于我如何进行身份验证对于Biztalk server 2010中的restful apis的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！