Skip to content
This repository was archived by the owner on Nov 13, 2021. It is now read-only.

Update readme with security guideline intro #134

Merged
merged 1 commit into from
Oct 7, 2019
Merged

Update readme with security guideline intro #134

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 4 additions & 9 deletions maturity-level-two/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,13 +15,8 @@ You should:
- Unit test Open API validation to automatically detect breaking changes

## API Security
API security is an essential part when designing the API.
API security is an essential part when designing the API. All different levels of security are discussed within the API-Security document ([user guide](docs/api-security.md)).

All different levels of security are discussed within the API-Security document.

Different levels of security are covered such as:
- IP Filtering
- API Key
- OAuth (if there is an Identity Provider)
- Client Certificate
- ...
You should:
- When possible, use a token based authenticaton/authorization (OAuth2, MSI, etc..)
- When not, depending on the use case, consider to use a combination of the available security mechanisms (e.g. Client Certificate, api key, ip filtering, etc..)