How to Design RESTful API Permissions

RT: authorize an app_id with an access_token to access some resources of the API. It may be difficult to set permissions for each url resource, and different requests such as GET and POST can be configured for the same url. Is there a good solution? RT: authorize an app_id with an access_token to access some resources of the API. It may be difficult to set permissions for each url resource, and different requests such as GET and POST can be configured for the same url.

Is there a good solution?

Reply content:

RT: authorize an app_id with an access_token to access some resources of the API. It may be difficult to set permissions for each url resource, and different requests such as GET and POST can be configured for the same url.

Is there a good solution?

1. token format
2. oau22.

Can look at this answer, hope to help you http://segmentfault.com/q/1010000002567482/a-1020000002568368

Ps: Don't be afraid of trouble. You have to do this. Permission management has many tools. For example, spring security is a permission management framework.

We recommend a very good article:

Http://blog.jobbole.com/41233/

For more information, see.

RESTful authorization relies on the framework to provide authorization mechanisms such as Jersey Spring and servlet containers. What is difficult about RESTful is authentication. Once a token is hijacked, authorization is meaningless.