Best approach for securing REST services and a web application

Question

I´m building a web application which comunicates server and clients through REST services (I´m planning to build a mobile app in mid term).

I´ve used Spring Security in other web applications without REST services. But I´m not sure if that approach is suitable for my scenario.

Is it possible secure both access to web pages and calls to REST services using Spring Security? What would you recommend?

Backend uses Spring Data + Spring MVC.

Thank you.

Answer 1

Yes, Spring Security is a good way to secure both REST endpoints and traditional MVC webpages. The implementation can be similar for both your REST endpoints and MVC routes depending on your requirements.

Spring Security is a popular and effective way to add security to your Spring application. Since you already have experience with it, you should be able to secure your REST endpoints with relative ease.

Check out this detailed tutorial on securing REST routes with Spring Security to get started: https://spring.io/guides/tutorials/rest/5/