spring security for REST API

Question

I don't know whether it is already under development or not as spring project, but i strongly that there should be separate spring security for REST API. Right now we use and customize spring security to address REST API requirement but basically it is addressed to web mvc. Personally i face lots of challenge to handle REST API security requirement and i believe other developers also. If spring can provide such standard security framework for REST API, will be great. Comments please!!!

Answer 1

I can involve to look deeply inside the spring security docs and inside the blog (and certainly the book too) of Eugen Parashiv you will find in http://www.baeldung.com

Spring Security for a REST API

I can tell Spring Security is a great tool to secure many applications, and not only web ones! SWT or SWING ones too, because of endpoints secured techniques :)

Answer 2

How about using the built-in remember-me feature? Just mimicking the browsers, first time when a user signs in, have the remember-me flag set and preserve the returned remember-me cookie. Next time onward, send the cookie along with the requests.