Authorizing the RESTful web service accesses via the security APIs

The authorization process verifies whether the client requesting or initiating an action has the right to do so. In this section, we will see how to use the JAX-RS APIs for authorizing the incoming REST API calls from various clients.

Using SecurityContext APIs to control access

We started off this chapter by discussing how an application authenticates a user who is trying to access a secured resource. When a client accesses a secured resource, the server identifies and validates the requester, and on successful authentication, the requester is allowed to get inside the application. During this process, the underlying security framework generates a javax.ws...