Tag

RSA signature

0 views collected around this technical thread.

Code Ape Tech Column
Code Ape Tech Column
Jun 10, 2025 · Information Security

Securing OpenAPI Interfaces with AppId, AppSecret, and RSA Signatures

This article explains how to standardize and protect OpenAPI interfaces by using globally unique AppId/AppSecret pairs, generating RSA‑based signatures, implementing timestamp and nonce checks, and applying common security measures such as rate limiting, whitelist/blacklist controls, and sensitive data handling, all illustrated with complete Java code examples.

API securityAppIdAppSecret
0 likes · 28 min read
Securing OpenAPI Interfaces with AppId, AppSecret, and RSA Signatures
Code Ape Tech Column
Code Ape Tech Column
Oct 26, 2023 · Information Security

OpenAPI Security Practices: AppId/AppSecret, Signature Generation, and Implementation Guide

This article explains how to use OpenAPI standards to secure API interfaces by introducing AppId/AppSecret mechanisms, RSA‑based signatures, timestamp and nonce anti‑replay measures, and provides complete Java code examples for client‑side signing and server‑side verification along with common protection techniques such as rate limiting and data validation.

API securityAppIdAppSecret
0 likes · 28 min read
OpenAPI Security Practices: AppId/AppSecret, Signature Generation, and Implementation Guide