Tagged articles

Secret Key

3 articles · Page 1 of 1

Dec 17, 2024 · Information Security

Design and Security Practices for Third‑Party API Authentication and Authorization

This article presents a comprehensive design scheme for third‑party API interfaces, covering access‑key/secret‑key generation, permission segmentation, signature flow and rules, anti‑replay mechanisms, token handling, and concrete Java code examples for secure request validation.

API securityAccess KeySecret Key

0 likes · 29 min read

Design and Security Practices for Third‑Party API Authentication and Authorization

Architect

Dec 3, 2024 · Information Security

How to Secure Third‑Party APIs with AK/SK, Signatures, and Token Strategies

This guide presents a comprehensive design for securing third‑party API calls, covering Access Key/Secret Key generation, permission granularity, timestamp and nonce based replay protection, signature creation and verification, token handling, TLS encryption, rate limiting, logging, and practical Java code examples.

API securityAccess KeySecret Key

0 likes · 28 min read

How to Secure Third‑Party APIs with AK/SK, Signatures, and Token Strategies

Architecture Digest

Apr 24, 2024 · Information Security

Secure Third‑Party API Design: AK/SK, Token, Signature, Timestamp & Nonce

The article presents a comprehensive guide to designing secure third‑party APIs, covering access‑key/secret‑key generation, token management, signature algorithms, timestamp and nonce anti‑replay mechanisms, permission granularity, request logging, rate limiting, and example Java and SQL implementations.

Access KeySecret KeySignature

0 likes · 28 min read

Secure Third‑Party API Design: AK/SK, Token, Signature, Timestamp & Nonce