just-api | : boom : Test REST , GraphQL APIs | HTTP library
kandi X-RAY | just-api Summary
kandi X-RAY | just-api Summary
:boom: Test REST, GraphQL APIs
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of just-api
just-api Key Features
just-api Examples and Code Snippets
Community Discussions
Trending Discussions on just-api
QUESTION
I have a REST API which uses JWT bearer authentication over HTTPS. SSL certificate is installed on the web server hosting my REST API. Do I need to provide client certificates to different applications(users) who want to consume my API, to have a handshake between their server and my server using the client certificate which i provide them.
I tried calling my HTTPS REST API which I developed in C# from a python script running locally from my machine but I had to specify the verify flag to False or ssl.CERT_NONE
for the call to succeed
ANSWER
Answered 2019-Dec-12 at 16:50Quick answer: keep your private key file safe and you wont have any problems.
The long answer has to do with explaining asymmetrical encryption and how its implemented in a TLS handshake. When a client opens a HTTPS connection with your server a series of requests are sent back and forth:
- Client sends HELLO
- Server sends HELLO back including the servers SSL certificate
- Client verifies the certificate with the certificate authority
- The client sends back a random string of bytes encrypted with the servers public key
- The server decrypts the string using the private key
After the final step a session is created between the client and server. In order for a man-in-the-middle attack to be successful the "man in the middle" needs to have your private key and proxy every action just described back to your server, otherwise one of the steps will fail and the client will get that "SERVER UNVERIFIED" error in their browser warning them that the connection is not secure.
This is a pretty brief explanation of the process, you can do some more reading here
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install just-api
Following is a simple example showing usage of Just-API. Write following suite in your editor. Back in the terminal.
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page