#352 Securing an API

ASCIIcast 352 - Securing an API

, we showed you how to build a versioned API for a store application. We can interact with this application through JSON if we visit the path /api/products . This API is completely public so anyone can use it to edit or destroy the products but usually we want to restrict access to an API. There are a variety of ways that we can do this and the correct technique depends on our application’s requirements. In this episode we’ll show several solutions that we can use to lock down an API so that you can choose the one that best fits your style of application.

Full article: http://railscasts.com/episodes/352-securing-an-api?langua...