How to Secure JAX-RS Endpoints of a Stateless Application

Securing your application is a very important aspect of the development of your application.

You not only need to make sure that the application has the intended functionality but also that this functionality can only be executed by the appropriate people. You need to make sure that updates to data are restricted to the correct people, but it is also important that end users only see data they are allowed to see. And in case of sensitive data, this is even more important.

This User Guide will discuss the different aspects of securing the JAX-RS endpoints of your application using standards and common practices like OAuth2, OpenID Connect, JWT Tokens, and MicroProfile JWT authentication in combination with the Payara Platform.

In this guide:

• Authentication and Authorization
• Groups vs Roles
• How to Secure a Stateless App