I'm building an SAAS application and looking for solutions to secure my RESTful API (written in Java/Jersey 2). Developers should be able to consume my REST API via an Access token.

I had a look at kong - but I'm honestly a bit worried about the deep integration. If kong will somehow not fit later anymore, it's hard to migrate to another security / API Layer management concept.

What are you thinking about node-oauth2?

Are there any good alternatives?

Also - is there any other way to securely generate an non-expiring Access token without Oauth2?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.