jsentinel-rest

You can secure a JDK HttpServer REST API by integrating jSentinel to handle Bearer token authentication, session management, and audit logging. It uses RestSecurity.bootstrap() and @JSentinelAutoService for minimal setup.

Adding session management and audit logging to a REST API is achieved by integrating jSentinel. It provides four endpoint groups for authentication, audit, sessions, and users, alongside a TokenStore for managing Bearer tokens.

Yes, you can use jSentinel with a Jakarta Servlet API application. The integration requires jSentinel-rest, jSentinel-dx-rest, and jakarta.servlet-api dependencies to provide authentication and authorization for REST endpoints.

You can quickly start a REST server with pre-seeded in-memory admin and user accounts by compiling your module with ./mvnw compile, then executing the main class using ./mvnw exec:java to launch the secured HttpServer.

Yes, jSentinel provides pre-seeded in-memory admin and user accounts for REST API authentication. This allows you to immediately test authorization and access sensitive data without manually configuring an initial database.

Using an in-memory TokenStore for REST API Bearer tokens limits session persistence to the application's runtime memory. This means all active Bearer tokens and pre-seeded user accounts are lost when the REST server restarts.