Private Sector API Codesign PART II – Petteri Kivimaki
summary
X‑Road provides a gateway security server that lets existing REST APIs run unchanged by replacing the API base URL with the security server URL (example path uses /r1/{serviceId}) and forwarding the original request intact so clients need minimal changes. It requires an OpenAPI description for richer discovery and supports OpenAPI harvesting (Finland pulls descriptions daily into a catalog). Messages are signed including non‑repudiated HTTP verb+path+headers, no SOAP↔REST conversion, and operators can collect centralized usage and alerting from security server stats.
AI-written summary · about
chapters (5)
related talks
36mAPIs and Cross-Border Data Exchange in E-Government Context
17mAPI Security Simplified: Practical Tips & Tools
24mMastering API Security: From Design to Deployment
16mAPI Security Challenges and How to Address Them
29mDefence in depth
01h 00mSEVEN things about API security
32mSecuring Value in API Ecosystems
19mCreating a Solid Foundation for API Security