Java Development Tools

Hi,

Using JDev 12.2.1

I have been asked to implement Security in my Rest Web Service and Client applications, to allow only to respond to requests that came from my Client App.

I have searching about the topic and found out that are 4 ways to do it, based on: http://docs.oracle.com/middleware/1212/wls/RESTF/secure-restful-service.htm#RESTF284

• Securing RESTful Web Services and Clients Using OWSM Policies
• Securing RESTful Web Services Using web.xml
• Securing RESTful Web Services Using SecurityContext
• Securing RESTful Web Services Using Java Security Annotations

In my Client App:

- I'm not using weblogic Roles so, if I understand it correctly, using Security Annotations or SecurityContext or Web.xml is out of the question;

The only one left is OWSM Policies.

The way I have created my Client App is not using a RESTful Client and Proxy. Instead I'm using a Web Service Data Control (SOAP / REST) and I can't find a way to implement security in it.

https://docs.oracle.com/middleware/1212/jdev/OJDUG/dev_web_services.htm#OJDUG7045

I have separated applications, one for my service and one for my client.

Am I missing something, or am I wrong on what I said previously?

Thanks in advance