This course teaches you the developer skills that are required to configure and implement services that support REST-based traffic and JOSE-based signatures and encryption on the IBM DataPower Gateways (IDG) with firmware version 7.5.1.
The DataPower Gateways allow an enterprise to simplify, accelerate, and enhance the security capabilities of its JSON, XML, web services, and REST deployments. For JSON payloads, DataPower supports digital signatures and encryption that conform to the JSON Object Signing and Encryption (JOSE) specification.
Through a combination of instructor-led lectures and hands-on lab exercises, you learn how to use the configuration options, processing actions, and GatewayScript to support REST-based message traffic. To protect JSON message payloads, you use JSON Web Signature (JWS) and JSON Web Encryption (JWE) actions in the processing policy of a service.
Hands-on exercises give you experience working directly with a DataPower gateway. The exercises focus on skills such as selecting request and response types, using the HTTP method criteria in a matching rule, style sheet and GatewayScript transforms, GatewayScript CLI debugging, signing JSON payloads, and encrypting JSON payloads.
After completing this course, you should be able to:
REST and JSON support for Web 2.0 and mobile applications
Exercise: Using DataPower to implement REST services
JOSE and JOSE support in IBM DataPower
Using the WebGUI to create and verify a JWS
Exercise: Creating and verifying a JWS
Using the WebGUI to create and decrypt a JWE
Exercise: Creating and decrypting a JWE
Using GatewayScript to manipulate a JWS and a JWE
Exercise: Using GatewayScript to work with a JWS and a JWE