security.adoc

Security

{MUST} Secure Endpoints with DNT Connect

If the API needs authentication, use DNT Connect in Sherpa as the OAuth2 provider. Sherpa handles OAuth2 clients, generates access tokens and the API service must verify the tokens towards Sherpa.