How to add domain restriction to REST CAS

Question

In our project we're using jasig CAS solution. Recently we've added RESTful interface. To be 100% secure I want to provide restriction on URLs. Only trusted URLs should be able to send requests to this API.

What is the best approach, does CAS support such requirement? So far I thought about:

• Some firewall/server configuration
• Create a Filter with lists of trusted URLs

Answer 1

Actually, domain restriction is hard to maintenance in real-business-world. So better way is to choose different way to allow access for trusted services. Preferred way is for example: digital signature.