How to pass certificate over rest request?











up vote
0
down vote

favorite












I am building an application which registers an external IdP with Okta.
Okta API doc.



In order to do that, I need IdP certificate & other meta data from the user.



Thus workflow will look like this:





  • User calls my endpoint and provides me with Idp details ( certificate
    & meta data )



    My application will then use the user provided Idp Details to call
    Okta and register the IdP.




However, how should user provide me with Idp ceritificate - encrypted or un-encrypted?










share|improve this question


























    up vote
    0
    down vote

    favorite












    I am building an application which registers an external IdP with Okta.
    Okta API doc.



    In order to do that, I need IdP certificate & other meta data from the user.



    Thus workflow will look like this:





    • User calls my endpoint and provides me with Idp details ( certificate
      & meta data )



      My application will then use the user provided Idp Details to call
      Okta and register the IdP.




    However, how should user provide me with Idp ceritificate - encrypted or un-encrypted?










    share|improve this question
























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      I am building an application which registers an external IdP with Okta.
      Okta API doc.



      In order to do that, I need IdP certificate & other meta data from the user.



      Thus workflow will look like this:





      • User calls my endpoint and provides me with Idp details ( certificate
        & meta data )



        My application will then use the user provided Idp Details to call
        Okta and register the IdP.




      However, how should user provide me with Idp ceritificate - encrypted or un-encrypted?










      share|improve this question













      I am building an application which registers an external IdP with Okta.
      Okta API doc.



      In order to do that, I need IdP certificate & other meta data from the user.



      Thus workflow will look like this:





      • User calls my endpoint and provides me with Idp details ( certificate
        & meta data )



        My application will then use the user provided Idp Details to call
        Okta and register the IdP.




      However, how should user provide me with Idp ceritificate - encrypted or un-encrypted?







      api certificate okta






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Nov 12 at 20:02









      JavaDeveloper

      1,83353670




      1,83353670
























          1 Answer
          1






          active

          oldest

          votes

















          up vote
          1
          down vote













          If you are using https everything is already encrypted. Assuming there is some sort of authentication to access your application, I would probably just proxy the parameters to the Okta API (maybe with some validation to avoid sending known bad requests).



          Does that help?






          share|improve this answer





















            Your Answer






            StackExchange.ifUsing("editor", function () {
            StackExchange.using("externalEditor", function () {
            StackExchange.using("snippets", function () {
            StackExchange.snippets.init();
            });
            });
            }, "code-snippets");

            StackExchange.ready(function() {
            var channelOptions = {
            tags: "".split(" "),
            id: "1"
            };
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function() {
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled) {
            StackExchange.using("snippets", function() {
            createEditor();
            });
            }
            else {
            createEditor();
            }
            });

            function createEditor() {
            StackExchange.prepareEditor({
            heartbeatType: 'answer',
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader: {
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            },
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            });


            }
            });














             

            draft saved


            draft discarded


















            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53269290%2fhow-to-pass-certificate-over-rest-request%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown

























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes








            up vote
            1
            down vote













            If you are using https everything is already encrypted. Assuming there is some sort of authentication to access your application, I would probably just proxy the parameters to the Okta API (maybe with some validation to avoid sending known bad requests).



            Does that help?






            share|improve this answer

























              up vote
              1
              down vote













              If you are using https everything is already encrypted. Assuming there is some sort of authentication to access your application, I would probably just proxy the parameters to the Okta API (maybe with some validation to avoid sending known bad requests).



              Does that help?






              share|improve this answer























                up vote
                1
                down vote










                up vote
                1
                down vote









                If you are using https everything is already encrypted. Assuming there is some sort of authentication to access your application, I would probably just proxy the parameters to the Okta API (maybe with some validation to avoid sending known bad requests).



                Does that help?






                share|improve this answer












                If you are using https everything is already encrypted. Assuming there is some sort of authentication to access your application, I would probably just proxy the parameters to the Okta API (maybe with some validation to avoid sending known bad requests).



                Does that help?







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered Nov 12 at 21:33









                Brian Demers

                1,072139




                1,072139






























                     

                    draft saved


                    draft discarded



















































                     


                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function () {
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53269290%2fhow-to-pass-certificate-over-rest-request%23new-answer', 'question_page');
                    }
                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    Popular posts from this blog

                    Biblatex bibliography style without URLs when DOI exists (in Overleaf with Zotero bibliography)

                    ComboBox Display Member on multiple fields

                    Is it possible to collect Nectar points via Trainline?