secure-rest-server

README

secure-rest-server

REST server focusing on security with minimal dependencies

Security Features

Secure Transmission

• Transport Layer Security (TLS) enabled and required
• CORS HTTP headers

Authentication

• Account name and password authentication method
• Encrypted hash storage of password

Session Management

• Secure-only, HTTP-only cookie
• Cross-Site Request Forgery (CSRF)

Authorization

• Permission-based access control

Input validation

• OpenAPI Specification (Swagger) generated from code used for input validation

OWASP reference

---

Features

Configuration

• Single method of loading configuration

Storage

• MongoDB
• PostgreSQL
• Redis
• go-memdb

---

Develop

Requirements

• Protocol buffers - https://github.com/golang/protobuf#installation

Build

go install ./cmd/arkavo-server/...

Test

go test ./...

Certificate

openssl genrsa -out server.key 2048

openssl req -new -x509 -sha256 -key server.key -out server.pem -days 365

Execute

arkavo-server

Protocol Buffers (optional)

protoc -I proto --go_out=security proto/*.proto

go install ./cmd/prototag/...

prototag -dir=security

pb-go-tag-bson -dir=security