[Archivesspace_Users_Group] API security

Kevin W. Schlottmann kws2126 at columbia.edu
Thu May 17 14:46:08 EDT 2018

Dear AS Community,

We are trying to make our AS instance secure before moving into
production, and we are curious how institutions are securing their
API.  Right now, our calls are limited by IP range, and most (but not
all for some reason) calls require authentication.  Basically, we are
looking for any thoughts on best practices for securing API access.

We found this thread on security, but it is not quite on point for API access:




Kevin Schlottmann
Head of Archives Processing
Rare Book & Manuscript Library
Butler Library, Room 801
Columbia University
535 W. 114th St., New York, NY  10027
(212) 854-8483

More information about the Archivesspace_Users_Group mailing list