[Archivesspace_Users_Group] API security

[Kevin W. Schlottmann]

Dear AS Community,

We are trying to make our AS instance secure before moving into
production, and we are curious how institutions are securing their
API.  Right now, our calls are limited by IP range, and most (but not
all for some reason) calls require authentication.  Basically, we are
looking for any thoughts on best practices for securing API access.

We found this thread on security, but it is not quite on point for API access:

http://lyralists.lyrasis.org/mailman/htdig/archivesspace_users_group/2016-February/003137.html

Best,

Kevin

-- 
Kevin Schlottmann
Head of Archives Processing
Rare Book & Manuscript Library
Butler Library, Room 801
Columbia University
535 W. 114th St., New York, NY  10027
(212) 854-8483