REST API OVER HTTPS

[phpgeek1982]

Hi Team,

I have been working on REST Web SERVICES since a week, and Im really struck at this point.

 

I want to create a REST API with the following sEt of rules:

1. All REST API calls must take place over HTTPS with a certificate signed by a trusted CA. All clients must validate the certificate before interacting with the server.

2. All REST API calls should occur through dedicated API keys consisting of an identifying component and a shared, private secret. Systems must allow a given customer to have multiple active API keys and de-activate individual keys easily.

3. All REST queries must be authenticated by signing the query parameters sorted in lower-case, alphabetical order using the private credential as the signing token. Signing should occur before URL encoding the query string.

 

Any help would be really appreciated.

 

Cheers!!