DSpace x6 REST APIs - Security

[Ray W]

Hi Everyone,

I'm reaching to ask if anyone has performed a security assessment or testing on their REST endpoints for DSpace x6? We currently have our endpoints behind SSO and would like to explore how other community members have set up their REST endpoints. 

We are trying to determine how to safely and securely make our endpoints publicly available. Does anyone have a framework or strategy that you could suggest? Thank you for your time, take care and stay safe everyone.

Kind Regards,

Rachel