将POST请求从一个应用程序授权给其他应用程序

Question

I have two web applications which need to communicate data between them, for example when an employee is added in Application A, i make a CURL request / POST request ** and pass some of the employee data and Store it in **Application B.

The functionality is working fine, now i want to make the request flow secure, these two application i.e. Application A and Application B are on two different WebServers built on different technologies. One in PHP and Other in Java.

So when a record is added in PHP i send CURL request and save data in java. **The PHP application is built for distribution which would be sent to the end users.**

How i can make sure that the POST requests i send are secure. Any ideas?

Answer 1

Here are some points which may result in surity of secure data transfer:

• Use of SSL requests will be helpful.
• Use an app token which will only known to applications. So while receiving and sending data you verify that token.
• Try encrypted data transfer using some mechanism known to applications only, if don't want to use SSL.
• Your own Algorithm to encrypt decrypt the request and its parameters, which only the receiving, sending applications will be knowing.
• Many more..