A framework for flexible REST services: Decoupling authorization for reduced service dependency

Integrating or creating new applications (services), using existing data involves changing existing applications (services). For better usage, there is a need to export data as basic services (SOA approach). Representational State Transfer (REST) works with resources instead of operations, offering full web-scale interoperability and scalability advantages while exchanging information between applications and in this way is more adequate, also offering HTTP content negotiation, most importantly discoverability for free and HTTP concurrency control and compression. Although there are de-facto standardized solutions for such SOA architectures, essential problems remain and need to be addressed: Authentication, Authorization, and Security. In our work we are going to propose a decoupling authorization framework for reduced service dependency, providing integration of in-house service registration such as University Services in the Cloud increasing service flexibility.