TickStream.KeyID can be added to protect applications, websites, and access to resources in the cloud via REST API. Using standard web services, public sector organizations can fortify passwords by adding just three lines of code for most deployments.
This REST API provides an application access to the TickStream.KeyID behavior analytics services via simple HTTP requests. To implement the API, it is important to understand the basics of RESTful web services and JSON data representations.
As it is accessible through REST, the TickStream.KeyID API may be consumed by a variety of development platforms, including Microsoft.NET (VB, C#, etc.), Java, JavaScript, Perl, PHP, Python, Ruby, and many others. However, for the sake of security practice, we strongly recommend accessing these services from a compiled application whenever transmitting your license key, or any other sensitive data, to protect that information from the client.
The TickStream.KeyID API supports CORS. This enables JavaScript code served from a domain other than the server hosting this API to make Ajax requests to it. However, with limited exceptions (the client library, validation, etc.), we strongly urge developers to use a compiled application to access these services.
Secure connection to the server hosting the TickStream.KeyID API is controlled by the configuration of that server. Access through both SSL and TLS are fully supported, provided the server has a valid certificate, and the appropriate TCP ports are open to the application.