User authentication for intermediate representational state transfer (rest) client via certificate authority

A computer implemented method comprising:

• receiving a resource request at a representational state transfer (REST) client from a user, the resource request including a user ID;
• determining, by the REST client, a key pair including a public key and a corresponding private key that are associated with the user ID;
• obtaining, by the REST client, a certificate associated with the user ID that is signed by a certificate authority and based on at least the user ID and the public key associated with the user ID;
• impersonating, by the REST client, the user to a REST server using the certificate and the private key associated with the user ID;
• and
• accessing, by the REST client on behalf of the user, using a stateless protocol with the REST server, the requested resource.

An apparatus comprising:

• a transceiver configured to receive a resource request at a representational state transfer (REST) client from a user, the resource request including a user ID;
• key determination logic configured to determine, by the REST client, a key pair including a public key and a corresponding private key that are associated with the user ID;
• certificate acquisition logic configured to obtain, by the REST client, a certificate associated with the user ID that is signed by a certificate authority and based on at least the user ID and the public key associated with the user ID;
• impersonating logic configured to impersonate, by the REST client, the user to a REST server using the certificate and the private key associated with the user ID;
• and
• accessing logic configured to access, by the REST client on behalf of the user, using a stateless protocol with the REST server, the requested resource.