Replace Spine Security Proxy (SSP) with a more point-to-point alternative, with some other form of auth wrap.
I don't think we need to remove SSP but there is a need to support point to point alongside this. API providers should protect access to their API resources through OAuth 2.0 - not sure if this is a specific request
0 / 1,000
* Your name will be publicly visible
* Your email will be visible only to moderators
This feedback board is powered by Feature Upvote.
When submitting your email with a suggestion or comment, Feature Upvote uses your email to
Your email is never displayed to other users. NHS Digital API Management staff will be able to see your email address.
We’ll email you when the status of the suggestion changes. You can unsubscribe at any time with a single click.
* Comments and upvotes from this suggestion will be moved to another suggestion.
Edit the selected suggestion and create a new one.
Comments and upvotes will also be moved.