Go look at Amazon Web Servuces and how they do this. They address thus and it's well documented and there are client and even some server side open codes you...
19181
Cíat Ó Gáibh...
keithgaughan
Nov 29, 2012 12:55 pm
... The WWW-Authenticate and Authorization headers exist for this very purpose. In fact, RFC 2617 is designed to be extensible. ... HTTP auth headers. There's...
19182
C Ghtheach
keithgaughan
Nov 29, 2012 1:47 pm
... This isn't the case, otherwise the likes of OAuth (which I mention later) wouldn't be possible. ... I think you might be missing the greater point I was...
19183
Jan Algermissen
algermissen1971
Nov 29, 2012 2:14 pm
Hi Erlend, ... If you are looking for something along the lines of OAuth Client identifiers, you should take a look at OAuth 1 and 2 and the associated...
19184
Peter Williams
peter_e_will...
Nov 29, 2012 6:08 pm
... +1, HTTP auth is a tragically underused part of the standard. Peter barelyenough.org...
19185
Nicholas Shanks
nickshanks
Nov 29, 2012 7:53 pm
... And here's another: http://tools.ietf.org/html/draft-shanks-http-form-authentication-00 My first I-D, posted this week. :) — Nicholas. On 29 Nov 2012, at...
19186
Gaurav Agarwal
gauravagarwa...
Nov 29, 2012 7:54 pm
I guess having something like: http://www.mysite.com/invoices And having a POST request to that link should make sense. Of course if trying to have a web...
19187
Max Toro
maxtoroq
Nov 30, 2012 5:29 pm
Thanks for your answers, it's pretty much what I had in mind. I want to discuss a second example: a) POST /orders/1/cancel vs. b) PATCH /orders/1 canceled=true...
19188
Nicholas Shanks
nickshanks
Nov 30, 2012 6:17 pm
... REST says "Do 'b', never 'a'." Sorry! The simple rule is URIs are for nouns, HTTP methods are for verbs. You could get away with this though: POST...
19189
Ian Joyce
idreamincode
Nov 30, 2012 6:17 pm
REST says nothing in favor or against either of those two designs...
19190
Jan Algermissen
algermissen1971
Nov 30, 2012 6:43 pm
... Yes, right. If it suits your use cases, consider: DELETE /orders/1 Which might well result in the order being moved to a cancled-orders collection. IOW, it...
19191
Erik Wilde
drethoo
Nov 30, 2012 6:45 pm
+1 on this, it probably would be a good mapping of domain interactions to HTTP verbs. ... -- erik wilde | mailto:dret@... - tel:+1-510-2061079 |...
19192
Eric J. Bowman
eric@...
Nov 30, 2012 8:57 pm
+1 to the other answers you've gotten. Except... REST is about optimizing the hell out of GET. The hypertext containing the PUT control is one place to GET...
19193
Eric J. Bowman
eric@...
Nov 30, 2012 9:13 pm
... Pretty good answer, except for that... Welcome to rest-discuss! ;-) Here, the archives are full of list regulars being told directly by the likes of Roy...
19194
Will Hartung
gaminginparis
Nov 30, 2012 10:34 pm
... Unless your in a mobile environment where latency mutders you and compression is a secondary benefit. ... -- CONFIDENTIALITY NOTICE: The information...
19195
Max Toro
maxtoroq
Dec 1, 2012 1:15 am
What I'd love to get is an answer like: POST /orders/1/cancel is not REST compliant because chapter x of Fielding's dissertation explicitly or implicitly says...
19196
Eric J. Bowman
eric@...
Dec 1, 2012 5:24 am
... Right, YMMV with compression, but the main point is that the bulk of the order is static data and therefore may be made highly persistent in the client...
19197
Eric J. Bowman
eric@...
Dec 1, 2012 5:40 am
Technically, of course, I mean "high probability of being a single packet" when arbitrarily small messages (including headers) have their payload compressed....
19198
Eric J. Bowman
eric@...
Dec 1, 2012 7:09 am
... Well, what are you expecting to GET from /cancel, or are you just using that URL to invoke a procedure? If so, then there are a few places Roy's thesis...
19199
Eric J. Bowman
eric@...
Dec 1, 2012 8:05 am
... This is why Roy's thesis is an invaluable tool, at least for me anyway as I've been at this since '93 and had a front-row seat at the transition from the...
19200
Greg Young
gumboismadeo...
Dec 1, 2012 9:27 am
/CRMapp?order=1&query=status until intermediaries decide to ignore you because the ? ... They shouldn't but they do :) ... -- Le doute n'est pas une condition...
19201
Eric J. Bowman
eric@...
Dec 1, 2012 10:45 am
... They're configurable, and while this may have been a problem in the past, I don't believe it to be anything but an edge case, now. URIs are opaque and...
19202
Erik Mogensen
mogsie_oslo
Dec 1, 2012 1:30 pm
This post is mostly aimed at Max Toro, but Eric provided a nice entry point for me :-) ... Exactly. And we don't know what the author intends to identify just...
19203
Max Toro
maxtoroq
Dec 1, 2012 4:11 pm
... To clarify, /orders/1/cancel is used to modify a resource, using POST. A GET request would result in a Method Not Allowed response. This is also explained...
19204
Max Toro
maxtoroq
Dec 1, 2012 4:17 pm
Thanks for you answer Erik. I don't want to repeat myself, so please see my answer to Eric, I'd love to get your comments as well. Rather than good or bad I'd...
19205
Erik Wilde
drethoo
Dec 1, 2012 5:58 pm
hello max. ... i guess most people agree that the only reasonable answer to a question such as "is URI X RESTful" is: "tell me more about your design." i'd...
19206
Max Toro
maxtoroq
Dec 2, 2012 2:21 am
Did not choose DELETE because cancel does not delete the resource, it executes some logic which in the end sets it's status field to Canceled. The...
19207
Mike Schinkel
mikeschinkel
Dec 2, 2012 7:04 am
... +1 As an aside you'll find maintenance and validation easier if your status values are all lowercase (all upper would be okay too, but uglier.) Has nothing...
19208
Matt McClure
matthewlmcclure
Dec 3, 2012 1:40 am
... This seems like a really important point. As I started reading about hypermedia APIs, the authors seemed to be evangelizing the benefit that server...
19209
Erik Wilde
drethoo
Dec 3, 2012 2:00 am
hello matt. ... this is a very good question. one important aspect is that it's always bad if clients are tested against just one implementation. server ...
