I'm considering making different URL's for retrieval of a list of sites vs. one site (sites are actual locations on the ground in my scenario): List of sites:...
Hi Scott, The same question came up a couple weeks ago -- you'll find several different opinions. But all were agreed that REST itself doesn't suggest one or...
I think he was asking not only for a resource that is a collection, but also the client providing an explicit list of data elements to return. Although I...
Hi, I know it is a repeating topic how to correctly authenticate a client to a REST interface. Please first note, if I talk about client I do not mean browser,...
Hi Sebastian, We have a (very) little experience in providing web services as a finantial institution. We provide services to other financial institutions. We...
Miguel Covas O'Ryan
miguel.covas@...
Aug 2, 2006 7:04 pm
6364
... I think it is not the problem to generate HTTP auth, but to handle it. But I might be wrong. On the server side I have a Tomcat handling the requests in a...
... Thanks for this lengthy description of your experience. I think it is the way I intended to go. I will first again check if HTTP auth might work, but if it...
Tomcat gives several options for implementing and patching in your own notion of "realm". Check the tomcat docs. Should be no problem. ... I ... in ... ...
... Perhaps the discussion is going off topic, but anyway, as far as I know you can always retrieve the user / password even the Tomcat is handling the...
Miguel Covas O'Ryan
miguel.covas@...
Aug 2, 2006 8:17 pm
6368
... I believe it can be configured either way, and potentially differently depending on the URL path. Our application handles all authentication inside Tomcat...
... HTTP Basic auth is definitely the way to go. If your framework doesn't help you, in the worst case you can just read and parse the Authorization header...
... Any reason why not PUT? ... We've implemented just that using C# and Java restlets. Gives normal client login. ... We've done it as part of the application...
... HTTP Basic offers zero security unless encryption is coming from somewhere else (SSL). HTTP Digest is the way to go if you aren't going over a secure...
I am conducting research into the practices of enterprise architecture and software development and would love your participation. The URL to the survey is:...
If hitting a URL with GET is supposed to give you a view of the resource and it's not a form by default, then how to do you get a <form...> view of it for ...
Scott, IMO forms should either be discovered while the client proceeds through the application's state machine or the MIME type that supports the desired...
Jan, What I'm really interested in is how you handle this RESTfully? What URL should you hit to get the form to edit the resource. Say your resource is at: ...
... No sure I understand what you mean by 'this'. Can you explain. ... Either the MIME type prescribes this (like Atom PP defines that POSTing to collections...
... 1. You don't NEED to do that. There are other ways to change resources apart from a FORM. You can have some AJAX PUT something for example. 2. If you need...
Scott, I know exactly what you were asking. Since these other guys are waxing too theoretical, I'm stepping in with some practical examples. :) 1. In my...
... This = the situation where you want the server to provide you with a <form> representation of the resource. ... So when I send a xmlhttprequest GET to the...
... Hitting /entries/1 with GET would give me back a xhtml view of the resource in non-editable form, just straight xhtml. I need to know how to hit a given ...
... Right, but in the case where you're using a FORM to do it, how do I GET that form? GETing the resource usually returns a 'view-only' version of it. There...
... These appear to me to not be RESTful. I understand that you're supposed to use only one URL for a resource whether to view, update, or delete it. Perhaps...
... I don't believe REST constrains a resource's state to being manipulated through its URL only. Given that GET and POST are the only HTTP methods reliably...
... That is certainly one way. You don't NEED to turn the FORM off either. I have an accounting system that I wrote RESTfully. There is a url: /account/ which...
... But there's nothing to say that the page that the edit request COMES FROM has to be the resoure that is being edited. So your FORM could be written on any...
... I understand all the HTTP methods (GET, POST, PUT, DELETE, HEAD, ?) can be done correctly using xmlhttprequest in all modern browsers. Is this incorrect? ...