Does anyone know of any tutorials that explain clearly how to implement simple REST functionality with authorization.
I've seen a few plugins and got also got some basic REST functionality working but there seems no clear guidelines about how to build a secure REST service in Cake.
Any help appreciated.
Sounds like you need to look into OAuth which uses REST to connect to Web Sevices without sending usernames and passwords.
Try these tutorials for a start
http://code.42dh.com/oauth/
http://www.neilcrookes.com/2010/04/12/cakephp-oauth-extension-to-httpsocket/
Related
Is there a good method for implementing user authentication with Perfect Swift? Something of a kind with this:
https://www.raywenderlich.com/85528/user-accounts-ios-ruby-rails-swift
I really like the idea of only developing in Swift for server and client, but I've never tried implementing user-authentication in an app, so I'm not sure if this is the sort of thing that would be done through Perfect, or whether I should be looking at doing this with another service.
So far I've built out the following tutorial with Perfect and it works well enough to get a good feel for the process: http://www.chrismanahan.com/creating-a-web-service-swift-perfect
EDIT 1:
I found a good method for authentication called stormpath, however, while they're site talks briefly in a blog post about server side swift (https://stormpath.com/blog/swift-on-the-server-today) as far as I can tell the backend api for this has to be javascript. Is there a way to use stormpath in a perfect database?
I am in the process of creating an app (cross-platform with Ionic framework) and during my research about app with this framework I found the one created for HabitRPG and it is using an API to retrieve data, it totally suits my app as well, but I don't know where to start to create an API nor what to use.
I allready did some quick test with Spring, NodeJS and Symfony (with FOS) but I'm looking for something really easy to use and to setup but still to have a lot of flexibility (like manage security, users, and data visibility).
Is there a specific technology easy enough to start with ?
If you want to create a Web API and host it, you can perhaps have the look at APISpark (http://restlet.com/products/apispark/). It's an online plateform that allows to design your APIs following REST principles and then host them. The data are also managed by the platform.
Hope it helps.
Thierry
I'm using this library with my codeigniter rest service. Basically, I have a REST_controller, that is inherited, and checks for a valid token, using that library.
All I want is to provide an API to secure some of the API methods.
Now, I'm lost reading most of the specs for oauth2 and tutorials regarding that library.
Can anyone help me, proving good tutorials, examples and explanations on I can achieve, a simple login system and then, call user authenticated methods.
Thanks in advance
Just constructed a pictorial tutorial for OAuth2.0 specs. In case you may find this useful:
Tutorial : http://restful-fundamentals.blogspot.in/2013/04/oauth-20-introducation.html
Also adding a web app demo demostrating the different Authorisation Grants flows. It contains the path to the google code as well as some other tips.
http://restful-fundamentals.blogspot.in/2013/04/svn-repository-oauth20-spectifications.html
***Your comments at that blog may be useful to me to improve the contents there*
I did a demo using spring MVC and spring security you can find source code here
I've not looked into BackboneJS or EmberJS in detail, but as I understand, it is possible to have BackboneJS seamlessly work with a REST back-end. Whereas EmberJS doesn't seem to have anything I can use out of the box.
Can anyone offer any advice how to achieve this with EmberJS?
If you just need a simple REST adapter without much complexity, then
https://github.com/cerebris/ember-rest
is great for the job.
I've written an article about Ember.js on InfoQ, that goes through the basics. The article used Ember 0.9.5, so not everything will be working with the newest Ember 1.0-pre release.
It goes through the basic structure of an Ember-app as well as the very basics with Ember Data.
http://www.infoq.com/articles/emberjs
I think you're looking for something like Ember-rails
https://github.com/emberjs/ember-rails
I'm working with NodeJS + Mongoose, writing a Single Page Application, so I need to serve some statics and then all the interaction between frontend and backend is done via XHR. Eventually I'm thinking about writing a native mobile app accessing the same backend. Is there any pattern / best practice I should apply here?, I thought that I may need to extract the API to be exposed via Restify, and handle the requests from the webapp only with ExpressJS? or should I just put all the stuff exposed via Restify? I guess my confusion comes from not being worked with Restify before, so any explanation about how is it different from ExpressJS (specially when talking about a Single Page App) is really welcome.
I am implementing a similar solution, mobile app & website with expressjs and backbonejs. I did not use restify because i did not think i needed the extra complexity, there were not that many API endpoints so expressjs handled everything ok for me.
BTW take a look at this post on restify performance, I just saw it today and have not personally validate the contents.
Benchmarking APIs using PerfectAPI vs Express.js vs Restify.js « « PerfectAPI Blog PerfectAPI Blog http://bit.ly/xrTguB
Restify is packaging DTrace and various handlers that Express doesn't. If you just have one API endpoint and don't need DTrace, it doesn't make sense to run Restify.
Also, you might want to try express-resource