IRC log for #rest, 2014-11-02

https://trygvis.io/rest-wiki/

All times shown according to UTC.

Time	Nick	Message
00:15		marcoslamuria joined #rest
00:37		begriffs joined #rest
01:15		marcoslamuria joined #rest
01:49		shrink0r joined #rest
02:15		begriffs joined #rest
02:33		marcoslamuria joined #rest
02:36		fumanchu joined #rest
02:51		ralphschindler joined #rest
03:36		marcoslamuria joined #rest
04:37		marcoslamuria joined #rest
05:23		systmkor3 joined #rest
05:37		systmkor4 joined #rest
05:37		marcoslamuria joined #rest
05:59		begriffs joined #rest
06:38		marcoslamuria joined #rest
07:39		marcoslamuria joined #rest
07:59		adaro joined #rest
08:26		_ollie joined #rest
08:40		marcoslamuria joined #rest
09:40		marcoslamuria joined #rest
10:13		Left_Turn joined #rest
10:41		marcoslamuria joined #rest
11:42		marcoslamuria joined #rest
12:25		_ollie1 joined #rest
12:42		Left_Turn joined #rest
12:43		marcoslamuria joined #rest
13:46		marcoslamuria joined #rest
14:26		shrink0r joined #rest
14:47		marcoslamuria joined #rest
15:50		marcoslamuria joined #rest
16:53		azer_ joined #rest
17:15		VictorBjelkholm joined #rest
17:16	VictorBjelkholm	Hey, quick question regarding REST. Let's say I have a user resource and blogpost resource. How would I make a move of a blogpost from user 1 to user 2 and being as "RESTful" as possible?
17:20		systmkor4 joined #rest
17:20	trygvis	you make a service kind of resource that can perform such a request
17:22		systmkor4 joined #rest
17:34		VictorBjelkholm joined #rest
17:44		DrCode joined #rest
17:53		DrCode joined #rest
18:08		ruibrito joined #rest
18:09	ruibrito	Hi people, if I decide to add a token to my service to authenticate the user, what is the best way to go about it? or it that not the best/easy way?
18:09	ruibrito	token in the request parameters I mean
18:11	trygvis	http has a build-in mechanism for authentication, why don't you use that?
18:12	ruibrito	I am using JERSEY in my Java server, I cannt find good examples to help me
18:12	ruibrito	trygvis: do you know of any examples to do http basic authentication?
18:16		marcoslamuria joined #rest
18:24		marcoslamuria joined #rest
18:38		marcoslamuria joined #rest
18:43	pdurbin	ruibrito: https://github.com/IQSS/dataverse/blob/master/src/main/java/edu/harvard/iq/dataverse/api/Search.java (uses Jersey/JAX-RS)
18:45	ruibrito	pdurbin: thx for the link but I dont see where is the authentication part :?
18:45	pdurbin	ruibrito: @QueryParam("key") String apiToken
18:47	ruibrito	pdurbin: I see, but is it a good idea to send the key in the open? this is a GET request :?
18:47	pdurbin	we'll only allow HTTPS
18:48	pdurbin	would be terrible to send the key/token over plain HTTP. firesheep territory
18:48	ruibrito	pdurbin: but for https I need to buy a SSL certificate correct? I know is more secure, but is not something i can buy right now
18:49	pdurbin	you could self-sign but browsers and curl will give warnings
18:50		vincent__ joined #rest
18:50	ruibrito	pdurbin: do you happen to know any other alternative? mybe during the brainstorming of the project you guys talk about some
18:52		VictorBjelkholm joined #rest
18:53	pdurbin	ruibrito: you're looking for a way to send a token to a RESTful service in the clear without someone being able to sniff it (over open wifi or whatever)?
18:54	ruibrito	pdurbin: frankly I am looking for a way I can authenticate the users requests, tokens seem to be the easiest way to accomplish that
18:59	pdurbin	"Remove all the security complexity by sending all traffic to go over SSL (HTTPS)" http://www.thebuzzmedia.com/designing-a-secure-rest-api-without-oauth-authentication/
18:59	pdurbin	I would just use HTTPS.
19:32		shrink0r joined #rest
19:36		VictorBjelkholm joined #rest
19:59		mezod joined #rest
20:02		DrCode joined #rest
20:05		marcoslamuria joined #rest
20:48		systmkor1 joined #rest
20:54		ph88 joined #rest
23:00		ph88 joined #rest
23:41		adaro joined #rest

https://trygvis.io/rest-wiki/