IRC log for #rest, 2015-04-12

https://trygvis.io/rest-wiki/

All times shown according to UTC.

Time	Nick	Message
00:17		shrink0r_ joined #rest
00:34		shrink0r joined #rest
00:53		wsiqueir joined #rest
00:56		quimrstorres joined #rest
01:00		begriffs joined #rest
01:47		ralphschindler joined #rest
03:44		lemur joined #rest
03:51		SarahAngel joined #rest
03:52	SarahAngel	I need a couple of non resource owner related endpoints secured to specific clients that are authorized to use them
03:52	SarahAngel	sounds like a good case for client_credentials and getting an access_token to authorize those
03:52	SarahAngel	now, in my case, the client is a front-end application running on a server that has 1000s of concurrent users
03:53	SarahAngel	any suggestions for handling this concurrency?
03:58	SarahAngel	I think I'll just protect that api with IP restriction
04:08	pdurbin	SarahAngel: dunno if you saw but we tried to answer your previous questions a bit: http://irclog.greptilian.com/out.pl?channel=rest;date=2015-04-10
04:09	SarahAngel	cool thanks
04:10	pdurbin	sounds like you have more or less the same question now
04:10	SarahAngel	yup, I did a similar approach now, my /v1/ prefix is the public API and /web/ is the private API for the web front-end server (all endpoints in this prefix require the correct source IP)
04:10	SarahAngel	its a bit of a different thought process
04:11	SarahAngel	mainly for the public endpoints
04:11	SarahAngel	for examples POST /users to signup users
04:11	SarahAngel	but I think, checking on IP is the most sane process
04:12	SarahAngel	otherwise I have to persist a short lived access_token in the front-end server
04:12	SarahAngel	I like your solution pdurbin
04:13	pdurbin	a coworker came up with it. I'm happy with it
04:13	pdurbin	SarahAngel: sounds like you're concerned about traffic/concurrency
04:13	SarahAngel	it is for a high traffic social network that I'm converting to a SPA + API Server system
04:14	SarahAngel	complete decoupling of business logic and front-end
04:14	SarahAngel	everything will go over the OAuth2 API
04:14	SarahAngel	from user signup to admin functionality like banning users
04:14	pdurbin	I've been meaning to study how to add OAuth support to our app.
04:15	SarahAngel	make this your bible
04:15	SarahAngel	https://tools.ietf.org/html/rfc6749
04:15	SarahAngel	then you can implement one :D
04:16	* pdurbin	looks
04:16	pdurbin	I live in a world (higher ed) where Shibboleth support has been a higher priority.
04:17	pdurbin	and hopefully on Monday our users will be able to log in with it (fingers crossed)
04:20	pdurbin	SarahAngel: the conversion is going ok so far?
04:20	SarahAngel	just started :p
04:20	SarahAngel	like 4 days ago
04:20	pdurbin	ah :)
04:20	SarahAngel	I'm also skipping 3 major framework versions
04:20	SarahAngel	so its a complete rebuild
04:21	SarahAngel	the auth side of things is done
04:21	SarahAngel	so now its migrating all the business logic and linking them up to endpoints
04:21	pdurbin	tell me about complete rebuilds. that was my last year and a half
04:22	pdurbin	I take it the old app is not a single page app.
04:33		ralphschindler joined #rest
04:48		ewalti joined #rest
04:50		Super joined #rest
04:50	Super	Hello.
04:50	Super	I have made an express server. And now I need to use it from client (browser).
04:56	pdurbin	Super: sounds good
04:56	Super	I am trying to figure out a good example of a client.
04:56	Super	I mean, I don't know which method is best.
04:57	Super	I am looking after some reference.
04:57	Super	A sample implementation.
04:59	pdurbin	Super: you could use Angular: http://mean.io
04:59		Super_ joined #rest
05:08	Super_	I am missing the element between the REST server (express) and client (browser)
05:09	pdurbin	HTTP
05:09		co-arbelos joined #rest
05:12	Super_	What I am after it is an implemention of a REST client for production.
05:15		lemur joined #rest
05:19	pdurbin	a client will depend on what the server does
05:27	Super_	What I don't know is how to bind data from the server to the client. (And vice-versa)
05:27	Super_	CLIENT: http://aurelia.io/docs.html#databinding
05:27	Super_	Server is an express server.
05:28	Super_	Does it make sense?
05:28	Super_	I am missing the link between client data and server data.
05:30		Super_ left #rest
05:33		lemur joined #rest
05:44		co-arbelos joined #rest
05:46		locks_ joined #rest
05:46		blindscreen_ joined #rest
05:47		rickharrison_ joined #rest
06:24		SarahAngel joined #rest
08:04		_ollie joined #rest
08:22		Left_Turn joined #rest
08:54		quimrstorres joined #rest
09:42		quimrstorres joined #rest
09:58		co-arbelos joined #rest
11:14		mezod joined #rest
11:51		shrink0r joined #rest
12:05		shrink0r_ joined #rest
13:31		adaro joined #rest
14:30		ralphschindler joined #rest
14:47		ralphschindler joined #rest
15:26		ralphschindler joined #rest
15:47		ralphschindler joined #rest
15:53		ralphschindler joined #rest
16:03		quimrstorres joined #rest
16:16		co-arbelos joined #rest
16:22		arbelos joined #rest
16:38		lemur joined #rest
16:46		Jefffrey joined #rest
17:36		sfisque joined #rest
18:16		quimrstorres joined #rest
18:54		Judasbricot joined #rest
19:54		_ollie joined #rest
20:14		LemonUK joined #rest
20:26		quimrsto_ joined #rest
20:49		quimrstorres joined #rest
21:06		shrink0r joined #rest
21:21		lemur joined #rest
21:33		quimrsto_ joined #rest
21:34		fumanchu_ joined #rest
22:07		quimrstorres joined #rest
22:18		co-arbelos joined #rest
22:24		quimrstorres joined #rest
22:26		shrink0r_ joined #rest
22:30		shrink0r joined #rest
22:37		co-arbelos joined #rest
22:46		shrink0r_ joined #rest
22:50		quimrsto_ joined #rest
22:52		quimrsto_ joined #rest
23:02		sfisque1 joined #rest
23:26		arbelos joined #rest
23:53		co-arbelos joined #rest

https://trygvis.io/rest-wiki/