Comments on: Has anyone built an API with CFCs? http://joshua.remote-app.com/2008/10/13/has-anyone-built-an-api-with-cfcs/ My blog of programming, hobbies, and thoughts. Sun, 27 Dec 2009 20:49:36 -0500 http://wordpress.org/?v=2.8.2 hourly 1 By: Hem Talreja http://joshua.remote-app.com/2008/10/13/has-anyone-built-an-api-with-cfcs/comment-page-1/#comment-69 Hem Talreja Tue, 14 Oct 2008 18:32:00 +0000 http://www.mycfblog.com/index.cfm/2008/10/13/Has-anyone-built-an-API-with-CFCs#comment-69 Josh, I have posted my SOA backend, there is user authentication as there is only one entry point into your application and each method can be secured or an open event. http://www.hemtalreja.com/?cat=11 Let me know if you need help extending this functionality. Josh,

I have posted my SOA backend, there is user authentication as there is only one entry point into your application and each method can be secured or an open event.

http://www.hemtalreja.com/?cat=11

Let me know if you need help extending this functionality.

]]> By: Shannon Hicks http://joshua.remote-app.com/2008/10/13/has-anyone-built-an-api-with-cfcs/comment-page-1/#comment-68 Shannon Hicks Mon, 13 Oct 2008 17:35:00 +0000 http://www.mycfblog.com/index.cfm/2008/10/13/Has-anyone-built-an-API-with-CFCs#comment-68 Really, oAuth takes care of all of that. It's pretty easy to implement, has good documentation, and great community support. It is currently used by the likes of Twitter, Google, Yahoo, MySpace, SmugMug, etc. There are oAuth libraries (Server and Client) for ColdFusion, ActionScript 3, Java, PHP, .NET and the other usual suspects. You can always hop into the google group and ask questions. Really, oAuth takes care of all of that. It’s pretty easy to implement, has good documentation, and great community support. It is currently used by the likes of Twitter, Google, Yahoo, MySpace, SmugMug, etc.

There are oAuth libraries (Server and Client) for ColdFusion, ActionScript 3, Java, PHP, .NET and the other usual suspects.

You can always hop into the google group and ask questions.

]]> By: todd sharp http://joshua.remote-app.com/2008/10/13/has-anyone-built-an-api-with-cfcs/comment-page-1/#comment-67 todd sharp Mon, 13 Oct 2008 17:15:00 +0000 http://www.mycfblog.com/index.cfm/2008/10/13/Has-anyone-built-an-API-with-CFCs#comment-67 If no one else answers I'll try to put together a blog post within the next day or two. If no one else answers I’ll try to put together a blog post within the next day or two.

]]> By: Joshua Rountree http://joshua.remote-app.com/2008/10/13/has-anyone-built-an-api-with-cfcs/comment-page-1/#comment-66 Joshua Rountree Mon, 13 Oct 2008 16:57:00 +0000 http://www.mycfblog.com/index.cfm/2008/10/13/Has-anyone-built-an-API-with-CFCs#comment-66 I mean I get what you're saying pretty much but how does it know which is the first call? This application requires a login/password to get into it by default. Should I assign them some sort of authentication key assigned to their account or something? Domain authorization? any of that? I mean I get what you’re saying pretty much but how does it know which is the first call? This application requires a login/password to get into it by default. Should I assign them some sort of authentication key assigned to their account or something? Domain authorization? any of that?

]]> By: Joshua Rountree http://joshua.remote-app.com/2008/10/13/has-anyone-built-an-api-with-cfcs/comment-page-1/#comment-65 Joshua Rountree Mon, 13 Oct 2008 16:54:00 +0000 http://www.mycfblog.com/index.cfm/2008/10/13/Has-anyone-built-an-API-with-CFCs#comment-65 I think elaborating is definitely a must. I'm not quite sure what you're saying haha. I think elaborating is definitely a must. I’m not quite sure what you’re saying haha.

]]> By: todd sharp http://joshua.remote-app.com/2008/10/13/has-anyone-built-an-api-with-cfcs/comment-page-1/#comment-64 todd sharp Mon, 13 Oct 2008 13:36:00 +0000 http://www.mycfblog.com/index.cfm/2008/10/13/Has-anyone-built-an-API-with-CFCs#comment-64 I've rolled my own before. Here's a quick overview: Have an authentication method. First call to the auth method returns a 'remote session token'. Token is stored in the application scope (in a struct) since a REST style interface is not stateful (can not use session vars unless you keep passing cfid/cftoken back and forth). Each subsequent calls require the remote session token (check for it In your pseudo-constructor - outside of any function calls). It's pretty simple. Does that give you an idea of how to roll it, or do you need more explanation? I’ve rolled my own before. Here’s a quick overview:

Have an authentication method.
First call to the auth method returns a ‘remote session token’.
Token is stored in the application scope (in a struct) since a REST style interface is not stateful (can not use session vars unless you keep passing cfid/cftoken back and forth).
Each subsequent calls require the remote session token
(check for it In your pseudo-constructor – outside of any function calls).

It’s pretty simple. Does that give you an idea of how to roll it, or do you need more explanation?

]]> By: Shannon Hicks http://joshua.remote-app.com/2008/10/13/has-anyone-built-an-api-with-cfcs/comment-page-1/#comment-63 Shannon Hicks Mon, 13 Oct 2008 12:27:00 +0000 http://www.mycfblog.com/index.cfm/2008/10/13/Has-anyone-built-an-API-with-CFCs#comment-63 If you're implementing a public API and need authentication, I suggest OAuth. There's even sample CF code available. http://oauth.net/ If you’re implementing a public API and need authentication, I suggest OAuth. There’s even sample CF code available.

http://oauth.net/

]]>