Groups > comp.lang.java.programmer > #35507

Re: Web services/SOA - The right way

From	Arne Vajhøj <arne@vajhoej.dk>
Newsgroups	comp.lang.java.programmer
Subject	Re: Web services/SOA - The right way
Date	2016-08-30 20:47 -0400
Organization	Aioe.org NNTP Server
Message-ID	<nq59fa$1r9j$1@gioia.aioe.org> (permalink)
References	(7 earlier) <npmkdf$1618$1@gioia.aioe.org> <npo211$1m4c$1@gioia.aioe.org> <npqkhc$1v9a$1@gioia.aioe.org> <npqlr8$13f$1@gioia.aioe.org> <nq08dv$e3n$1@dont-email.me>

Show all headers | View raw

On 8/28/2016 10:59 PM, Stanimir Stamenkov wrote:
> Fri, 26 Aug 2016 20:11:21 -0400, Arne Vajhøj:
>> Fielding's original paper that defined REST section 5.1.3 state:
>>
>> <quote>
>> each request from client to server must contain all of the information
>> necessary to understand the request, and cannot take advantage of any
>> stored context on the server. Session state is therefore kept entirely
>> on the client.
>> </quote>
>
> The relevant resource content/state is certainly always available when
> processing a request.
>
> Resolving authentication information (f.e. from access token provided
> via header) and making that available for processing a request (f.e. to
> ensure authorization) requires another server state, which might not be
> considered part of the REST, but is almost always there and as such some
> kind of session management is present,

Completely stateless if difficult in practice.

The RESTful client send a token as HTTP header, the RESTFul service
checks that token with somebody else.

That somebody else does not necessarily use any in memory state to
validate token.

But probably in 99.9% of cases, then it does have an in memory cache.

And if that is the case then the difference with having container
managed security check based on a session cookie also in an HTTP header
is close to zero.

But it is still not the same as using the session object to store
service related data.

>                                             though not in the sense of
> WS-Transaction (mentioned previously). Managing some kind of transaction
> would be done by maintaining (possibly internal) resource state – that
> is stored on the server. So I think people may read this too literally.

I would still think that this transaction context in a pure RESTful
setup would exist client side and not server side.

Arne

Thread

Web services/SOA  - The right way Alberto Salvati <zzzato@gmail.com> - 2016-08-14 03:04 -0700
  Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-08-14 08:14 -0400
    Re: Web services/SOA - The right way Nigel Wade <nmw@local.domain> - 2016-08-15 17:07 +0100
      Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-08-15 14:49 -0400
  Re: Web services/SOA - The right way Nigel Wade <nmw@local.domain> - 2016-08-15 14:00 +0100
  Re: Web services/SOA  - The right way Eric Douglas <e.d.programmer@gmail.com> - 2016-08-15 06:26 -0700
    Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-08-15 14:56 -0400
  Re: Web services/SOA  - The right way Alberto Salvati <zzzato@gmail.com> - 2016-08-16 02:48 -0700
    Re: Web services/SOA  - The right way Eric Douglas <e.d.programmer@gmail.com> - 2016-08-16 06:36 -0700
      Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-08-16 17:06 -0400
        Re: Web services/SOA - The right way Eric Douglas <e.d.programmer@gmail.com> - 2016-08-17 05:02 -0700
          Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-08-17 19:30 -0400
    Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-08-16 16:26 -0400
      Re: Web services/SOA - The right way Lew <lewbloch@gmail.com> - 2016-08-18 15:18 -0700
        Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-08-18 19:19 -0400
          Re: Web services/SOA - The right way Lew <lewbloch@gmail.com> - 2016-08-19 10:39 -0700
            Re: Web services/SOA - The right way Eric Douglas <e.d.programmer@gmail.com> - 2016-08-19 10:48 -0700
              Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-08-19 20:16 -0400
    Re: Web services/SOA - The right way Nigel Wade <nmw@local.domain> - 2016-08-17 10:11 +0100
  Re: Web services/SOA  - The right way Alberto Salvati <zzzato@gmail.com> - 2016-08-22 00:01 -0700
    Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-08-22 12:05 -0400
      Re: Web services/SOA - The right way Alberto Salvati <zzzato@gmail.com> - 2016-08-23 02:17 -0700
        Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-08-23 19:20 -0400
      Re: Web services/SOA - The right way Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2016-08-24 06:24 +0800
        Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-08-23 19:17 -0400
          Re: Web services/SOA - The right way Alberto Salvati <zzzato@gmail.com> - 2016-08-24 00:15 -0700
          Re: Web services/SOA - The right way Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2016-08-24 19:47 +0800
            Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-08-24 20:23 -0400
              Re: Web services/SOA - The right way Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2016-08-25 19:22 +0800
                Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-08-25 20:20 -0400
                Re: Web services/SOA - The right way Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2016-08-27 07:49 +0800
                Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-08-26 20:11 -0400
                Re: Web services/SOA - The right way Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2016-08-29 10:15 +0800
                Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-08-30 20:39 -0400
                Re: Web services/SOA - The right way Lew <lewbloch@gmail.com> - 2016-08-30 22:27 -0700
                Re: Web services/SOA - The right way Stanimir Stamenkov <s7an10@netscape.net> - 2016-08-29 05:59 +0300
                Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-08-30 20:47 -0400
                Re: Web services/SOA - The right way Stanimir Stamenkov <s7an10@netscape.net> - 2016-08-31 16:23 +0300
                Re: Web services/SOA - The right way Arne Vajhøj <arne@vajhoej.dk> - 2016-09-06 21:06 -0400
                Re: Web services/SOA - The right way Lew <lewbloch@gmail.com> - 2016-08-30 22:27 -0700
                Re: Web services/SOA - The right way Jerry Stuckle <jstucklex@attglobal.net> - 2016-08-31 10:00 -0400

csiph-web