Re: REST plugin and security

2007-12-16 Thread Don Brown
nclude anything with a slash. Well, you can, but it'll have to be created using normal XWork configuration and perhaps a few wildcards. Don > > Martin. > > > > - Original message - > From: "Don Brown" <[EMAIL PROTECTED]> > To: "Stru

Re: REST plugin and security

2007-12-14 Thread Martin Gilday
placeholders. Martin. - Original message - From: "Don Brown" <[EMAIL PROTECTED]> To: "Struts Users Mailing List" Date: Fri, 14 Dec 2007 09:48:03 +1100 Subject: Re: REST plugin and security If you are putting username and password in the soap heade

Re: REST plugin and security

2007-12-13 Thread Don Brown
If you are putting username and password in the soap headers, why not just use basic authentication for your REST services, which basically does the same thing? If over the wire security is a problem, use HTTPS. Don On Dec 14, 2007 1:44 AM, Martin Gilday <[EMAIL PROTECTED]> wrote: > Hi, > We are

REST plugin and security

2007-12-13 Thread Martin Gilday
Hi, We are interested in using the REST plugin to extend customer choice and complement our WS-* services. We are particularly interested in the multiple response types (.xml, .json etc). One thing I am not sure of is how we handle security. Say we have an order (/order/1234.xml), how can we pro