Web2py Restfull API Token authentication

[Stefan van den Eertwegh]

Hi everyone,

If i search on authentication for restfull API web2py i get basic auth as a result in google and google groups.

Does anyone know how to use a token authentication for the Restfull service like db.auth_user.token ...?

Thanks!

[Massimo Di Pierro]

That logic was added and then removed from auth, under the assumption that we would add support for JWT.

This is open for discussion.

[Stefan van den Eertwegh]

Oke. If it works it's oke.

But lets say massimo, i want to communicate with the restful service from web2py from angularJS, i see 2 possible bottlenecks.

I cant use the $resource function because the web2py api is api/product/id/3 and not api/product/3 and there is no way to authenticate with web2py from angularJS using something other than plain text basic_auth.

Am i right?

Greetings,

Stefan

Op woensdag 26 augustus 2015 17:59:51 UTC+2 schreef Massimo Di Pierro:

[Matheus Cardoso]

Stefan,

If I'm not wrong you can do the following with Angular:

.factory('API', ['$resource', function($resource){
    return $resource("api/product/id/:id", {id: '@id'});
}]);

Am I right?

[Stefan van den Eertwegh]

If i am correct, that is for a single call. I want to use the $resource call for several calls like update, delete, get, query et cetera. And if you do not use :id it strips :id but not /id/..

Op woensdag 26 augustus 2015 23:16:59 UTC+2 schreef Matheus Cardoso:

[Matheus Cardoso]

Actually with this declaration, you can do "update, delete, get, query et cetera", because Angular knows what to do in each case. However, you r right about not stripping "/id", hence it would not works with web2py API. But I'll make a long shot guess: considering that you can override controllers url in routes.py, I think that you could do the same with API urls removing "/id".

On Tuesday, August 25, 2015 at 10:37:15 AM UTC-3, Stefan van den Eertwegh wrote:

[Stefan van den Eertwegh]

Do you have an example maybe for the routes.py? And also the basic auth problem is still there.

Op donderdag 27 augustus 2015 23:13:46 UTC+2 schreef Matheus Cardoso:

[Niphlod]

I'm back from holidays, JWT support is on the way to master repo. Stay tuned, also because I have some experience with js frameworks but not with Angular. We may tune the code for JWT to make Angular integration easy. If a slice comes out detailing the integration process wouldn't hurt :-P 

[Dave S]

On Wednesday, September 2, 2015 at 1:15:48 AM UTC-7, Niphlod wrote:

I'm back from holidays, JWT support is on the way to master repo. Stay tuned, also because I have some experience with js frameworks but not with Angular. We may tune the code for JWT to make Angular integration easy. If a slice comes out detailing the integration process wouldn't hurt :-P 

Ah, another expansion of the reading list.   I'm skimming RFC 7515 right now.

/dps

[Niphlod]

code has been handed over and we're discussing on api details on the developers list. Shouldn't take much.