Framework-supported programmatic authentication?

[Konstantin]

Hi,

I just joined the group. I am primarily a researcher/educator and am
in the process of using Restfulie in some RMM level 3 demos. I am
happy about the recent progress on the documentation end.

I am not a .NET expert but understand that there is usually container-
based authentication (MembershipProvider). But there are situations
where programmatic authentication is preferable because it might or
might not be required depending on resource state, and the source of
authentication information is usually the resources as well. Here is a
brief example in Scala/Unfiltered. The goal is to expose a user domain
object and require authentication with the credentials stored in the
object but only if the object exists; that is, if /name does not
exist, the result should be a straight 404 instead of a 401.

case r @ GET(Path(Seg(name :: Nil))) => {
userRepository.findByName(name) match {
case Some(user) => r match {
case BasicAuth(u, p) if verify(u, p, user) =>
Ok ~> ResponseString(user.toString)
case _ => Unauthorized ~> WWWAuthenticate("""Basic
realm="/""" + name + "\"")
}
case _ => NotFound
}
}

Thanks for any help you can provide.

Konstantin

[Mauricio Aniche]

Hi Konstantin,

Sorry for the slow reply.

Restfulie.NET currently does not support Unauthorized result. However,
implementing it is a piece of cake. You can found some results
implementation here:
https://github.com/mauricioaniche/restfulie.net/tree/master/Restfulie.Server/Results

If you want us to implement, just let me know what you need for this
result and I do it for you!

Regards,
Mauricio

[Konstantin Läufer]

Muito obrigado, Mauricio. 

This was going to be an example for the class I am teaching, so it is not in any critical path. So please do not go out of your way to work on this feature. I will at some point check out your work on results. Part of my problem might be that I am using Mono, which might not support container-based authentication properly either.

For now, I will stick mostly with Scala + Unfiltered for my class.

Thanks again!

Konstantin

[Guilherme Silveira]

Hi Konstantin,

If you are using Scala through Unfiltered for the server side, you
might want to take a look at VRaptor using Scala:
http://vraptor.caelum.com.br/documentation/scala/

The example is pretty simple but it supports everything that Restfulie
java supports (it is the same code base). There is also a mydvds
application written in scala to showcase its usage.

Regards

Guilherme Silveira
Caelum | Ensino e Inovação
http://www.caelum.com.br/

[Konstantin Läufer]

Hi Guilherme,

Thanks for the suggestion. The first thing that comes to mind that we should probably add a row for VRaptor to implementing-rest indicating support for Java and Scala. Do you agree? If you're busy, I can do that and create a stub page. Perhaps you can later fill in the details on the features such as content negotiation etc.

Regarding VRaptor's Scala support, I am confident that it is mature and effective. But my needs are more teaching-focused, and I really like the way Unfiltered takes advantage of functional language features such as pattern matching (request extractors) and higher-order functions (response combinators).

Regards,

--
Konstantin Läufer
http://laufer.cs.luc.edu/contact

[Guilherme Silveira]

> Do you agree? If you're busy, I can do that and create a
> stub page. Perhaps you can later fill in the details on the features such as
> content negotiation etc.

Yep. That would be perfect! You can get the vraptor doc stub fromthe
project itself (there is a vraptor-site project within it)

> Regarding VRaptor's Scala support, I am confident that it is mature and
> effective. But my needs are more teaching-focused, and I really like the way
> Unfiltered takes advantage of functional language features such as pattern
> matching (request extractors) and higher-order functions (response
> combinators).

Yep... while in the OO vraptor support we use polimorphism through
interfaces (request extractors) and interceptor composition (response
combinators). Makes total sense... I really like how functions can be
easily combined to compose behavior.. it requires all of them having
adapting interfaces, of course (i.e. all with the same input/output,
or matching ones)

Regards

Guilherme Silveira
Caelum | Ensino e Inovação
http://www.caelum.com.br/

[Konstantin Läufer]

OK, great, I added the row and a stub page based on the one-minute guide.

http://code.google.com/p/implementing-rest/wiki/VRaptor

Could you please help with RMM, conneg, conditional, and cache? RMM is obviously at least 2, but I could not find anything in the VRaptor documentation on relations or links the way Restfulie handles them.

Regards,

Konstantin

[Guilherme Silveira]

Hi Konstantin!

I just found the basic example, its in the restfulie docs (wiki):
https://github.com/caelum/restfulie-java/wiki/java_one_minute

What do you think?

Regards

Guilherme Silveira
Caelum | Ensino e Inovação
http://www.caelum.com.br/

[Konstantin Läufer]

It definitely looks like it is at the right level of abstraction! I will take a closer look at some point.

Best regards,

Konstantin