«

Hey,

I want to create a RESTful java web service.
I am developping an application for Android and I need a web service
to handle data!
But I have a problem, I want a user to login with a username and
password but how can I do this with
a rest web service? The username and login would be saved in a (mysql)
database!

Can anyone help me?

Thank you,

Wouter

On Tue, 31 Mar 2009, Wouter wrote:

> I want to create a RESTful java web service. I am developping an
> application for Android and I need a web service to handle data! But I
> have a problem, I want a user to login with a username and password but
> how can I do this with a rest web service?

Use HTTP authentication. In particular, HTTP digest authentication. It's
handled in the HTTP layer, so it doesn't impose any requirements on
application flow which would interfere with the RESTfulness of your web
app.

How are you implementing the web app?

If it's with servlets or JSPs, you can do this by configuration, without
having to write any code. You have to put some stuff in your web.xml
saying which URLs you want protected and a bit about how,

Then there's container-specific configuration about how the authentication
should be done - where the list of users is kept, that sort of thing. In
Tomcat, it's done with the server.xml file; see:

http://tomcat.apache.org/tomcat-5.5-...fig/realm.html
http://tomcat.apache.org/tomcat-5.5-...alm-howto.html

> The username and login would be saved in a (mysql) database!

Tomcat can do that - use a JDBCRealm or DataSourceRealm.

tom

--
People don't want nice. People want London. -- Al

Restful web service? Is that like one that's really lazy?

On Mar 31, 2:45*pm, Tom Anderson <t...@urchin.earth.li> wrote:
> On Tue, 31 Mar 2009, Wouter wrote:
> > I want to create a RESTful java web service. I am developping an
> > application for Android and I need a web service to handle data! But I
> > have a problem, I want a user to login with a username and password but
> > how can I do this with a rest web service?
>
> Use HTTP authentication. In particular, HTTP digest authentication. It's
> handled in the HTTP layer, so it doesn't impose any requirements on
> application flow which would interfere with the RESTfulness of your web
> app.
>
> How are you implementing the web app?
>
> If it's with servlets or JSPs, you can do this by configuration, without
> having to write any code. You have to put some stuff in your web.xml
> saying which URLs you want protected and a bit about how,
>
> Then there's container-specific configuration about how the authentication
> should be done - where the list of users is kept, that sort of thing. In
> Tomcat, it's done with the server.xml file; see:
>
> http://tomcat.apache.org/tomcat-5.5-...alm-howto.html
>
> > The username and login would be saved in a (mysql) database!
>
> Tomcat can do that - use a JDBCRealm or DataSourceRealm.
>
> tom
>
> --
> People don't want nice. People want London. -- Al

Thank you for your answer and this very usefull links Tom!
I don't want to have a real website. Just a backend web service for my
android application!
I want to read some xml data (REST objects) and do some posting on the
REST web service.
So I have a login screen at my Android application and i have to make
a HttpUrlConnection to the
web service and how can I check if the filled in username and password
is correct (that they exists in the database?)
How can I make this in my webservice?

Thx

Wouter

On Tue, 31 Mar 2009, Wouter wrote:

> On Mar 31, 2:45*pm, Tom Anderson <t...@urchin.earth.li> wrote:
>> On Tue, 31 Mar 2009, Wouter wrote:
>>> I want to create a RESTful java web service. I am developping an
>>> application for Android and I need a web service to handle data! But I
>>> have a problem, I want a user to login with a username and password but
>>> how can I do this with a rest web service?
>>
>> Use HTTP authentication. In particular, HTTP digest authentication. It's
>> handled in the HTTP layer, so it doesn't impose any requirements on
>> application flow which would interfere with the RESTfulness of your web
>> app.
>>
>> How are you implementing the web app?
>>
>> If it's with servlets or JSPs, you can do this by configuration, without
>> having to write any code. You have to put some stuff in your web.xml
>> saying which URLs you want protected and a bit about how,
>>
>> Then there's container-specific configuration about how the authentication
>> should be done - where the list of users is kept, that sort of thing. In
>> Tomcat, it's done with the server.xml file; see:
>>
>> http://tomcat.apache.org/tomcat-5.5-...alm-howto.html
>>
>>> The username and login would be saved in a (mysql) database!
>>
>> Tomcat can do that - use a JDBCRealm or DataSourceRealm.
>
> Thank you for your answer and this very usefull links Tom! I don't want
> to have a real website. Just a backend web service for my android
> application! I want to read some xml data (REST objects) and do some
> posting on the REST web service. So I have a login screen at my Android
> application and i have to make a HttpUrlConnection to the web service
> and how can I check if the filled in username and password is correct
> (that they exists in the database?) How can I make this in my
> webservice?

As i said. Tell us more about how you're implementing the web service.

tom

--
People don't want nice. People want London. -- Al

Tom Anderson wrote:
> On Tue, 31 Mar 2009, Wouter wrote:
>> I want to create a RESTful java web service. I am developping an
>> application for Android and I need a web service to handle data! But I
>> have a problem, I want a user to login with a username and password
>> but how can I do this with a rest web service?
>
> Use HTTP authentication. In particular, HTTP digest authentication. It's
> handled in the HTTP layer, so it doesn't impose any requirements on
> application flow which would interfere with the RESTfulness of your web
> app.

The only alternative is a custom HTTP header with username/password.

Arne

Frank Cisco wrote:
> Restful web service? Is that like one that's really lazy?

http://en.wikipedia.org/wiki/REST

Arne

On Tue, 31 Mar 2009 04:12:35 -0700 (PDT), Wouter
<> wrote, quoted or indirectly quoted someone who
said :

>I want to create a RESTful java web service

If you are using Applets or Java Web Start to login see
http://mindprod.com/jgloss/authentication.html

If just an ordinary browser, your servlet womb, such as Tomcat,
handles it for you (I don't recognise the term Restful). Your Servlets
can ignore authentication. You set it up in the Tomcat config files in
a fairly straightforward way. Just scan the docs for "login" or
"authentication". There are several types.
--
Roedy Green Canadian Mind Products
http://mindprod.com

"Danish studies of 10,000 birds killed revealed that almost all died in
collisions with buildings, cars and wires; only 10 were killed by windmills.
Alternative energy sources are absolutely necessary.
Global warming will kill birds and bats, as well as other species,
in much greater numbers than wind power."
~ Dr. David Suzuki

Roedy Green wrote:
> On Tue, 31 Mar 2009 04:12:35 -0700 (PDT), Wouter
> <> wrote, quoted or indirectly quoted someone who
> said :
>> I want to create a RESTful java web service
>
> If you are using Applets or Java Web Start to login see
> http://mindprod.com/jgloss/authentication.html

He wrote:

#I am developping an application for Android

> If just an ordinary browser, your servlet womb, such as Tomcat,
> handles it for you (I don't recognise the term Restful).

http://en.wikipedia.org/wiki/REST

Arne

Hi,

"Arne Vajhøj" <> wrote in message
news:49d2bb37$0$90264$...
> Roedy Green wrote:
> > On Tue, 31 Mar 2009 04:12:35 -0700 (PDT), Wouter
> > <> wrote, quoted or indirectly quoted someone who
> > said :
> >> I want to create a RESTful java web service
> >
> > If you are using Applets or Java Web Start to login see
> > http://mindprod.com/jgloss/authentication.html
>
> He wrote:
>
> #I am developping an application for Android

Is there any chance that the OP is using (looking to use) IPsec for a VPN,
or that anyone else here knows something about how this MOBIKE
(http://www.ietf.org/rfc/rfc4555.txt) protocol works?

If so, can you please just confirm that this protocol allows a hand-held
device to receive dynamic IP addresses from its carrier(s) yet still remain
a part of the IPsec configured VPN to a given host(s)?

This has to be the mutt's nuts!

Sorry if it's off-topic but I saw the following this morning and this post
rang a bell: -
http://www.net-security.org/secworld.php?id=7257
>
> > If just an ordinary browser, your servlet womb, such as Tomcat,
> > handles it for you (I don't recognise the term Restful).
>
> http://en.wikipedia.org/wiki/REST
>
> Arne

Cheers Richard Maher