Re: Web service HTTP Basic Authentication - where to start from?

Just a bunch of reasons:
1) this project runs inside a VPN as long as the future ones, so no need
for https so far
2) a single running program like this may be scheduled to start/stop at
specific times
3) such a program may be easily debugged even by those who don't write full
free RPG programs yet
4) the analysis of this project is a work in progress with the client,
meaning routes and routes' parameters are still changing (with IWS this
means the whole configuration must be set from scratch every time such a
change takes place)
5) RPGAPI routes are much more similar to those in use among web developers
6) as arrays of arrays are implemented in many responses, writing JSON
responses is needed in any case

In this first development stage, I follow both the Vue front-end and the
RPG back-end, and I am trying to code RPG service programs for them to work
when called both via IWS and via RPGAPI server to keep future paths open:
when the whole procedure will reach a good level of consistency, I will
consider how to enhance some developing aspects. The decisions I make are
not perfect, I know it, but I need to balance both the complexity that
comes from the client's requirements, which imply more innovative
solutions, and the current state of the art of ICT people and environment
in general.

Hope this answers your question.



Il giorno lun 4 mag 2020 alle ore 13:30 Jay Vaughn <
jeffersonvaughn@xxxxxxxxx> ha scritto:

You are welcome Maria.

Rpgapi doesn’t interface with any http/https you have already configured
on your system right?
Such as configured on Apache or IWS.

I just don’t see the point of coupling webservice programming code with
http server config.

From my understanding if you use RPGApi you will be 1) writing response
code to pull data to respond to the request 2) at the same time tasked with
specifying http parameters to route the response back off the platform.
I think a more organized approach is for http config to be implemented
once and provide framework in which your webservice programs function
within.

Why not implement a framework that deploys http/https infrastructure once
and then allow developers to focus only on writing the backend code to
produce the response from the DB for the request?


Jay

On May 4, 2020, at 2:35 AM, Maria Lucia Stoppa <mlstoppa@xxxxxxxxx>

wrote:

@Jay
Thank you for suggesting a new product. I appreciate it and I will take

it

into account as I have already seen the introductory video.
Nonetheless, as I have been working with IBM middle systems since 1985

and

I think I know these systems and the whole ecosystem pretty well, for

this

specific project and all its constraints, a router as simple as RPGAPI

will

do the job.

Il giorno sab 2 mag 2020 alle ore 02:55 Jay Vaughn <
jeffersonvaughn@xxxxxxxxx> ha scritto:

I’m familiar with that RPGapi project. It’s bare bones, no ssl/cert and
does the same thing a free ibm IWS or Apache server does... for free,

with

continued support and improvements from IBM... I’d recommend against the
RPGapi...

Jay

On Apr 28, 2020, at 5:08 AM, Maria Lucia Stoppa <mlstoppa@xxxxxxxxx>

wrote:

Hi Patrik,

So far, I already have a few REST APIs answering via an IWS web service

and

it works fine, the Vue front-end makes the calls and consumes the

responses.

I need to add a security layer, meaning instead of the front-end

directly

making the calls, a server in the middle will receive the front-end
requests and forward them to the web service using an existing IBM i

user

profile. I guess, basic authentication is needed for this connection
to successfully happen.

Back to your question: firstly, I think I'll explore how Web Server

Process

itself takes care of this. From the middle server perspective it should
consist in some headers attributes properly set. From the Web Server
process, I don't know where to start from. I am groping in the dark.

Later on, I'll explore the second option you mentioned, which is my

case

I

assume will be some IBM i APIs, because I have just found an article (

https://www.linkedin.com/pulse/announcing-rpgapi-daniel-long/?trackingId=0Q2XJyfCjDcI7AtXZVbl7w%3D%3D

)

describing how to set up an RPG server listening for REST APIs'

requests,

which works without the middle IWS layer (no Java conversion in

between).

What do you think about it?

Il giorno mar 28 apr 2020 alle ore 10:17 Patrik Schindler <

poc@xxxxxxxxxx>

ha scritto:

Hello Maria,

Am 28.04.2020 um 07:58 schrieb Maria Lucia Stoppa <

mlstoppa@xxxxxxxxx

:

I know very little about basic authentication: I know REST API must

be

called with login information set in the headers, but I can't figure

out

how to configure the web service HTTP instance to accept it and, most

of

all, how these information will be checked against user profile

security

on

IBM i.

Basic-Auth is done by the Web Server Process(es) itself, while some

AUTH

in some API is handled by the API. Which of these two do you want to

have?

I would like to know a bit more on the subject before paying for a

course.

Regarding REST and http, there's plenty of information out there in

the

network. I'd start with Wikipedia (preferred: English, the
computing-centric articles are often of vrey good quality) and follow

Links

in there to learn more.

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE - https://www.pocnet.net/poc-key.asc


--
This is the RPG programming on IBM i (RPG400-L) mailing list
To post a message email: RPG400-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription

related

questions.

Help support midrange.com by shopping at amazon.com with our

affiliate

link: https://amazon.midrange.com

--

Maria Lucia Stoppa
mlstoppa@xxxxxxxxx
--
This is the RPG programming on IBM i (RPG400-L) mailing list
To post a message email: RPG400-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription

related questions.

Help support midrange.com by shopping at amazon.com with our affiliate

link: https://amazon.midrange.com
--
This is the RPG programming on IBM i (RPG400-L) mailing list
To post a message email: RPG400-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription

related

questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--

Maria Lucia Stoppa
mlstoppa@xxxxxxxxx
--
This is the RPG programming on IBM i (RPG400-L) mailing list
To post a message email: RPG400-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription

related questions.

Help support midrange.com by shopping at amazon.com with our affiliate

link: https://amazon.midrange.com
--
This is the RPG programming on IBM i (RPG400-L) mailing list
To post a message email: RPG400-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com