Re: RESTful web service using RPG

I did something similar with a CGI app I had to write that would pass data back to a mobile phone app service we used to build our mobile app. I added code to the RPG app to look at the IP address and I also had the remote developer include a string of characters in the request as a parameter as a guard against a spoofed IP address. It would be nice if there was a layer above the RPG app that could be configured for the security. Like when doing the configuration steps you could specify some kind of access control that would be check at the web server level, maybe using an Apache mod that IBM would provide.

-----Original Message-----
From: WEB400 [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Bradley Stone
Sent: Thursday, November 05, 2015 8:45 AM
To: Web Enabling the IBM i (AS/400 and iSeries) <web400@xxxxxxxxxxxx>
Subject: Re: [WEB400] RESTful web service using RPG

Mike,

You can easily create an IP whitelist for RPG CGI applications and program that into the web service.

You could also require some sort of authentication either at the HTTP header or data level (I've seen both ways).

Creating a web service is no different than creating a dynamic web page in most ways. Read the input, write out the output.

Brad
www.bvstools.com

On Thu, Nov 5, 2015 at 7:12 AM, Mike Cunningham <mike.cunningham@xxxxxxx>
wrote:

I really like this article. It explains the process very clearly. It
looks very easy to deploy an RPG app as a web service without needed
to code anything unusual. Just standard ILE RPG. One thing I have
never seen explained when building these kinds of services is how to
setup access control so everyone in the world does not have access to
run the web service. Is there a way to define access by IP address or
to require a username and password to be provided before the web service can be used?

-----Original Message-----
From: WEB400 [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of
midrange
Sent: Wednesday, November 04, 2015 11:52 PM
To: 'Web Enabling the IBM i (AS/400 and iSeries)'
<web400@xxxxxxxxxxxx>
Subject: Re: [WEB400] WEB400 Digest, Vol 13, Issue 399

IBM has (free) updated 7.1 and 7.2 through the http and java groups
ptfs some neat enhancements to web service on i.
This link to 2nd in series of articles. See also 1st and 3rd.
http://www.ibm.com/developerworks/ibmi/library/i-rest-web-services-ser
ver2/

Example of a simple RPGLE web service.
Btw - need a better subject on this thread..

Jim Franz

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list To post a message email: WEB400@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at http://archive.midrange.com/web400.