Thanks a mil.  

~Brad

-----Original Message-----
From: Dave Watts [mailto:[EMAIL PROTECTED] 
Sent: Thursday, April 26, 2007 2:54 PM
To: CF-Talk
Subject: RE: securing my webservices

> That makes sense.  That means that all my CFCs which handled 
> the web service would have to have a cfapplication tag at the 
> start of them to create the session and client variables for 
> that request.  I always thought that was bad form for a web 
> service/CFC since they should be fully encapsulated and stand 
> alone -- only using the data which was passed in to them.  In 
> this case, it seems they would be "reaching out"
> of their encapsulated world to grab stuff from session.  Or 
> would I have to pass all of that in to the CFC as part of the 
> method call.  Or have I gone off the deep end of encapsulation?  :)

In general, for components, encapsulation is good, but yes, you've gone
off
the deep end. There's nothing wrong with using Application.cfc to
control
the behavior of web services.

> Also, along the lines of accepting cookies. I don't want to assume
> that my client is a browser. 

In the case of a web service, your client is almost certainly not a
browser.


> What if it is a Java app, or another CF app consuming the web service?

> Can they accept cookies?

Yes, if they're written to do so. Cookies are simply HTTP request and
response headers. Cookie handling will generally not be automatic,
though,
so the writer of the web service client would be responsible for reading
the
initial Set-Cookie HTTP response header and writing the Cookie HTTP
request
header for subsequent requests.

Unfortunately, CF doesn't make this especially easy to do with web
services
(as opposed to generic HTTP requests, where it is in fact easy). You
might
find this useful:

http://tjordahl.blogspot.com/search?updated-max=2006-06-21T15%3A56%3A00-
04%3
A00&max-results=14

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
ColdFusion MX7 by AdobeĀ®
Dyncamically transform webcontent into Adobe PDF with new ColdFusion MX7. 
Free Trial. http://www.adobe.com/products/coldfusion?sdid=RVJV

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:276352
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

Reply via email to