Thanks a mil. ~Brad
-----Original Message----- From: Dave Watts [mailto:[EMAIL PROTECTED] Sent: Thursday, April 26, 2007 2:54 PM To: CF-Talk Subject: RE: securing my webservices > That makes sense. That means that all my CFCs which handled > the web service would have to have a cfapplication tag at the > start of them to create the session and client variables for > that request. I always thought that was bad form for a web > service/CFC since they should be fully encapsulated and stand > alone -- only using the data which was passed in to them. In > this case, it seems they would be "reaching out" > of their encapsulated world to grab stuff from session. Or > would I have to pass all of that in to the CFC as part of the > method call. Or have I gone off the deep end of encapsulation? :) In general, for components, encapsulation is good, but yes, you've gone off the deep end. There's nothing wrong with using Application.cfc to control the behavior of web services. > Also, along the lines of accepting cookies. I don't want to assume > that my client is a browser. In the case of a web service, your client is almost certainly not a browser. > What if it is a Java app, or another CF app consuming the web service? > Can they accept cookies? Yes, if they're written to do so. Cookies are simply HTTP request and response headers. Cookie handling will generally not be automatic, though, so the writer of the web service client would be responsible for reading the initial Set-Cookie HTTP response header and writing the Cookie HTTP request header for subsequent requests. Unfortunately, CF doesn't make this especially easy to do with web services (as opposed to generic HTTP requests, where it is in fact easy). You might find this useful: http://tjordahl.blogspot.com/search?updated-max=2006-06-21T15%3A56%3A00- 04%3 A00&max-results=14 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| ColdFusion MX7 by AdobeĀ® Dyncamically transform webcontent into Adobe PDF with new ColdFusion MX7. Free Trial. http://www.adobe.com/products/coldfusion?sdid=RVJV Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:276352 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

