To start, read this:

http://help.adobe.com/en_US/ColdFusion/9.0/Developing/WSc3ff6d0ea77859461172e0811cbec22c24-78b7.html

That gives you the basics of CF's inbuilt webservice support.

Next, if you want to secure the services with a username/password, you can
either make the username and password arguments of each method call or you
can add a security layer like WS-Security to the web service. Either way,
use SSL to keep things as secure as possible.

If you do want to add WS-Security, WSS4CF (http://wss4cf.riaforge.org/) can
help; it provides a way to check a digest password sent by your clients.
Eventually I'll add support for taking in a whole WS-Security header and
validating it by checking the TTL, storing the nonce during the TTL etc.

--
WSS4CF - WS-Security framework for CF
http://wss4cf.riaforge.org/


On 21 June 2010 22:33, Glyn Jackson <glyn.jack...@newebia.co.uk> wrote:

>
> Looking for some advice on which method is best for the following
> scenario...
>
> My clients 99% .NET guys. Myself about 50% now. I have been asked to maybe
> create a new web service in ColdFusion that allows other members of our team
> and our clients (none CF'ers) to integrate using .NET or any another
> language they feel fit. they don't have access to our servers so everything
> will be over HTTP(S) protocol. The service needs to allow them to do basic
> CRUD ON our own CF CMS and access our exchange calender currently done via
> CF also. again they are not on the same server or even in the same part of
> the world sometimes. as we have a lot invested in CF the webservice needs to
> be in CF
>
> So I want to know the best way forward in terms of a webservice, basic html
> posts?
> how would you open this up?
> what about security? how do I restrict others from acccess this as it needs
> to be open over https?
>
>


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:334682
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Reply via email to