Hi guys, Rae's link basically just describes security on the HTTP level and using some of the role-based security and CFLOGIN in CF. That's fine, but quite often unfortunately your communication partners expect you to support particular technologies and standards in the WS world.
When it comes to advanced WS features in CF 6-8 using the built-in Axis engine the answer is: forget it. Sorry to express it that bluntly, but it just doesn't work. To get things like WS-Security, WS-Transaction, WS-Encryption or other WS-* specs working, you're on your own. I tried to get WSS4J working with the built-in Axis engine but that didn't work. What I've done a few times now was to implement a stand-alone Java server application which I use to marshall and un-marshall incoming and outgoing data and within that server application I applied all the WS-* specs I wanted and needed. CF then communicated with this app via sockets or something similar. Not really nice and not particular well scaling in large systems, but it works for some use cases. There's word on the street that CF 9 would finally contain an update to Axis 2, which might or might not include the option to plug-in different and updated WS-* specs. In reality I'm quite torn about the SOAP/WS movement, for various reasons. REST is not just the flavor of the month in web 2.0 companies it's actually a very good way of doing things. Cheers Kai > http://www.webreference.com/programming/coldfusion/2/4.html > > 2008/12/11 Michal <[EMAIL PROTECTED]> > > I need to gather information about CF and web services. Could anybody > point me to some resources about best practices when implementing web > services in CF? Any lessons learned, gotchas from your own experience > are even better. > I know already a bit about the complex data types and their problems > in SOAP/ WSDL. > I'm also aware about the pros&cons of handcoding XML/SOAP and pushing > it through CFHTTP vs using the CFinvoke and the built-in Apache Axis > engine. Any extra info on these issues would be very useful too. > I'm interested in more advanced WS features support in CF like all the > standards (WS-Security, WS-Transaction, and other WS-*). The security > aspects are also of special interest (including the encryption and > digital certificates). > > Has any body tried publishing REST style web services with JSON as > data format in ColdFusion? It seems to the flavour of the month for > all Web 2.0 companies, but I don't think that CF8 can publish web > services in REST style automatically. > _________________________________________________ Kai Koenig - Ventego Creative Ltd ph: +64 4 476 6781 - mob: +64 21 928 365 / +61 450 132 117 web: http://www.ventego-creative.co.nz blog: http://www.bloginblack.de --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "cfaussie" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/cfaussie?hl=en -~----------~----~----~----~------~----~------~--~---
