Hi Ben, If at all possible it is a good idea to avoid requiring the user to enter their Google Account username and password into your site or another person's application. Injecting yourself as a middleman capable of stealing a user's password generally does not inspire a lot of trust and there are often ways to avoid needing their password. Your application could issue a user an API token which could be used in requests, this would be along the lines of OAuth (http://oauth.net/) or AuthSub ( http://code.google.com/apis/accounts/docs/AuthSub.html).
Alternately, the built in accounts API looks for a browser cookie to determine who the current user is. If you included this cookie as an HTTP header in the requests to the webserver, the users API would be able to identify the user making the request. How do you envision that the third party client applications will make these web service requests? Will they be other websites, desktop client applications? Thank you, Jeff On Fri, Jun 5, 2009 at 11:16 AM, mscwd01 <[email protected]> wrote: > > I have implemented a RESTful web service using Restlet: > > http://blog.noelios.com/2009/04/11/restlet-in-the-cloud-with-google-app-engine/ > > It was fairly straightforward to set up. > > Regarding your question about the client needing to specify the google > account credentials - this is a question i'd like the answer to. > > Hope that helps. > > On Jun 5, 5:08 pm, [email protected] wrote: > > I am seeing a lot of variations on this question where i think some other > > > people are getting stuck on this. I'm sorry my SOA expertise comes from > the > > world of .net that i've painfully extracted myself from. I know i'm > missing > > some basic info on SOA and Java - If anyone can help point me in the > right > > direction you'll save my weekend of research. > > > > I have my stockwatcher tutorial humming along and using the GWT and App > > Engine to use the user service and store lists of stocks based on the > > user's google account. For my example i want to add a web service to the > > > project so someone out in Timbukto can have a WSDL and call a function in > > > the stockwatcher app to - say - add /remove stocks from their list using > > > another UI. If this was .net, i'd add a .asmx file with a code behind > that > > did the work. and they would consume the url > http://myapp.appspot.com/service.asmx > > > > The client would need to provide google account credentials to the > service > > (right?) so they can work with the data object they entered using the > > normal GWT based web page running on appspot.com (ie their list of > stocks) > > Any help in going about added a web service to the stockwatcher example > and > > exposing some of the methods would be greatly appreciated. I'm deep into > > > REST and RPC but fear i'm on the wrong track. > > > > - Ben > > > --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en -~----------~----~----~----~------~----~------~--~---
