Re: Restlet MVC

2008-11-21 Thread Thierry Boileau
Hello, there is only one instance of an Application (this principle also applies to instances of Restlet sub classes) whereas instances of the Resource class are generated at runtime. One instance of Resource is in charge to handle one pair of Request/Response. Generally, the constructor of a

Re: Getting the Client address from request

2008-11-21 Thread Tamás Cservenák
Hm, mod_proxy AFAIK does inserts the 'X-Forwarded-For' HTTP Header, and I am using the ClientInfo.getAddress() so, if I understand correctly, that should work correctly, returning always the _true_ client address? Users are reporting that the Application, when fronted with mod_proxy, is

RE: Well HTTPS

2008-11-21 Thread Ben Johnson
Hi I am new to Restlet and web programming, HTTP and SSL certificates in general, but hopefully my recent experiences will help. I spent the last several days trying to find a Restlet example using HTTPS (there isn't one), and eventually pieced together the following (using Windows XP SP2

Re: Getting the Client address from request

2008-11-21 Thread Tamás Cservenák
Sure! Thanks for the tip. That means, that the Application must be aware that it is fronted by mod_proxy? Is there some possibility (or even theoretical chance) to have some kind of fallback mechanism? Will look into restlet sources today... We already have figured out some means to detect

Re: Getting the Client address from request

2008-11-21 Thread Thierry Boileau
Hi Tamas, Oops, I have to complete my previous answer (looks like I forgot something). By default, the ClientInfo.getAddress() is based on this instruction (in HttpClientCall#getLocalAddress): InetAddress.getLocalHost().getHostAddress(). If this instruction fails (host is unknown for example),

Re: removeRepresentations and setAvailable

2008-11-21 Thread Richard Hoberman
Thanks, Thierry. I hadn't considered this from an idempotence point of view, but that makes sense. Regards Richard Thierry Boileau wrote: Hello Richard, after having a look at the HTTP specification (http://www.w3.org/Protocols/rfc2616/rfc2616-sec9.html#sec9.7), a successfull delete

Re: Restlet MVC

2008-11-21 Thread Rob Heittman
This is a purely theoretical observation and not really meant as an answer, but I did want to sort of get it on the record here. The MVC paradigm is a specific separation of concerns architecture which has gained wide conceptual support because it has long been generally considered best practice

Re: Restlet MVC

2008-11-21 Thread Avi Flax
Bravo, Rob! I agree 100%! FYI, the FAQ has an entry on MVC: http://www.restlet.org/documentation/1.1/faq#10 Not sure who wrote the answer, but if you do decide to follow MVC, I think the approach presented in the answer makes a lot of sense. Avi -- Avi Flax » Lead Technologist » Partner » Arc90

Re: Restlet MVC

2008-11-21 Thread Tim Peierls
Maybe the first line of that FAQ answer should be modified to avoid the word implementation, e.g., There is a rough correspondence between the MVC pattern [cite?] and the Restlet framework: --tim On Fri, Nov 21, 2008 at 9:18 AM, Avi Flax [EMAIL PROTECTED] wrote: Bravo, Rob! I agree 100%! FYI,

Re: Well HTTPS

2008-11-21 Thread Bruno Harbulot
Hi, Ben Johnson wrote: Hi I am new to Restlet and web programming, HTTP and SSL certificates in general, but hopefully my recent experiences will help. I spent the last several days trying to find a Restlet example using HTTPS (there isn't one), and eventually pieced together the

how to Redirect...

2008-11-21 Thread Gan123
Hi, Just started exploring restlet and trying to implement a simple employee details info management app. it have two pages, one to create a new employee. second that lists all employees. once the employee is created the resource should be redirected to other resource which will list all

Re: Well HTTPS

2008-11-21 Thread Bruno Harbulot
Hi, I'm not sure you're clear on what certificates, signing and encryption are. Roughly speaking, an X.509 certificate is the combination of a public key and some information (subject distinguished name, date from/to, other attributes) that has been signed using a private key usually

Re: Well HTTPS

2008-11-21 Thread Ben Johnson
Thanks for the feedback Bruno; I'm still learning about certificates and Restlet, and I appreciate your clarifications! Regards Ben -- From: Bruno Harbulot [EMAIL PROTECTED] Sent: Friday, November 21, 2008 2:54 PM To: discuss@restlet.tigris.org

Re: Getting the Client address from request

2008-11-21 Thread John D. Mitchell
On Friday 2008.11.21, at 02:35 , Tamás Cservenák wrote: [...] Thanks for the tip. That means, that the Application must be aware that it is fronted by mod_proxy? Is there some possibility (or even theoretical chance) to have some kind of fallback mechanism? Will look into restlet sources

Re: Restlet MVC

2008-11-21 Thread Avi Flax
On Fri, Nov 21, 2008 at 09:44, Tim Peierls [EMAIL PROTECTED] wrote: Maybe the first line of that FAQ answer should be modified to avoid the word implementation, e.g., There is a rough correspondence between the MVC pattern [cite?] and the Restlet framework: I think we can just change the

Re: Well HTTPS

2008-11-21 Thread John D. Mitchell
For what it's worth... For production use, I've come to the point where I do *NOT* like implementing SSL solutions directly in Java. The extra overhead, hassles, etc. just aren't worth it in general. For example, for both Krugle and MarkMail, we have SSL (ala HTTPS) handled directly by

Usurping Directory

2008-11-21 Thread Cliff Binstock
I would like to modify the standard Directory to return something different than the file when a file is encountered. For example, peruse a directory structure (default behavior), but when you get to the bottom (an actual file), then return a report based on that file, instead of the file itself.

RE: Usurping Directory

2008-11-21 Thread Cliff Binstock
As an upgrade (Restlet request!), looking through the source code it seems that the simplest thing would be if I could insert my own ReferenceList implementation. Perhaps you could have a #setReferenceList option which would take my own (sub-)class. Not only could I change the HREF, but it would

TCP RST attack detected on file upload cut

2008-11-21 Thread Diego Ballve
Hello, I'm observing an odd situation where restlet is involved: pull the net cable during file upload and router (hardware box, not Router.class) detects TCP RST attack and blacklist our server for access from subnet. This is the topology: - office subnet: client application - office router: