[Koha-devel] RFC: /svc/ API

[Julian Maurice]

I was thinking about how to transmit user credentials from the 
third-party application to Koha.
Something using private/public keys like Amazon AWS seems the way to go.

Example: 
http://www.thebuzzmedia.com/designing-a-secure-rest-api-without-oauth-authentication/

Le 31/07/2014 02:09, David Cook a écrit :
> Awesome. Thanks, Julian!
>
> As for authentication, I think adding a call to C4::Auth:: check_api_auth()
> in rest.pl should probably do the trick.
>
> David Cook
> Systems Librarian
> Prosentient Systems
> 72/330 Wattle St, Ultimo, NSW 2007
>
>> -----Original Message-----
>> From: koha-devel-bounces at lists.koha-community.org [mailto:koha-devel-
>> bounces at lists.koha-community.org] On Behalf Of Julian Maurice
>> Sent: Wednesday, 30 July 2014 6:42 PM
>> To: koha-devel at lists.koha-community.org
>> Subject: Re: [Koha-devel] RFC: /svc/ API
>>
>> We at BibLibre wrote koha-restful as a third-party application to be able
> to
>> extend it quickly.
>> Now that things are more stable (the last commit was written a month ago),
> I
>> would be happy to submit a patch to integrate koha-restful into Koha.
>> But IMO it lacks a decent identification/authentication system before it
> could
>> be integrated. So if someone is interested to work on that, he is welcome
> :)
>>
>> Le 24/07/2014 02:30, Tomas Cohen Arazi a écrit :
>>> We should do as we usually do: set a new context for URIs (/rest/ ?)
>>> and implement a RESTfull API there, following all the standards, and
>>> versioned from the beggining.
>>>
>>> We could use CGI::Application::Dispatch, merge koha-restfull and work
>>> on top of that (it should be discussed whether we agree on the current
>>> API or not), or even do it with a framework, like Dancer [1].
>>>
>>> And then have a clear deprecation path for the old API.
>>>
>>> Would be happy to work on that if more people were interested.
>>>
>>> [1] http://irc.koha-community.org/koha/2014-07-18#i_1538096
>>>
>>>
>>>
>>> On Wed, Jul 23, 2014 at 9:21 PM, David Cook <dcook at prosentient.com.au>
>>> wrote:
>>>
>>>> Ah, right you are, Galen. It does use a socket. Yeah, that should be
>>>> trivial to update connexion_import_daemon.pl.
>>>>
>>>> None of our folks use OCLC, but that's good to know.
>>>>
>>>> Going back to my earlier email, MarcEdit would probably benefit from
>>>> a richer Koha API as well.
>>>>
>>>> David Cook
>>>> Systems Librarian
>>>> Prosentient Systems
>>>> 72/330 Wattle St, Ultimo, NSW 2007
>>>>
>>>> -----Original Message-----
>>>> From: Galen Charlton [mailto:gmc at esilibrary.com]
>>>> Sent: Thursday, 24 July 2014 1:22 AM
>>>> To: David Cook
>>>> Cc: koha-devel at lists.koha-community.org
>>>> Subject: Re: [Koha-devel] RFC: /svc/ API
>>>>
>>>> Hi,
>>>>
>>>> On Tue, Jul 22, 2014 at 5:11 PM, David Cook
>>>> <dcook at prosentient.com.au>
>>>> wrote:
>>>>> +1 to a versioned API. I don't think that I use it for anything at
>>>>> +the
>>>>> moment, but I'm not 100% sure about all our apps. I think we might
>>>>> have a third-party one that uses it.
>>>>
>>>> Also +1 to a versioned API.
>>>>
>>>>> This script should probably also use PUT, but I have no idea if OCLC
>>>>> Connexion supports that.
>>>>
>>>> I don't believe it matters as far as Connexion is concerned, as it
>>>> only talks to connexion_import_daemon.pl via a raw socket.
>>>>
>>>>> Since there are an indeterminate number of third-party software
>>>>> systems using the existing API, I'd recommend versioning and using
>>>>> v2 to handle things more RESTfully.
>>>>
>>>> MarcEdit is one program I know that uses the current API to inject
>>>> records into a Koha database.
>>>>
>>>> Regards,
>>>>
>>>> Galen
>>>> --
>>>> Galen Charlton
>>>> Manager of Implementation
>>>> Equinox Software, Inc. / The Open Source Experts
>>>> email:  gmc at esilibrary.com
>>>> direct: +1 770-709-5581
>>>> cell:   +1 404-984-4366
>>>> skype:  gmcharlt
>>>> web:    http://www.esilibrary.com/
>>>> Supporting Koha and Evergreen: http://koha-community.org &
>>>> http://evergreen-ils.org
>>>>
>>>>
>>>> _______________________________________________
>>>> Koha-devel mailing list
>>>> Koha-devel at lists.koha-community.org
>>>> http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
>>>> website : http://www.koha-community.org/ git :
>>>> http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
>>>>
>>>
>>>
>>>
>>>
>>>
>>> _______________________________________________
>>> Koha-devel mailing list
>>> Koha-devel at lists.koha-community.org
>>> http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
>>> website : http://www.koha-community.org/
>>> git : http://git.koha-community.org/
>>> bugs : http://bugs.koha-community.org/
>>>
>>
>>
>> --
>> Julian Maurice <julian.maurice at biblibre.com>
>> BibLibre
>> _______________________________________________
>> Koha-devel mailing list
>> Koha-devel at lists.koha-community.org
>> http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
>> website : http://www.koha-community.org/
>> git : http://git.koha-community.org/
>> bugs : http://bugs.koha-community.org/
>
>


-- 
Julian Maurice <julian.maurice at biblibre.com>
BibLibre