0

RESTful PUT AND DELETE and firewalls

 2 years ago
source link: https://www.codesd.com/item/restful-put-and-delete-and-firewalls.html
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.

RESTful PUT AND DELETE and firewalls

advertisements

In the classic "RESTful Web Services" book (O'Reilly, ISBN 978-0-596-52926-0) it says on page 251 "Some firewalls block HTTP PUT and DELETE but not POST."

Is this still true?

If it's true I have to allow overloaded POST to substitute for DELETE.


Firewalls blocking HTTP PUT/DELETE are typically blocking incoming connections (to servers behind the firewall). Assuming you have controls over the firewall protecting your application, you shouldn't need to worry about it.

Also, firewalls can only block PUT/DELETE if they are performing deep inspection on the network traffic. Encryption will prevent firewalls from analyzing the URL, so if you're using HTTPS (you are protecting your data with SSL, right?) clients accessing your web service will be able to use any of the standard four HTTP verbs.

Related Articles

REST: PUT and how to manage a partial entity

I've read all about idem potency of PUT and not to use it for partial updates. My question now is how to handle such situations. Assume my service gets a PUT request for Resource A. A has 5 properties. What do I do if the request only contains 4 of t

Which calls REST PUT / POST / DELETE must return by a convention?

According to the "REST ideology" what should be in the response body for a PUT/POST/DELETE requests? What about return codes? Is HTTP_OK enough? What is the reason for such conventions, if any? I've found a good post describing POST/PUT differen

Which browser fully supports REST. Method Get, Post, PUT and DELETE?

Which browser support REST completely? Means Get,Post,PUT and DELETE method? I understood the rails way to understand PUT and DELETE is "_method" hidden variable like <form id="form_id" action="" method="PUT" >

why need to put and delete in RESTful) web service?

can i call a web service like this and not use put and delete method? is this a REST web service really? .... $url = 'webservice.php'; $data = array( 'username' => 'a', 'password' => 'a', 'param1'=> 'param1', 'operation'=> 'delete', 'output'=&

Restrict the default CRUD operations of Django-Rest-Framework for only GET and restrict POST, PUT and DELETE

I am using Django-Rest-Framework. While following along the tutorial I was able to make CRUD APIs by defining a ModelResource. Now, I want to limit access by providing APIs for just GET and not provide access for POST, PUT or DELETE. I tried allowed_

PUT and DELETE getting 404 in the WCF REST .net 4 service when running in IIS 6.0

I've added the wildcard application mapping for c:\windows\microsoft.net\framework\v4.0.30319\aspnet_isapi.dll and unchecked the "verify that file exist" checkbox. This gives me GET and POST ability but not PUT and DELETE. I have both prohibited

How to run HTTP PUT and DELETE in Silverlight 4

I would prefer to avoid getting into a debate about whether HTTP verbs PUT and DELETE are appropriate or obsolete and focus on the question of actually making Silverlight work when "forced" to use these verbs. I am trying to create a Silverlight

Are there any benefits to the PUT and DELETE performance of HTTP methods?

Most of the Web servers and frameworks support by default GET and POST HTTP methods and do not promote or even disallow usage of PUT and DELETE methods. I know using the latter is conceptually more appropriate and e.g. minimizes the URL scheme of the

How can I route POST, PUT and GET to a different business logic on the Django-REST framework?

I have started working on django-rest framework.... I selected this framework because I wanted to integrate the same api's with a mobile application(android). I had done this before with nodeJs(Express) , I used to write GET,POST,PUT and DELETE reque

rests api with the aid of the mongoose and node.js on the publication, the putting and the suppression

so i'm reviewing and practicing making rest api with node mongoose and express. I'm having problem making the post part of the api as I'm getting an error that I'm not sure how to fix. I'm kinda sure how to do the put and delete part. But if someone

Enabling the PUT and DELETE Query in the Web Service

I have a webservice that accepts bot GET and POST but when i call the webmethod using PUT or DELETE i get a response as 404.0 file not found [WebService(Namespace = "http://tempuri.org/")] [WebServiceBinding(ConformsTo = WsiProfiles.BasicProfile

Does JJAuer AJAX work in modern browsers with PUT and DELETE?

The jQuery AJAX call has a type parameter that allows to specify the method for an async call (GET/POST/PUT/DELETE); documentation states that: The type of request to make ("POST" or "GET"), default is "GET". Note: Other HTTP

When and how to use the POST, PUT, and Delete method in the Web API

I am new to Web API and the tutorial I was watching uses Fiddler to sniff and send request. My question is how to use the post, put and delete methods without using fiddler and where are these usually used in the when creating in software development

what is the advantage of using put and delete as opposed to just getting and posting

Especially for the majority of browsers that don't support it, is there anything aside from just strict standards compliance that justifies the extra development time?If you develop your web application only for browser, you should go with post and g

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK