sometimes you may want to lock down RESTful APIs or plain HTTP GET resources for authorised access by your own client software only, without requiring authentication. You don’t know who (not authenticated), but you know she may access (is authorised).
If the server has a valid SSL certificate based on a root certificate pre-installed on the …
¶
Posted 14 Juni 2010
† Marcus Rohrmoser
§
sysadmin
‡
°
Also tagged: apache, authentication, authorisation, Basic Authentication, Cram, htaccess, HTTPS, mod_rewrite, rest, RewriteCond, RewriteRule
e.g. when handling RESTful APIs you may want to validate the response XML – a custom one in most cases.
I typically use tools already installed on every Mac and fire a http GET request with curl and immediately check it with xmllint like
$ curl http://www.heise.de/newsticker/heise-atom.xml | xmllint –format –schema myschema.xsd -
But I just don’t …
¶
Posted 21 Mai 2010
† Marcus Rohrmoser
§
Articles in english § development
‡
°
Also tagged: Atom, expat, libxml2, regular expression, RELAX NG, rest, schema, trang, W3C, XML, xmllint