rest - Issues calling RESTful Glassfish Java web service with jQuery ajax -

-

xss/cors allowed apache web server , can make calls using query string parameters.

the restful service i'm told uses oauth.

the call restful web service trivial fiddler via composer , returns valid json data. set 1 authorization header requests totally different when sent in fiddler composer versus setting header in ajax.

i've tried , without accept , access-control-allow-origin headers.

this request header fiddler after executing request in composer.

get {/trailing server url} http/1.1 cookies / login     authorization: bearer xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx transport     host: {server url}

and ajax request

$(function () {     var token = "bearer xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx";      $.ajax({         url: url,         datatype: "json",         headers: {             "access-control-allow-origin": "*", accept: "application/json", authorization: token         }         //,         //beforesend: function (jqxhr) {         //jqxhr.setrequestheader("access-control-allow-origin", "*");         //jqxhr.setrequestheader("accept", "application/json");         //jqxhr.setrequestheader("authorization", token);         //}     })         .success(function (data) {             console.log("success");         })         .fail(function (jqxhr, textstatus, error) {             console.log("error - textstatus = " + textstatus + " , error = " + error);         }); });

this http request headers captured via fiddler ajax browser request

options {trailing server url} http/1.1 client     accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8     accept-encoding: gzip, deflate     accept-language: en-us,en;q=0.5     user-agent: mozilla/5.0 (windows nt 6.1; wow64; rv:20.0) gecko/20100101 firefox/20.0 cookies / login     dnt: 1 miscellaneous     access-control-request-headers: access-control-allow-origin,authorization     access-control-request-method:     origin: {local machine url} transport     connection: keep-alive     host: {server url}

why ajax request header display 'options' instead of 'get' fiddler composer header?

why fiddler composer header show authorization: bearer xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx value under cookies / login section?

i'm hearing shouldn't keeping token in javascript code because can viewed in browser (in reality, token not hard coded passed variable). how else pass token , keep secure?


Comments

Post a Comment

Popular posts from this blog

java - Jmockit String final length method mocking Issue -

-
using jmockit 1.2 jar, trying mock string's length method getting unexpected invocation exception: failed: test java.lang.illegalstateexception: missing invocation mocked type @ point; please make sure such invocations appear after declaration of suitable mock field or parameter @ stringdemo.testa$1.<init>(testa.java:17) @ stringdemo.testa.test(testa.java:13) i using testng: @test public void test() throws exception { new expectations() { @mocked("length") string astring; { astring.length(); result = 2; } }; system.out.println(a.showa("test")); } } actual class a: public class { public static int showa(string str){ int a= str.length(); return a; } } this wrong way of recording expected results. shouldn't mock , record string's length() method, record showa() instead. here solution @suppresswarnings("unused...
Read more

What is the difference between data design and data model(ERD) -

-
i have google question , find answer in day. know, data design many many table have list column,and mark pk , fk. why er-diagram have find this? data design process of designing database. main output of data design detailed logical data model of database. some people data design includes of needed logical , physical design choices , physical storage parameters needed generate design in data definition language. technically, database analysis, database analysts (dbas) trained do. while person can both data design , database analysis, these 2 different tasks. data design models data. database analysis takes model , applies 1 or more database engines (relational, hierarchical, nosql). a logical data model 1 of main outputs of data design. data model represented entity relationship diagram, or er diagram.
Read more

ios - Can NSManagedObject conform to NSCoding -

-
i need transfer single object across device. right converting nsmanagedobject dictionary , archiving , sending nsdata. upon receiving unarchiving it. transfer nsmanagedobject archiving , unarchiving instead of creating intermediate data object. @interface test : nsmanagedobject<nscoding> @property (nonatomic, retain) nsstring * title; @end @implementation test @dynamic title; - (id)initwithcoder:(nscoder *)coder { self = [super init]; if (self) { self.title = [coder decodeobjectforkey:@"title"]; //<crash } return self; } - (void)encodewithcoder:(nscoder *)coder { [coder encodeobject:self.title forkey:@"title"]; } @end nsdata *archivedobjects = [nskeyedarchiver archiveddatawithrootobject:testobj]; nsdata *objectsdata = archivedobjects; if ([objectsdata length] > 0) { nsarray *objects = [nskeyedunarchiver unarchiveobjectwithdata:objectsdata]; } the problem above code is. crashes @ self.title in initwithcoder sa...
Read more