#241
  • Created on
    2006-03-27 11:10
  • Reported by
    Anonymous
  • Status
    Fixed
  • Priority
    Normal (3)
  • Assigned to
    bsag
  • Milestone
    -
  • Plan Level
    -
  • Due Date
    -

Attachments

Related Tickets

Add new subtask or bug

Web service API for creating a new action

As a first step to enabling alternate means of adding actions to a tracks instance, I've added a web service method to create a new todo.

The method signature is as follows

  int NewTodo(string username, string token, int context_id, string description)


The token is the same token that's used in the feed URLs. Open question: Is this secure enough?

The int returned is the id of the newly created action.

Patch and new files to be attached now.
User picture
  on 2006-03-27 11:11 *
By Anonymous
Attachment lmelia_new_todo_api.patch added
Attachment lmelia_new_todo_api.patch added
<a href='http://www.assembla.com/spaces/tracks-tickets/documents/awnR_M0S4r3z7Mab7jnrAJ'>lmelia_new_todo_api.patch</a>: patch todo model to allow null notes
User picture
  on 2006-03-27 11:12 *
By Anonymous
Attachment todo_api.rb added
Attachment todo_api.rb added
<a href='http://www.assembla.com/spaces/tracks-tickets/documents/aw9mZa0S4r3ymUab7jnrAJ'>todo_api.rb</a>: add as app/apis/todo_api.rb
User picture
  on 2006-03-27 11:12 *
By Anonymous
Attachment backend_controller.rb added
Attachment backend_controller.rb added
<a href='http://www.assembla.com/spaces/tracks-tickets/documents/avF_7M0S4r3z7Mab7jnrAJ'>backend_controller.rb</a>: add as app/controllers/backend_controller.rb
User picture
  on 2006-03-29 13:50 *
By bsag
Status changed from New to Fixed
Status changed from New to Fixed
Great! Added in [210]. I've written some simple Applescripts to take advantage of this which I'll pass round the mailing list and post on the project site when I've got a moment.

I think for now the token is reasonable security. Because of the way the token is constructed, it would be very difficult to crack for the user's password. Plus, if the user suspects problems, they can change their password and a new token is generated.