OData

Create and consume RESTful APIs in a simple and standard way

OData and Authentication – Part 8 – OAuth WRAP

August 19, 2010 Aug 19, 2010 08/19/10

DB Blogs

OAuth WRAP is a claims based authentication protocol supported by the AppFabric Access Control (ACS) which is part of Windows Azure. But most importantly it is REST (and thus OData) friendly too. The idea is that you authenticate against an ACS server and acquire a Simple Web Token or SWT – which contains signed claims about identity / ...

Data Services Streaming Provider Series: Implementing a Streaming Provider (Part 1)

August 4, 2010 Aug 4, 2010 08/4/10

DB Blogs

The Open Data Protocol (OData) enables you to define data feeds that also make binary large object (BLOB) data, such as photos, videos, and documents, available to client applications that consume OData feeds. These BLOBs are not returned within the feed itself (for obvious serialization, memory consumption and performance reasons). Instead, ...

OData and Authentication – Part 7 – Forms Authentication

July 21, 2010 Jul 21, 2010 07/21/10

DB Blogs

Our goal in this post is to re-use the Forms Authentication already in a website to secure a new Data Service. To bootstrap this we need a website that uses Forms Auth. Turns out the MVC Music Store Sample is perfect for our purposes because: The rest of this post assumes you’ve downloaded and installed the MVC ...

OData and Authentication – Part 6 – Custom Basic Authentication

July 21, 2010 Jul 21, 2010 07/21/10

DB Blogs

You might remember, from Part 5, that Basic Authentication is built-in to IIS. So why do we need ‘Custom’ Basic Authentication? Well if you are happy using windows users and passwords you don’t. That’s because the built-in Basic Authentication, uses the Basic Authentication protocol, to authenticate against the windows ...

OData and Authentication – Part 5 – Custom HttpModules

July 19, 2010 Jul 19, 2010 07/19/10

DB Blogs

In the last post we saw how to add custom authentication inside your Data Service using the ProcessingRequest event. Unfortunately that approach means authentication is not integrated or shared with the rest of your website. Which means for all but the simplest scenarios a better approach is needed: HttpModules. HttpModules can do all sort of ...

OData and Authentication – Part 4 – Server Side Hooks

July 19, 2010 Jul 19, 2010 07/19/10

DB Blogs

If you secure an OData Service using Windows authentication – see Part 2 to learn how – everything works as expected out of the box. What however if you need a different authentication scheme? Well the answer as always depends upon your scenario. Broadly speaking what you need to do depends upon how your Data Service is hosted...

Join the OData Mailing List

June 28, 2010 Jun 28, 2010 06/28/10

DB Blogs

Today we released an OData Mailing List. This is the list to use if you have OData questions, comments on OData or want to discuss how OData should evolve over time. To sign up to the list go here and follow the instructions provided. The list is fully open so anyone can subscribe and participate. Be sure to read the ...

OData and Authentication – Part 3 – ClientSide Hooks

May 24, 2010 May 24, 2010 05/24/10

DB Blogs

So far in this series we’ve looked at Windows Authentication. For both Windows and Basic Authentication, Data Services does the authentication handshake and subsequent sending of authentication headers – all without you directly setting a http header. It can do this because there is a higher level abstraction – the ...

Using Restricted Characters in Data Service Keys

May 21, 2010 May 21, 2010 05/21/10

DB Blogs

If your Data Service includes entities with a string key, you can run into problems if the keys themselves contain certain restricted characters. For example OData has this uri convention for identifying entities: ~/Feed('key') So if the 'key' contains certain characters it can confuse Uri parsing and processing. Thankfully though Peter Qian...

OData and Authentication – Part 2 – Windows Authentication

May 10, 2010 May 10, 2010 05/10/10

DB Blogs

Imagine you have an OData Service installed on your domain somewhere, probably using the .NET Data Services producer libraries, and you want to authenticate clients against your corporate active directory. How do you do this? On the Serverside First on the IIS box hosting your Data Service you need to turn on integrated security, and you ...

OData

OData - OData