PC SOFT

FORUMS PROFESSIONNELS
WINDEVWEBDEV et WINDEV Mobile

Accueil → WEBDEV 2024 → Secure WebService
Secure WebService
Débuté par Christine Wagner, 16 déc. 2016 09:53 - 8 réponses
Posté le 16 décembre 2016 - 09:53
Hi,
we want to build a webservice for transmitting data between our WinDef-Applications (there are several with different databases) and our WebDef-Extranet-Site. But this data has to be secured as:
- the content is sensitive and must not be readable for an attacker
- we have to be sure, it is send from a specific WinDef-Application
Is there a way to secure the webservice? Can it be send over SSL somehow?
Thanks for any help you can give me!
Posté le 16 décembre 2016 - 12:19
Hi Christine,

you can try and rely on external protocls, lke ssl, or you can use your
own security.

In WXReplication, I'm using a REST like webservice, with full
identification of any client, protection against man in the middle
attack, encryption, all of it coded in wlanguage. You can read about it
on my web site, view about 8 hours of video courses and exploire the
source, if you are interested.

Best regards

--
Fabrice Harari
International WinDev, WebDev and WinDev mobile Consulting

Ready for you: WXShowroom.com, WXReplication (open source) and now WXEDM
(open source)

More information on http://www.fabriceharari.com


Le 12/16/2016 à 3:53 AM, Christine Wagner a écrit :
Hi,
we want to build a webservice for transmitting data between our
WinDef-Applications (there are several with different databases) and our
WebDef-Extranet-Site. But this data has to be secured as:
- the content is sensitive and must not be readable for an attacker
- we have to be sure, it is send from a specific WinDef-Application
Is there a way to secure the webservice? Can it be send over SSL somehow?
Thanks for any help you can give me!
Posté le 16 décembre 2016 - 14:43
Hi Christine,

I have read your complete requirement and can help you in making the webservices.

Can you please share your web URL or add me on skype at cisin.arnold so we can discuss on your requirement.

Thanks,
Arnold
Posté le 19 décembre 2016 - 08:37
Many, many thanks for your help. I downloaded the code and already read through some of it. But I diskussed my solution with my boss and it is not enough. Now I am not sure how to proceed.

Here is the problem:
We have existing WINDEF-applications with each an own database. Now I should build an WEBDEF-application, with which some specific values in one of the customer-databases may be changed.

My idea was to poll a webservice (or even the WEBDEV-application itself) from the WINDEF-application every hour or so and get the changes that way into the customer-database. My boss wants me to push the changes directly to the WINDEF-application. I cannot think of a way to do this except installing a webserver at every customer and implementing a webservice which I then can call from the WEBDEF-application. But I am rather sure my boss does not want a webserver at each customer either.

I am very new to WINDEF and WEBDEF. In Java I would write a small ClientServer program listening to a specific port and getting the info there. This wouldn't be that much overhead as an own webserver with the webdev application server installed (which I would need for webservices programmed in WLanguage, wouldn't I?)
Posté le 19 décembre 2016 - 13:36
Hi Christine,

my experiencee with this kind of systems is that a push system is a bad
idea (the server never knows the status of the clients, after all)...

My WXreplication system can pull data from the server every minute (or
any other interval of time) when the clients are up and running.

Now, if you really want to push data, you can use sockets to
communicates between computer (each client can become a socket server) BUT:
- you then need to open ports in firewalls everywhere,
- manage the redirection through routers and proxies
- get the administrative privileges on each customer system to set that up
- ...

It's a mess...

On the contrary, wxreplication works on port 80 (always open), is
installed with the main program and does not require any extra
administrative rights...

Best regards

--
Fabrice Harari
International WinDev, WebDev and WinDev mobile Consulting

Ready for you: WXShowroom.com, WXReplication (open source) and now WXEDM
(open source)

More information on http://www.fabriceharari.com


Le 12/19/2016 à 2:37 AM, Christine Wagner a écrit :
Many, many thanks for your help. I downloaded the code and already read
through some of it. But I diskussed my solution with my boss and it is
not enough. Now I am not sure how to proceed.
Here is the problem:
We have existing WINDEF-applications with each an own database. Now I
should build an WEBDEF-application, with which some specific values in
one of the customer-databases may be changed.

My idea was to poll a webservice (or even the WEBDEV-application itself)
from the WINDEF-application every hour or so and get the changes that
way into the customer-database. My boss wants me to push the changes
directly to the WINDEF-application. I cannot think of a way to do this
except installing a webserver at every customer and implementing a
webservice which I then can call from the WEBDEF-application. But I am
rather sure my boss does not want a webserver at each customer either.

I am very new to WINDEF and WEBDEF. In Java I would write a small
ClientServer program listening to a specific port and getting the info
there. This wouldn't be that much overhead as an own webserver with the
webdev application server installed (which I would need for webservices
programmed in WLanguage, wouldn't I?)
Posté le 20 décembre 2016 - 11:44
Hi Fabrice,

thank you for your patience. You are absolutely right. The push system is a bad idea. If I wasn't that new to this job, I would have argued more - and I will try again. Nevertheless, in the end I will have to implement whatever my boss wants me to implement.
I do not understand, how to use wxreplication yet. Is there a handbook anywhere? The code is very good documented. However, as I'm only a beginner with WLanguage (I have only finished the tutorials before), I will need some time to find out, what each procedure does and what I'm needing of it. But it is a great help to be able to look at existing code. Thanks a lot!

Best regards
Christine Wagner
Posté le 20 décembre 2016 - 14:57
Hi Christine,
I do not understand, how to use wxreplication yet. Is there a handbook
anywhere? The code is very good documented. However, as I'm only a


You mean on top of the 30+ pages of documentation on the web site
(including a step by step how to incorporate in an existing application
with data) and the 8+ hours of video course?

No, nothing else...

Best regards

--
Fabrice Harari
International WinDev, WebDev and WinDev mobile Consulting

Ready for you: WXShowroom.com, WXReplication (open source) and now WXEDM
(open source)

More information on http://www.fabriceharari.com



beginner with WLanguage (I have only finished the tutorials before), I
will need some time to find out, what each procedure does and what I'm
needing of it. But it is a great help to be able to look at existing
code. Thanks a lot!

Best regards
Christine Wagner
Posté le 22 décembre 2016 - 08:55
Hi Fabrice,
I'm blushing now and I'm very sorry. I really did not see the step by step instructions. Thanks a lot for your help!
Posté le 22 décembre 2016 - 13:24
:D

it happens to all of us... My excuse is old age... What's yours? :-)


Le 12/22/2016 à 2:55 AM, Christine Wagner a écrit :
Hi Fabrice,
I'm blushing now and I'm very sorry. I really did not see the step by
step instructions. Thanks a lot for your help!