The REST COnnector is implemented as a series of additional views included with COordinate. As such, it is available by default with no server-side installation or reconfiguration necessary.
Authentication
Authentication is via a proxy or delegated model, where the REST client is treated as an administrative user by COordinate. The client, where appropriate, indicates which target subject it wishes to act on behalf of.
The REST client is authenticated via a simple user/password pair transmitted over HTTPS as part of a basic auth transaction. More sophisticated authentication mechanisms, such as delegated SAML assertions, may be supported in the future.
TODO: add instructions for adding a new REST client.
Object Formats
The REST COnnector supports different formats for representing data object passed across the REST COnnector. Not all formats are supported in all contexts.
Each format may convey the following special variables:
- Object Type: The type of object represented in the request, as defined for each data type.
- Object Version: The version of the object represented in the request, as defined for each data type.
URL
For methods such as GET that pass arguments as part of the URL, arguments are positional as defined for each data type.
JSON
This format is supported for responses only.
XML
This format is supported for requests and responses.