rest

I couldn't find a good description on the web about securing REST API's against drive-by requests (unauthorized 3rd party calls when you visit a malicious web site).

Here's what I've pieced together today by examining what del.icio.us is doing to secure it's REST api.

Quoted: My prior post talked about how NOT to write a REST app in .NET. I mentioned WCF as the preferred option. In this post, I'll describe the steps for how you should do it. Some background First up, you should use WCF to build your REST app. WCF is the Windows

But of course the big one for me is Creating a RESTful API with Windows Communication Foundation, presented by Haider Sabri and some friends from the MySpace developer API team. These guys have been building the public-facing MySpace REST API as a set of WCF services and were kind enough to do a talk at Mix about their experience. They even built a cool demo app -- http://www.restchess.com using WCF and shared the source for everyone to play with. There's a sweet (and highly reusable) OAuth channel in there along with lots of other goodies...thanks guys!

Quoted: To