Tag Info

Hot answers tagged

5

Technically, such checking requires an additional step. You have to list all the parameters, and compare this list with the list of allowed ones. Then, if you decide to accept an additional parameter, you have to change this list, requiring even more work. All this code has to be tested as well. What's the benefit? The benefit is that a programmer who made ...


1

Is it necessary/sound to add the token to a database or can I just use the payload to identify the user? I think both approaches are fine. I've implemented token based authentication in .Net, and we put all identity related information in the token. I would argue it's more scalable, especially for a web farm. All the authentication information we need ...


1

Regarding the table, if a book can have many labels and a label many books (sounds quite reasonable) then that's a many to many relationship. In case of REST the many to many relation is in fact a bit confusing since we talk about resources and with the URI being a unique identifier it seems weird to be able to access one and the same resource from two ...


1

Your approach is far different from that of most PHP applications does, obviously a template engine binds some logic in views, most programmers prefer writing this logic in PHP itself. Limiting PHP to create services/ API s to only manipulate Data is a good idea, indeed. You may consider http://backbonejs.org/. I believe you could use it to write all ...



Only top voted, non community-wiki answers of a minimum length are eligible