User authentication and encryption

[GoogleCodeExporter]

I started doing some testing with DMVCFramework and found it very good. Easy to 
work with and a very acceptable performance.

I only have a few questions:

1 - What is the best way to work with user authentication?
2 - Are there mechanisms and SSL encryption?

Original issue reported on code.google.com by ezequiel...@gmail.com on 22 Nov 2013 at 11:29

[GoogleCodeExporter]

1. Currently there is no support for Basic Authentication and other kind of 
standard auth schemes. However, you can use the so called “form 
authentication” where client send the username and the password in some way 
(headers, request body etc) over a secure socket connection and the server 
creates a session is username and password are ok. You can check in 
ActionFilter method of your controller (OnBeforeRequest) if the current user is 
logged. In the roadmap is planned the support for BasicAuthentication.

2. DMVCFramework use (but it is not tied) WebBroker, so the normal way in which 
you create ssl server, you can create ssl DMVCFramework server. You can start 
using the Delphi built-in wizard.

Original comment by d.t...@bittime.it on 24 Nov 2013 at 3:00

[GoogleCodeExporter]

I have situations where you'll need to run more than one server in the same 
application and hence will need to share Controllers between these servers. 
Thus, validation of users should not be coupled to Controllers 
(OnBeforeAction), because each server will have its own users. So I thought I 
would inherit TMVCEngine class and rewrite the ExecuteAction method (it needs 
to be changed to Virtual on DMVCFramework, you should verify the feasibility of 
doing so), so I add it to validate users, because I'll have a WebModule for 
each server (also'll have a MVCEngine for each server).

I created a structure to work with your Framework, I believe it is easier to 
explain by code: https://github.com/ezequieljuliano/CustomDMVCFramework

Original comment by ezequiel...@gmail.com on 26 Nov 2013 at 1:33

[GoogleCodeExporter]

Hi ezequieljuliano,

I saw your changes. If you want to contribute to the project we can share view, 
necessity and work. Let me know.

See you

Original comment by daniele....@gmail.com on 7 Mar 2014 at 11:04

• Changed state: Accepted

[GoogleCodeExporter]

[deleted comment]

[GoogleCodeExporter]

Hello daniele 

I want to contribute to the project. I am using it on a few projects and I am 
well satisfied with the work he proposes. 

I changed the name of my project on Github 
(https://github.com/ezequieljuliano/REST4Delphi) and some more implementations. 

An overview of the changes: 
* Authorization and Authentication; 
* Container of Servers;
* RESTClient using DSL (domain-specific language) language. 

In DMVCFramework: 
* I changed the method ExecuteAction of TMVCEngine  for virtual; 
* I added SSL and Compression in RESTClient; 
* Adjustments due to UTF-8; 

What do you think of migrating DMVCFramework to Github?

Original comment by ezequiel...@gmail.com on 11 Mar 2014 at 2:49

[GoogleCodeExporter]

Hello,

I've been playing with DMVC for a few day now and looks promising  - that I 
must say. BUT! I too was missing authorization/Authentication in the original 
DMVC project. And now I'm just wondering how are you two with the integration ? 
Are the changes from ezequieljuliano allready merged with  the original DMVC ? 
or should I use the custom solution from ezequieljuliano.

Thanks

Original comment by leskovse...@gmail.com on 4 Jul 2014 at 11:10