Changeset 2183

Timestamp:

Mar 27, 2012, 2:43:52 PM (12 years ago)

Author:

work@…

Message:

• adding initial version of the API controller (which external applications can use to interface with gscf)

File:

• trunk/grails-app/views/api/index.gsp (modified) (1 diff)

trunk/grails-app/views/api/index.gsp

@@ -13 +13 @@
     designed to be called only once (or when sessions are out of sync) as HTTP BASIC authentication is not really secure (if someone
     is able to sniff your traffic, the authentication md5 hash is easily stolen).<br/>
+    Every subsequent request the client does, needs to contain a validation MD5 hash, which is a MD5 sum of the concatenation of the device token,
+    the request sequence and a shared secret (e.g. <i>md5sum( token + sequence + shared secret )</i>).
     <i>Note that in order to be able to successfully authenticate or use the API in general, the user should have the ROLE_CLIENT assigned!</i>