Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [web-services]

Web services are software systems designed to support interoperable machine-to-machine interaction over a network.

-2
votes
0answers
24 views

How to horizontally scale a mobile-game server on Heroku? [on hold]

My game is getting bigger and I already notice some spikes and memory/RPM overloads on the server, which is running on Heroku's Hobby plan (dyno for 7$, Postgres for 9$). The server is a Spring app, ...
1
vote
2answers
57 views

Building a rest api layer on top of a soap webservice

We want to build a rest api layer on top of a soap webservice. Our current situation is that we have a coldfusion application that talks with the webservice, both running on different servers. The ...
1
vote
1answer
38 views

Whose part of the system should handle malformed messages? [closed]

Currently we have a POS (point of sale) application that should call a remote service to declare each new sale. Considering that the remote service could be not reachable we have also a local db at ...
0
votes
0answers
26 views

How to store message content in a webservice

I am building a service responsible for sending email/sms communications. The service receives a request that contains information necessary to build an email/sms template and the recipient ...
0
votes
2answers
132 views

Is using HTTPS for web service calls secure enough?

I'm developing software that calls a SOAP web service I've created. My questions are about security: Is it "enough" (about securing web service) to have my web site secured with HTTPS, and to call ...
15
votes
4answers
2k views

Why not use SQL instead of GraphQL?

Recently I learned about GraphQL which claims to be superior to RESTful. However, I started wondering why don't we simply put SQL statements into an HTTP GET request. For example, in GraphQL I would ...
0
votes
2answers
135 views

How to describe an API-like request that is browser-to-browser?

I'm building a web application that has a feature which allows visitors to directly access resources using URL patterns, for example: www.site.com/client/[clientID]/orders www.site.com/client/[...
0
votes
0answers
55 views

Zipping and downloading multiple files

We're currently designing an web application that will basically expose "messages" to end users, each message consisting of a subject and body, but more important 1 to many files we call "attachments"....
3
votes
1answer
209 views

Does it make sense to authenticate a method that exposes non-sensitive data

We're developing an Angular application that consumes a web method exposing some information that is not sensitive, just bus seat promotions; the user enters where he wants to go and when and he will ...
3
votes
3answers
242 views

Dealing with data arriving at a different times

I have a load balanced service that needs two data inputs to correctly give a result. One of these inputs comes from a queue, the other comes from user input. Most of the time the data that comes ...
7
votes
4answers
432 views

Advantages of HATEOAS based RESTful service

There is a scenario, where we have two commercial applications that are so called REST based(java) but not HATEOAS compliant. Development activity is out-sourced to vendor Development phase of ...
1
vote
1answer
91 views

How to balance code duplication with being able to prevent unnecessary service calls

Apologies in advance if this is considered opinion based, but I wasn't sure where to ask it and was interested in learning if there were any definitive best practices. Say an application calls a ...
0
votes
1answer
82 views

What is the optimal pattern to ensure a priority API gets cycles over its related (non-priority) API?

I have two synchronous web APIs that perform the same work but one needs to be prioritized over the other (the former is called from a client, whereas the latter is a caching optimization for before a ...
51
votes
9answers
11k views

Should you guard against unexpected values from external APIs?

Lets say you are coding a function that takes input from an external API MyAPI. That external API MyAPI has a contract that states it will return a string or a number. Is it recommended to guard ...
-2
votes
1answer
225 views

good practice: error message and error code

I'm currently testing a web service and I have noticed that there is only one error code ever return: 400. However, the error message return isn't always the same. Here are some examples of the ...
-3
votes
1answer
97 views

Need of advice on server code design [closed]

I want to build a web application in Java on Tomcat server (I am open to change the type of server if needed) The requirement for me is for the user to be able to login and download sensitive data (...
0
votes
1answer
112 views

How to protect while loosely coupling a db server that is shared by 2 different services

Background information I have a database that will be used by two different web applications. Solution A (user driven web application) resides on the public internet and will write / update / delete ...
1
vote
0answers
115 views

Separating WebRTC Signal Server and Media (SFU) server

I'm working on a WebRTC VOIP product. I am not using peer-to-peer connections, but instead having clients connect to a SFU which distributes audio to everyone involved in a call. From my ...
1
vote
1answer
104 views

Separation between regular web site requests and API requests

I have a doubt about the architecture of a web app when it comes down to differentiating between regular website requests and API requests. For the purpose of explaining, suppose I am the creator of ...
1
vote
0answers
96 views

Difference between API server and Gateway

I'm working on a VOIP startup currently and deciding which software stack will be best. I'm doing a lot of research of how other people do it, like Discord. It's really hard to make some of these ...
2
votes
1answer
100 views

Put functionality in same executable with command-line flag, or put it in a separate executable?

Background: I am working on a service where the domain logic exists as a library, and then the actual executable is built on a web framework as a wrapper around the domain logic library. There is no ...
-2
votes
1answer
90 views

Monitoring my REST API service

I have a REST API. I want to monitor it -- that it's always up. That's the canonical way to ping it? Especially when all of its calls require an API key. Should I create an empty open end point ...
9
votes
4answers
2k views

If a microservice architecture needs a separate database per microservice then it's too costly & unmanageable. Why do we even need it?

I read about microservices and it seems illogical to me to create a separate DB per service just to achieve isolation. I can achieve the same using only web services and a single database. Why do we ...
1
vote
1answer
61 views

Should I wrap my web service request data in an additional object?

I'm preparing some web services with Spring WS. Due to it being contract-first, I followed its guide and prepared an XSD. So far, my Web Service request XML looks like this (this is SoapUI rendered ...
2
votes
0answers
197 views

Ensuring reliable delivery of messages over websockets?

I am building a comet service which will push new data to the client on mobile devices. For this, I am using websockets to deliver messages to the client. The problem I am facing here is the ...
1
vote
1answer
70 views

Using a JWT for a web service after logging in (login twice?)

Good day everybody, My capstone project partners are stumped with a logic question that has to do with JWT, MVC & web services. We have already built a web app with a signup/signin feature using ...
1
vote
1answer
147 views

Which scenario is the best for service worker architecture?

We know about using service workers in modern web sites. Consider a scenario back-end as node.js and SQL Server. Data is loaded from central database to local customer web app (DB is about 700 MB) ...
0
votes
0answers
46 views

Are REST Resources and GraphQL Object Types conceptually equal?

I'm in the process of outlining the intended business logic of a web service. At this point, I'm not too concerned with implementation details. On the contrary, I'm looking for ways to abstract them ...
2
votes
0answers
286 views

Design a Windows Service with self-hosted ASP.NET Core Web Services and UPD port listeners

I'm designing a software platform in automation that is responsible of many different tasks like: Core functions Driver interface for machines UDP listener for machine messages from PLC UDP listener ...
1
vote
2answers
137 views

Are two .net web applications necessary?

We have one single internal website. Underneath this website (in IIS) we have two web applications: 1-Main web application 2-Web services (created using the visual studio web api project template) ...
-1
votes
1answer
132 views

How can I prevent my API from being accessed by anything but my website?

I've got an API (Java + Play Framework). I've got a website (React) who has to communicate with the API. I don't want my API being called by anything but my website. How can I do?
1
vote
1answer
132 views

Should I do parallel processing in RPC web service?

Recently I was reviewing my team leader pull request in our Web API hosted by Kestrel. There was a place in our code which is sort of hot path and we are processing frequently over hundred of items ...
3
votes
1answer
133 views

REST API: How to PUT/POST different units of data

I have an API I have designed which can return data in 2 different units. To explain this I am tending to use the example of a measurement, in particular temperature. However my use case is slightly ...
1
vote
1answer
193 views

Is it usual to “re hydrate” DTOs into full objects with relationships when consuming web services?

We are designing a web API to transfer objects obtained from a database to a client application which is a front end GUI. The server side business logic will be implemented (for better or worse) in ...
1
vote
1answer
76 views

Is there a place for connection string in SOA's desktop clients?

In the SOA architecture, with many services that implements data persistence as well as basic logic - is there even a place for connection strings in client Desktop applications? Or should everything ...
3
votes
2answers
92 views

Parameters to Service-level classes: Primitives or domain-specific types?

We have an existing web service which is currently modeled as a single project, where the web/service/manager/model classes have gotten a bit confused and intermingled. As a refactoring, we're pulling ...
0
votes
1answer
75 views

Design/Process in respect to mission-critical systems (Web Services)

Overview For company abc, teams are separated in terms of mission-critical applications and their extended applications. For example, customer xyz uses mission-critical data, but there are business ...
2
votes
2answers
212 views

How to correctly split a monolith and rely on the same domain

Context I'm developing a Spring Boot java application. Currently it is a monolith with the rest API and the front end (vaadin driven) in the same big project. Although this is very easy to develop ...
0
votes
1answer
753 views

Pattern for web service response caching, but only use the cache for when the data store goes down or request otherwise would fail

We have a REST web service written in C# in ASP.NET MVC/WebAPI. When the underlying data store fails, this can lead to our service being completely unavailable, instantly. There is currently no ...
0
votes
2answers
68 views

Where and how to store URLs in a web module?

Situation I am currently refactoring existing web code. The code currently revolves around a ServerConfiguration object. It looks something like this: string UrlBase = "https://myserver.com/api" ...
2
votes
1answer
58 views

Realtime Live Auto updates for web applications

It's about trying to understand the architecture behind how updates to web application is done. I've been working on a non-public website that has bunch of records displayed in a UI, now the ...
1
vote
2answers
1k views

Best Practices - Including endpoint URL calls in JavaScript vs backend calls

I am building a web application that will retrieve results from a remote server and use them to render some charts and maps. The remote server has already been implemented and contains a large amount ...
0
votes
1answer
70 views

Hosting what normally would be a windows service inside a web server

We have the requirement to implement some fire and forget long running tasks that fit perfectly into windows services (remote data acquisition and processing, etc) but the requirement is to deploy ...
2
votes
1answer
3k views

How to handle multiple calls to webservice?

I got a REST webservice and it has a simple method like; public void processItem(Item item); Problem is processItem method takes too long to complete nearly 1 minute) and there can be multiple calls ...
1
vote
1answer
535 views

understanding video streaming on a servlet or webserver

This question has been asked quite a few times on StackOverflow and I would like to get an understanding of the concepts and process rather than directly solve a problem. I found the following post ...
6
votes
2answers
387 views

How do you handle JWT expiration for long running calls?

Currently we are debating over securing our multiple micro-services. The major concern is that the JWT token provided to us will expire before the call is finished. (This is in the synchronous design) ...
4
votes
2answers
104 views

Running expensive computation on single server

I'm building a website that lets a user pay for a service that automatically does some video encoding for them. Encoding takes several minutes. A naive solution would run each encoding job ...
0
votes
1answer
1k views

How Immadiately Blacklist and Block Access of Access Token using JWT?

I have read OAuth2 and its statelessness using JWT as token. Token expires based on expired time, then how do I control token like blacklist and block its access immediately without being stateful? ...
0
votes
1answer
764 views

RMI/CORBA vs Web service

As mentioned in wiki, A service-oriented architecture (SOA) is a style of software design where services are provided to the other components by application components, through a communication ...
0
votes
2answers
228 views

Is inserting service logic in its own class considered bad?

For example, let's say I have this wonderful interface: public interface BestService { public String whoIsAGoodService(String serviceName); } Going down it's implementation, we can find the ...