Geeks With Blogs

News Please visit me at my new blog!!

profile for Aligned at Stack Overflow, Q&A for professional and enthusiast programmers
"free in Christ Jesus from the law of sin and death." Romans 8:2 (ESV) Check out the Falling Plates video on YouTube.
more about the Gospel
And then listen to Francis Chan speaking at LifeLight in SD.

Programming and Learning from SD

I was looking closer into WebAPI, specificially how to use OData to avoid writing GetCustomerByCustomerId(int id) methods all over the place.

I had problems just returning IQueryable<T> as some sites suggested in the WebpAPI (Assembly System.Web.Http.dll, v4.0.0.0).  I think things changed in the release version and the blog posts are still out of date. There is no [Queraable] as the answer to this question suggests. Once I get WebAPI.Odata Nuget package, and added the [Queryable] to the method http://localhost:57146/api/values/?$filter=Id%20eq%201 worked (don’t forget the ‘$’).

Now the main question is whether I should do this and how to stop logged in users from sniffing the url and getting data for other users. I John V. Peterson has a post on securing WebAPI with headers and intercepting the call at that point. He had an update to use HttpMessageHandlers instead. I think I’ll use this to force the call to contain some kind of unique code for the user, but I’m still thinking about this. I will not expose this to the public, just to my calls with-in my Forms Authentication areas.

Other links:

~lots of good information

John V Peterson example:

~ all data access goes through the WebApi and the web client doesn’t have a connection string

~ There is code library for calling the WebApi from MVC using the HttpClient. It’s a great starting point

~ Beta (9/18/2012) Nuget package to help with what I want to do?

~ has a sample code project with examples

JSON, pass the correct format in the header (Accept: application/json). $format=JSON doesn’t appear to be working.

Async methods built into WebApi! Look for the GetAsync methods.

Posted on Wednesday, September 19, 2012 9:08 AM MVC | Back to top

Comments on this post: WebAPI and MVC4 and OData

No comments posted yet.
Your comment:
 (will show your gravatar)

Copyright © Aligned | Powered by: