Constructing a successful and simple API is the lifeblood of your developer community, and REST is a simple standard through which this can be accomplished.  As we construct our API and need to secure the system to authenticate and track applications making requests, the open standard of OAuth 2 provides us with a secure and open source method of doing just this.   In this talk, we will explore REST and OAuth 2 as standards for building out a secure API infrastructure, exploring many of the architectural decisions that PayPal took in choosing variations in the REST standard and specific implementations of OAuth 2.

Web landscape is changing rapidly; while AJA[X|J] was an improvement from the user interface responsiveness standpoint, the underlying data transport mechanism was still based on the request/response polling model. WebSocket specification removed the last obstacle for a seamless, event-driven data pushing from storage to the non-proprietary HTML5 user interface. Data transports naturally calling for event-driven model can now be implemented in a straightforward and standard fashion, improving performance by significantly lowering the network and web server overhead of the request/response model. Using POCO framework Net library, an HTTP server generating WebSocket HTML5 page will be built. Next, we’ll use POCO Data library to add SQL database communication capabilities to the server and establish a callback hook; the hook opens the path for database modifications to transparently trigger web page changes. The solution building blocks, Poco::Dynamic module for datatype erasure and Poco::Data::RowFormatter class for dynamic output formatting, will be explained in detail. The session offers a practical solution to few acute problems – delivering data from storage over the network to the web end-user seamlessly, efficiently and independently from transported data types.