Web services is one of the official Drupal 8 initiatives. Known as "headless Drupal", web services allow us to use Drupal as a data storage for applications and websites using various frameworks and technologies. This session will address: 1. Introduction to web services. Origins and types of web services, crucial components and basics to get us going. We will look into the difference between Drupal 7 and Drupal 8 service setup and why it was crucial to get services into the core. 2. Examples. Practical use of web services with various frameworks. 3. Drupal 8 services configuration. Hands on configuring of Drupal 8 to setup and interact with services. https://melbourne2015.drupal.org.au/session/services-drupal-8-using-drupal-data-storage-mobile-apps-web-apps-and-websites

1. Services in Drupal 8
using Drupal as data storage for mobile apps, web
apps and websites
05 March 2015
DrupalSouth Melbourne
WEB ENGINEERS

2. TOC
Web Services
- History
- Types
Drupal 8
- Core
- Modules

3. Who we are
http://www.technocrat.com.au/
JAy Vladimir
@jayturn28 @Vladimiraus
www.Jayturn.com tomato-elephant-studio.com

4. TOC

5. Wayback machine
Internet back in 90s and early 00s
- Page by page navigation
http://web.archive.org/web/20020122183251/http://www.drupal.org/

6. Web 2.0
- Page loads on background
- Asynchronous JavaScript and XML (AJAX)

7. web services
conversation between two computers
- strict requirements
- hypertext transfer protocol (HTTP)
- format vary
- application programming interface (API)

8. web services - History
- Communication between two machines
Electronic Data Interchange (EDI)
- documented in 1996, used as early as 60s
- strictly formatted messages
- designed for large-scale e-commerce

9. web services - History
Electronic Data Interchange (EDI)

10. web services - History
Remote Procedure Call (RPC)
- based on DCE protocol
- call functions on remote computers
- Popular on UNIX
- Microsoft to follow
- MSRPC, COM OLE architecture, Dcom

11. web services - History
CORBA
- Common Object Request Broker Architecture
- powerful but complex
- number of efforts to simplify
- e.g. Java's RMI with inter-ORB protocol
- one of many

12. web services - History
Extensible Markup Language (XML)
- Standard Generalized Markup Language
- goals
- simplicity
- readability
- generality

13. web services - XML
- multiple uses
- ideal for data exchange
- easy to validate
- one of the most common web service
messages formats

14. web services - XML

15. web services - XML
Emerging standards & Languages
- XMLRPC
- Atom and RSS
- SOAP (simple object access protocol)

16. web services - JSON
JavaScript Object Notation (JSON)
- Introduced early 2000’s
- Became popular due to
mobile revolution
- more compact than XML

17. web services - JSON

18. Example: Spotify
(intro image)

19. Example: Spotify
Services:
- Metadata
- User
- Playlist

23. Leverage...

24. web services in Drupal 8
Use cases
- Website: bypass theming layer
- Web applications
- Mobile Applications

25. web service API - Structure
Request Syntax
- named methods
- Uniform Resource Identifier (URI)
- parameter names and data types

26. web service API - Structure
Message format
- JSON
- SOAP (XML)
- other

27. web service API - Structure
Request actions
- GET
- POST
- PUT
- PATCH
- DELETE

28. web serviceS ACTIONS
GET
- Requests and returns data from a resource
- Used only to retrieve data
- query strings are sent in the url which means
a limit of 2048 characters

29. web serviceS ACTIONS
POST
- Sends new data in its complete form to the
resource
- query strings are sent in the HTTP message
body

30. web serviceS ACTIONS
DELETE
- deletes the resource along with all the
snapshots

31. web serviceS ACTIONS
PUT
- complete update or replacement of a
resource
- sends request to update a resource
- creates a snapshot (copies resource) before
updating

32. web serviceS ACTIONS
PATCH
- partial updates
- X-CSRF-Token

33. web service API - Structure
Authentication
- Credentials
- Cookie
- oAuth

34. Example: Dream Factory

35. Example: Dream Factory
Open source REST API platform
- built with php and apache
- Uses mysql as the default database
- automatically generates RESTful services
- http://www.dreamfactory.com/

43. Swagger

46. Drupal 8 - web services
Headless Drupal
D8 core Web Services Initiative (WSCCI)
- Context
- Plugins
- REST Services
- Layouts

47. Drupal 8 - web services
- Services in core
- Additional modules
- Some development postponed to 8.1

48. Drupal 8 - core
Modules (based on beta 7)

49. Drupal 8 - COre
RESTful Web Services (rest)
- exposes entities via a RESTful web API
- can expose other resources
- depends on the Serialization module

50. Drupal 8 - COre
Serialization (serialization)
- conversion to and from as JSON and XML

51. Drupal 8 - COre
Hypertext Application Language (hal)
- Extends the Serialization module
- HAL: primary format in Drupal 8 Core
- can be encoded in both JSON and XML
- 2 reserved keywords ‘_links’ ‘_embedded’

52. Drupal 8 - COre
HTTP Basic Authentication (basic_auth)
- implements basic user authentication
- cookies
- configure SSL if you use it in production.
- more secure: OAuth module
- /rest/session/token

53. POSTMAN

54. POSTMAN

55. Example: Drupal 8

56. Drupal 8 - REST in ViewS
Views
- Visual query builder
- Export lists of data
- REST export as JSON or XML

57. Drupal 8 - VIEWS

58. Drupal 8 - VIEWS

59. Example: Drupal 8

60. Drupal 8 - REST UI

61. Drupal 8 - REST UI
- https://www.drupal.org/project/restui
- user interface for enabling and disabling
resources, serialization formats, and
authentication providers.
- admin/config/services/rest

62. Drupal 8 - REST UI

63. Drupal 8 - REST UI

64. Drupal 8 - REST UI

65. Drupal 8 - Authentication
oAuth
- for server side authentication
- https://www.drupal.org/project/oauth
Guzzle Oauth Plugin
- For sign requests with OAuth Credentials
- https://www.drupal.org/project/guzzle_oauth

66. Drupal 8 - Silex
- PHP micro-framework (Symfony2 based)
- Request - response framework
- part of Drupal 8 core
- Has events similar to drupal hooks
- http://silex.sensiolabs.org/

68. Cross origin access
- prevents communication between two
sites with different domains
- Put in place to help prevent cross site
scripting

69. Cors - w3c standard
Cross origin resource sharing
- w3c recommend standardising Cors
http://www.w3.org/TR/cors
- website-A <- website-b
website-b needs the following header:
Access-Control-Allow-Origin : http://website-A.com

70. Drupal 8 - Cors
Bad news
- cors not supported in drupal 8 for initial
release
Good news - it’s coming!

71. Drupal 8 - Cors

72. BOF
Fri, ROOM F
14:30 - 15:15
Drupal 8 Services for Developers

73. QUESTIONS?
http://www.technocrat.com.au/
http://www.slideshare.net/TechnocratAu
JAy Vladimir
@jayturn28 @Vladimiraus
www.Jayturn.com tomato-elephant-studio.com

74. References
- Lynda.com web services
- D8 core Web Services Initiative (WSCCI)
- Blog: web services initiative
- Safari books: RESTful web services
- Blog: Rest export in Drupal 8 Views

75. References
Spotify
- https://developer.spotify.com/web-api
- https://developer.spotify.com/web-api/endpoint-reference
Dreamfactory
- https://www.dreamfactory.com
- https://bitnami.com/stack/dreamfactory
- http://swagger.io/
- https://www.drupal.org/sandbox/mmillford/2402571

76. cors
- http://www.w3.org/TR/cors
- http://enable-cors.org
- https://www.drupal.org/node/1869548#comment-9365043
References