News for hackers. Stuff that matters.

A comment on Backend-as-a-service for web apps?. Parent comment

Re:Backend-as-a-service for web apps? by davewasmer on Thursday December 29, 2011 @12:02AM (#3402583)
If it were to operate as simply a REST API, then the service could simply return everything via JSONP to avoid the CORS trap.
[ Parent | on HN ]
Re:Backend-as-a-service for web apps? by timfletcher on Thursday December 29, 2011 @12:48AM (#3402698)
JSONP only works for GET requests. It's not 'proper' AJAX. You wouldn't be able to POST, PUT or DELETE.
[ Parent | on HN ]
Re:Backend-as-a-service for web apps? by mmahemoff on Thursday December 29, 2011 @12:47AM (#3402695)
JSONP should only be used for public web services. otherwise, any third party website could make privileged calls.

The BaaS architecture is actually a perfect situation for making privileged calls with CORS, because the server is wholly responsible for the user's identity and permissions.

[ Parent | on HN ]