I need to make almost all my models available from a webservice.
My webservice needs to return JSON.
Is there any “standard” to do a JSON webservice like SOAP?
What about authentification? I need my ws privatly accessible, what the best practice for this?
Sometimes, it seems that webservice client needs to provide login/password for each call, is it a best practice, can’t we do something better?
You can use OAuth for application and user authentication. it is also possiblke to combine it with openID in case you don’t want to be the authenticator.
Note thaet there are Oauth 1.0a and 2.0 which are pretty different.