Use https for services about rompr HOT 6 CLOSED

There are no SSL endpoints for those APIs.

https://www.last.fm/api/intro

https://wiki.musicbrainz.org/Development/JSON_Web_Service

Spotify is already done over SSL

from rompr.

This returns the same result for me?

http://musicbrainz.org/ws/2/artist/5b11f4ce-a62d-471e-81fc-a69a8278c7da?inc=aliases&fmt=json

https://musicbrainz.org/ws/2/artist/5b11f4ce-a62d-471e-81fc-a69a8278c7da?inc=aliases&fmt=json

It seems ro direct to the https in my browser. Curl returns some results over https as well

curl -v https://musicbrainz.org/ws/2/artist/5b11f4ce-a62d-471e-81fc-a69a8278c7da?inc=aliases&fmt=jso

Not sure if it is applicable.

While on it, there is the proxy option you have in the settings. Is that for the server or the client? If I use proxy will the results fetched over proxy?

from rompr.

Well it might work but if it's not in the documentation I'm reluctant to use it as it might not be supported.

The proxy option is a little tricky to explain.

Almost all requests from the RompR browser application are proxied via your webserver. So for example, any request to musicbrainz is sent to your webserver first, and the webserver forwards it on, caches the result, and then returns the result to the browser. This is for two reasons: Firstly so I can cache the responses, which dramatically reduces the number of external requests RompR makes and help to stop me exceeding rate limits. and Secondly because cross-site JSON requests are forbidden by browser security policies so I have to do it this way or nothing would work.

The exception to this is any write request to the Last.FM API, which is sent directly from the browser, and possibly one or two other things which currently I can't remember.

What this means is that if you want all your RompR traffic to be sent via an external proxy you should configure the proxy in your browser AND in RompR, which will make the webserver forward requests on via the proxy.

I have never used nor tested the proxy option, it's a simple couple of flags in cURL. I have no idea what effect configuring a proxy in your browser will have on your ability to talk to your webserver. I have no idea what protocols the cURL proxy settings actually support. I have no means of testing it either so if it doesn't work it will be very difficult indeed for me to fix it.

from rompr.

HI

Thanks for explaining the internal workflow of this. It all makes sense now.

I am going to do the proxy stuff in the browser. Is the audioscrobbler stuff send from the browser or sent from the server?

I want to proxy the server as well but I do not want to do a systemwide proxy for my server. Do you know if it is possible proxy http request (in Apache) per page like Rompr only? I would look up online but apache proxy returns mostly reverse proxies which is not what I am trying to do here.

from rompr.

Everything is sent from the server except write requests to audioscrobbler.com (which would only happen if you're logged in the Last.FM and have scrobbling enabled)

The proxy configuration in Rompr only applies to Rompr, all requests from Rompr will be sent through your proxy.

from rompr.

Ok thanks, I will see what I can do with this proxy stuff.

from rompr.