Best way to transmit entire Javascript Objects over a REST API in Node.js

Question

I'm trying to figure out how to transmit a JS (not JSON) over a REST API, basically the idea is that the client can send the object with functions () that will provide the functionality for posterior execution.

For example How to transmit

var jsObj = {
 a: 1
 b: function () { console.log("B") }
}

from Node A to Node B, so that now Node B knows how to execute b()

Thank you

I guess transferring the file with the javascript and then doing eval would work, not sure if that's the best way to work it around :( — David Dias
– David Dias, Commented Aug 28, 2013 at 0:37
How can you trust what the client sends is safe to execute? As an example, they could use the child_process module to spawn an executable to wreak havoc on your system. — WiredPrairie
– WiredPrairie, Commented Aug 28, 2013 at 1:11
LOL you said "posterior execution" ;). David is right, eval() would be the only way to make that work, but that could get messy. This sounds like a usecase for JSONP with an authentication token. It would probably be cleaner to just authenticate a <script> transfer then it would just be evaluated normal. I'm pretty sure this idea is not something associate with REST or CRUD, I could be wrong. — Dylan
– Dylan, Commented Aug 28, 2013 at 1:29
"posterior execution" Ahah that's what happens when you try to speak english thinking in portuguese XD Currently I'm not worried about command injection, I can always authenticate the data with PubKey and avoid replay attacks with vector clocks later @Dylan I'm trying to pull this off with Node.js node to Node.js node, no script tags in the middle, JSONP could be it, but so far it's dropping the JSON functions, could you show me an example? Thank you! — David Dias
– David Dias, Commented Aug 28, 2013 at 1:54

tandrewnichols · Accepted Answer · 2013-08-28 03:02:26Z

1

If you are in control of both services, why not just have Node A report a string API endpoint to Node B that Node B can hit with certain data? Like

var jsObj = {
    a: 1
    b: "http://api.somedomain.com/api/b/"
};

And then have Node B call that endpoint with whatever data is necessary (in this example with mikeal's request module):

request.get(jsObj.b + "helloworld");

And have a route in Node B that matches /api/b/:param and a function to handle it (not sure what you're using for routing - this is sort of an express specific example).

This is kind of the idea behind service oriented architecture: each service knows how to handle a subset of functionality and the services talk to each other to complete tasks.

answered Aug 28, 2013 at 3:02

tandrewnichols

3,4561 gold badge31 silver badges33 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

David Dias Over a year ago

Thank you @tandrewnichols , the thing is that I really want to pass functionality, this is an hardware thing, the code on remote depends on the devices attached, and it has to be modular enough that everyone can write tiny easy controllers for all sorts of things and deploy them, I guess I will have to go with a file transfer(cipher, signed, all the security things) and then require it like a node module to make this happen.

Collectives™ on Stack Overflow

Best way to transmit entire Javascript Objects over a REST API in Node.js

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related