cancel
Showing results for 
Search instead for 
Did you mean: 

Can SAP's OData Framework be used as API endpoint?

a_sirotin
Explorer
0 Kudos

Hello together,

can the OData Interfaces be seen as alternative of RFC? Because it seems OData is only an interface for browser-based apps like UI5, but it cannot be used for API endpoints.

According to following reference, OData is not really REST-full since its not stateless due to the usage of cookies. Also the X-CSRF-Token is actually only designed for browser:

https://security.stackexchange.com/questions/166724/should-i-use-csrf-protection-on-rest-api-endpoin...

How do you see SAP's OData? Is there maybe differences between RAP-OData and the ODatas you create via Tx SEGW? Background is, I hear concerns in my company regarding security standards and that such interfaces actually cannot be used as API endpoints.

Thank you.

View Entire Topic
thomas_mller13
Participant
0 Kudos

You can implement directly a web service and register it at SICF. Why using Odata? Makes things complicated and slow. The only reason for all that overhead (gateway...) is generating consulting demand.

a_sirotin
Explorer
0 Kudos

thanks. Do you ve some tutorials / references for that? Which kind of SAP web service do you mean?

a_sirotin
Explorer
0 Kudos
I have looked into it. Thank you! So OData makes less sense, if you are not using them for UI5-Apps?
thomas_mller13
Participant
0 Kudos
You can use it. But it is so much overhead.