REST Security With JWT Using Java and Spring Security | Toptal®
Disclaimer: This article is under review. Some of the content may be outdated. Security Security is the enemy of convenience, and vice versa. This statement is true for any system, virtual or real, from the physical house entrance to web banking platforms. Engineers are constantly trying to find the right balance for the given use case, leaning to one side or the other. Usually, when a new threat
RESTdoclet by IG-Group
Generating REST service documentation for the enterprise Download .zip Download .tar.gz View on GitHub Benefits Enables the creation of an enterprise REST service documentation web portal, providing a central port of call for service consumers Enables automatic generation of documentation from underlying service source code, thus ensuring the documentation is always up to date Features Displays Sp
Miredot | REST API Documentation Generator for Java
So You Want Developers to Your API? Miredot generates REST API documentation straight from your existing Java sources! Always up-to-date docs without the effort — No More Documentation Drift Miredot generates your documentation with each build so it is guaranteed to correspond to the implementation at all times. We only need your existing Java source code. You don't need to add anything!
Best Practices for Designing a Pragmatic RESTful API
Your data model has started to stabilize and you're in a position to create a public API for your web app. You realize it's hard to make significant changes to your API once it's released and want to get as much right as possible up front. Now, the internet has no shortage on opinions on API design. But, since there's no one widely adopted standard that works in all cases, you're left with a bunch
リソースモデリングパターン
Webアプリケーションã«ã¤ã„ã¦ã€RESTfulãªURL・リソースè¨è¨ˆã®ãƒ‘ターンを見出ã™ã“ã¨ã§ã€ ã©ã®ãƒ‘ターンã‹ã‚’判æ–ã™ã‚‹ã ã‘ã§ã€æ—¢å˜ã® Good Practice ãŒé©ç”¨ã§ãã‚‹ åå‰ã‚’ã¤ã‘ã¦å‘¼ã¹ã‚‹ã‚ˆã†ã«ã—ãŸã„ Railsãªã©ã®ãƒ•ãƒ¬ãƒ¼ãƒ ワークã§ç°¡å˜ã«é©ç”¨ã§ãるよã†ã«ã—ãŸã„ ã¨ã„ã†ã“ã¨ã‚’目指ã—ã¦ã„ã¾ã™ã€‚ ã»ã‚“ã¨ã†ã«å½¹ç«‹ã¤ã‹ ã“ã‚Œã¯ãƒ‘ターンã¨è¨€ãˆã‚‹ã®ã‹ ã‚‚ã£ã¨ä»–ã«ã‚‚ã‚ã‚‹ ã ã„ã¶ç²’度ãŒãƒãƒ©ãƒãƒ© åå‰ã®ä»˜ã‘方（パターンã¯åå‰é‡è¦ï¼‰ ãªã©ã€ãœã²ã”æ„見をãã ã•ã„。 パターン Collection & Member Resource パターン Singular (Singleton) Resource パターン Filtered Collection パターン Filtered Subresource パターン Multi-member Resource パターン Partial Resource パター
REST APIs must be hypertext-driven » Untangled
I am getting frustrated by the number of people calling any HTTP-based interface a REST API. Today’s example is the SocialSite REST API. That is RPC. It screams RPC. There is so much coupling on display that it should be given an X rating. What needs to be done to make the REST architectural style clear on the notion that hypertext is a constraint? In other words, if the engine of application stat
RESTful API Design, Second Edition
RESTful API Design, Second EditionAI-enhanced description This document provides guidance on designing RESTful APIs. It recommends using nouns instead of verbs, keeping URLs simple with only two endpoints per resource, and following conventions from leading APIs. Complex variations and optional parameters should be "swept behind the '?'." The document emphasizes designing for application developer
enunciate
Enunciate 1.7 Released! Enunciate 1.7 provides support for securing your Web service endpoints by leveraging the capabilities of Spring Security, including HTTP basic auth, remember-me tokens, form-based login, etc. Enunciate 1.7 also supports OAuth via OAuth for Spring Security. The 1.7 release also include support for custom REST content types (in addition to XML and JSON) and some bug fixes and
Java One 2009: Building Consistent RESTful APIs in a High Performance Environment
Java One 2009: Building Consistent RESTful APIs in a High Performance Environment " Code Alert! This is a part of our continuing series on Engineering at LinkedIn. If this isn’t your cup of Java, check back tomorrow for regular LinkedIn programming. In the meanwhile, check out some of our recent feature announcements, tips and tricks, or success stories. At this year's JavaOne conference Yegor Bor
ç§ãŒ RESTful API ã®å¾Œæ–¹äº’æ›æ€§ã‚’æ°—ã«ã™ã‚‹ã‚±ãƒ¼ã‚¹ - 岩本隆å²ã®æ—¥è¨˜å¸³ï¼ˆã‚¢ãƒ¼ã‚«ã‚¤ãƒ–）
å‰å›žã®è¨˜äº‹ã€ŒRESTクライアントãŒçŸ¥ã£ã¦ã„ã‚‹ã¹ãã“ã¨ã€ã«ã€id:nsiena ã•ã‚“ã‹ã‚‰ãƒˆãƒ©ãƒƒã‚¯ãƒãƒƒã‚¯ã‚’ã„ãŸã ãã¾ã—ãŸã€‚ RESTful API ã®å¾Œæ–¹äº’æ›æ€§ - Siena.ã®æ—¥è¨˜ æ–œã‚上ã®å¿œç”ã«ãªã£ã¦ã—ã¾ã†ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãŒã€æ€ã£ãŸã“ã¨ã‚’書ã„ã¦ã¿ã¾ã™ã€‚ API変更ã®æ€§æ ¼åˆ†é¡žã¨ã‚µãƒ¼ãƒãŒã¨ã‚Šã†ã‚‹å¯¾ç– ã¾ãšã€APIãŒã©ã®ã‚ˆã†ã«å¤‰æ›´ã•ã‚Œã‚‹ã‹åˆ†é¡žã—ã€ã‚µãƒ¼ãƒãŒå–ã‚Šã†ã‚‹å¯¾ç–ã‚’ã¾ã¨ã‚ã¦ã¿ã¾ã—ょã†ã€‚ API変更ã®æ€§æ ¼ サーãƒãŒã¨ã‚Šã†ã‚‹å¯¾ç–（概è¦ã®ã¿ï¼‰ リソースã®URIãŒå¤‰ã‚ã‚‹ ステータスコードã§ã€Œ301 Moved Permanentlyã€ã‚’è¿”ã—ã€Locationヘッダã§æ–°è¦URIã‚’è¿”ã™ã€‚ リソースã®ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ãŒå¤‰ã‚ã‚‹ Content-Typeヘッダã§é©åˆ‡ãªãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã‚’è¿”ã™ã€‚リクエストã®Acceptヘッダã«ã‚ˆã£ã¦ã¯ã€ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ã§ã€Œ406 Not Acceptableã€ã‚’è¿”ã•ãªã‘ã‚Œã°ãªã‚‰ãªã„ã‹ã‚‚
RESTクライアントãŒçŸ¥ã£ã¦ã„ã‚‹ã¹ãã“㨠- 岩本隆å²ã®æ—¥è¨˜å¸³ï¼ˆã‚¢ãƒ¼ã‚«ã‚¤ãƒ–）
クライアントã¨ã‚µãƒ¼ãƒã®å¯†çµåˆã‚’é¿ã‘られるã®ãŒã€RESTスタイルã«å¾“ã£ã¦å¾—られるメリットã®ã²ã¨ã¤ã§ã™ã€‚クライアントãŒã€ã‚¢ãƒ—リケーションã®æŒ™å‹•ã«é–¢ã™ã‚‹çŸ¥è˜ã‚’ã»ã¨ã‚“ã©æŒãŸãªãã¦ã‚ˆã„ã‚ã‘ã§ã™ã€‚ ã¨ã¯ã„ã£ã¦ã‚‚ã€ã¾ã£ãŸã何も知らãªã„ã§ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŸã‚Šãˆã¾ã›ã‚“。ã§ã¯ã€ä½•ã‚’知ã£ã¦ã„ã‚Œã°ã‚ˆã„ã®ã§ã—ょã†ã‹ã€‚ 知ã£ã¦ã„ã‚‹ã¹ã4点 ãã®ç”ãˆã¯ã€Roy T. Fielding ã«ã‚ˆã‚‹è¨˜äº‹ã€ŒREST APIs must be hypertext-drivenã€ã§ã€ã™ã§ã«ç¤ºã•ã‚Œã¦ã„ã¾ã™ã€‚下記ã®4ã¤ã§ã™ã€‚ 通信プãƒãƒˆã‚³ãƒ«ï¼ˆcommunication protocol） åˆæœŸURI（initial URI） メディアタイプ（media types） リンク関係（link relations） AtomPubを例ã«ã¨ã‚‹ã¨åˆ†ã‹ã‚Šã‚„ã™ã„ã§ã—ょã†ã€‚ 通信プãƒãƒˆã‚³ãƒ«ï¼HTTP åˆæœŸURIï¼ã‚µãƒ¼ãƒ“ス文書ã®URI メディアタイプï¼ã€Œa
続・コマンド的ãªå‡¦ç†ã‚’ã©ã†ã‚„ã£ã¦RESTfulã«å®Ÿè£…ã™ã‚‹ã‹ - 岩本隆å²ã®æ—¥è¨˜å¸³ï¼ˆã‚¢ãƒ¼ã‚«ã‚¤ãƒ–）
「コマンド的ãªå‡¦ç†ã‚’ã©ã†ã‚„ã£ã¦RESTfulã«å®Ÿè£…ã™ã‚‹ã‹ã€ã«æ›¸ã„ãŸå†…容を敷è¡ã—ã¾ã™ã€‚ Sunã®ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“スAPI 先日ã€Sun MicrosystemsãŒSun Cloudã¨ã„ã†ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“スをæä¾›ã™ã‚‹ã¨ç™ºè¡¨ã—ã¾ã—ãŸã€‚ ç±³Sunã€Amazon対抗ã®ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“ス「Sun Cloudã€ã‚’発表 - SourceForge.JP Magazine ã“ã®è¨˜äº‹ã«ã¯ã€ã‚¯ãƒ©ã‚¦ãƒ‰æ“作用APIãŒRESTベースã§æä¾›ã•ã‚Œã‚‹äºˆå®šã§ã‚ã‚‹ã“ã¨ã‚‚書ã‹ã‚Œã¦ã„ã¾ã™ã€‚ Sunã¯é–‹ç™ºè€…å‘ã‘ã«ã‚¯ãƒ©ã‚¦ãƒ‰API「Sun Open Cloud APIã€ã‚’æä¾›ã™ã‚‹ã€‚RESTベースã®APIã§ã€CreativeCommonsライセンスã®ä¸‹ã§ãƒªãƒªãƒ¼ã‚¹ã™ã‚‹ãŸã‚ã€é–‹ç™ºè€…ã¯Sun Cloudã¨ç›¸äº’é‹ç”¨æ€§ã®ã‚るクラウドを構築ã§ãã‚‹ã¨ã„ã†ã€‚ ãã®API仕様ã®ãƒ‰ãƒ©ãƒ•ãƒˆãŒã€ŒThe APIs for the Sun Cloud: Wiki: Hom
確èªç”»é¢å•é¡Œã¨ãƒªã‚½ãƒ¼ã‚¹ãƒ¢ãƒ‡ãƒªãƒ³ã‚° - çƒè³Šæ§˜
ã“ã®æ¡ä»¶ã§ã®ç¢ºèªç”»é¢å•é¡Œã¯ï¼Œãƒˆãƒ©ãƒ³ã‚¶ã‚¯ã‚·ãƒ§ãƒ³ãƒªã‚½ãƒ¼ã‚¹ã‚’å°Žå…¥ã—ãªãã¦ã‚‚，もã£ã¨ã‚·ãƒ³ãƒ—ルã«è€ƒãˆã¦è§£æ±ºã§ãã‚‹ã¨æ€ã„ã¾ã™ï¼Ž 処ç†å†…容：ユーザåã¨ãƒ‘スワードãŒå…¥åŠ›é …ç›®ã¨ãªã‚‹ãƒ¦ãƒ¼ã‚¶ç™»éŒ²å‡¦ç† ç”»é¢é·ç§»ï¼šç™»éŒ²ç”»é¢â†’確èªç”»é¢â†’çµæžœç”»é¢ 確èªç”»é¢å•é¡Œã¯ãƒˆãƒ©ãƒ³ã‚¶ã‚¯ã‚·ãƒ§ãƒ³ãƒªã‚½ãƒ¼ã‚¹ã®å°Žå…¥ã§è§£æ±ºã§ãã‚‹ã®ã§ã¯ - 岩本隆å²ã®æ—¥è¨˜å¸³ï¼ˆã‚¢ãƒ¼ã‚«ã‚¤ãƒ–） ã¾ãšä¸Šè¨˜ã®æ¡ä»¶ã‹ã‚‰æ¬¡ã®äº‹ãŒè¨€ãˆã‚‹ã¨æ€ã„ã¾ã™ï¼Ž ユーザ登録処ç†ã¨ã¯ãƒ¦ãƒ¼ã‚¶ãƒªã‚½ãƒ¼ã‚¹ã®ä½œæˆå‡¦ç†ã¨è€ƒãˆã‚‰ã‚Œã‚‹ ç”»é¢ã¯ã‚ãã¾ã§ãƒªã‚½ãƒ¼ã‚¹çŠ¶æ…‹ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã‚‚ã®ãªã®ã§ï¼Œç”»é¢é·ç§»ã¨ã¯ãƒ¦ãƒ¼ã‚¶ãƒªã‚½ãƒ¼ã‚¹ã®çŠ¶æ…‹ã‚’都度表示ã—ã¦ã„ã‚‹ã‚‚ã® ã¨ã„ã†ã“ã¨ã§ï¼Œã‚ãã¾ã§ãƒ¦ãƒ¼ã‚¶ãƒªã‚½ãƒ¼ã‚¹ã¨ãã‚Œã«å¯¾ã™ã‚‹ CRUD（ã“ã®å ´åˆã¯ DELETE ã¯ãªã„ãŒï¼‰ã¨ã—ã¦è€ƒãˆã‚Œã°ã„ã„ã‹ãªï¼Œã¨ï¼Ž ã¾ãšæœ€åˆã®ç™»éŒ²ç”»é¢ã¯ãƒ¦ãƒ¼ã‚¶ä½œæˆãƒ•ã‚©ãƒ¼ãƒ リソースをå–å¾—ã—ã¾ã™ï¼Ž GET /users/new登録画é¢ã‹ã‚‰ç¢ºèªç”»é¢ã®ã¨ã“ã‚ã¯ãƒ¦ãƒ¼ã‚¶ãƒªã‚½ãƒ¼ã‚¹ã®æ–°è¦ä½œæˆã¨
メンテナンス
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - gu-fan/riv.vim: Notes and Wiki with rst.
Thoughts on RESTful API Design
IBM Developer
Amazon.co.jp: Webを支ãˆã‚‹æŠ€è¡“ -HTTPã€URIã€HTMLã€ãã—ã¦REST (WEB+DB PRESSプラスシリーズ): 山本陽平: 本
The Definitive TypeScript Guide - Blog | SitePen
http://thoughtpad.net/alan-dean/http-headers-status.png
Abstraction and control in REST vs RPC (Eric Newcomer's Weblog)
{{#tags}}- {{label}}
{{/tags}}