Ukuqinisekiswa kwe-API

Ikhasi elithi „Ukuqinisekisa ubuwena kwe-API kuZentor ngaphandle kwesikhiye se-API“ liphatha isigaba somsebenzi esibizwe ku-URL. Okuqukethweyo okukhona kwengezelelwa ngenqubo yeqiniso, izidingo kanye lemikhawulo eyaziwayo. UZentor kalalo uhlelo lwezikhiye ze-API zabathuthukisi. Ku-dashboard kusetshenziswa ama-Session-JWT asebenza amahola alitshumi lambili lama-Refresh-Token asebenza insuku eziyisikhombisa; i-TOTP le-SSO kakusikho okumele. Ama-Embed-Token e-widget aboniswa kanye kuphela ngombhalo ocacileyo njalo abotshelwe kuma-Origin avunyelweyo.

UZentor kanikezi uhlelo olujwayelekileyo lwezikhiye ze-API zabathuthukisi. Ku-dashboard kusetshenziswa ama-Session-JWT asebenza amahola alitshumi lambili lama-Refresh-Token asebenza insuku eziyisikhombisa. I-TOTP le-SSO kuyatholakala njengokungakhethwa.

I-widget isebenzisa i-Embed-Token, eboniswa kanye kuphela ngombhalo ocacileyo. Ngaphezu kwalokho i-Origin iyahlolwa. Ngakho i-token lokuvunyelwa kwe-domain kuhamba ndawonye; i-token efaneleyo evela ku-Origin engavunyelwanga kayenelisi.

Ama-Session-JWT lama-token e-widget kakumelanga afike ezindaweni zokugcina ikhodi, kumalogi omphakathi kumbe ezibonelweni zencwadi echazayo. Ngemva kokuphelelwa yisikhathi kumbe ukuhoxiswa, uhlelo kumele ngokubophayo lusebenzise inqubo ehleliweyo yokuvuselela kumbe yokungena.

Imizila yangaphakathi ye-dashboard leye-Master-Admin kayisiyo ingxenye ye-API yomphakathi yabathuthukisi. Ukungena okuphumeleleyo kunika imvumo kuphela ngaphakathi kwendima lomqashi osebenzayo. Ukuhlanganiswa kakumelanga kuthathe ama-endpoint angaphakathi njengesixhumi somphakathi esizinzileyo.

Ngakho ekhasini elithi „Ukuqinisekisa ubuwena kwe-API kuZentor ngaphandle kwesikhiye se-API“ kusebenza lokhu: umbhalo omfitshane osuvele ukhona wandiswa waba yisiqondiso esithembekileyo, ngaphandle kokuthembisa imisebenzi yomkhiqizo engaphandle kwesimo somkhiqizo esiqinisekisiweyo. Okuqakathekileyo kuhlala kuyimithombo yamaqiniso eqinisekisiweyo lobulungiselelo obubonakalayo phakathi komqashi loZentor. Nxa kukhona umehluko, kumele kuhlale kukhulunywa khona kanye le-URL, umqashi othintekayo lesinyathelo esibonwe.

Nxa lisebenza lokuthi „ukuqinisekiswa kobuwena kwe-API“, isinyathelo ngasinye kumele kuqala sihlolwe ngesimo sokuhlola esilawulwayo. Okuqakathekileyo yikuthi isilungiselelo esibonakalayo, isimo seqiniso sesistimu lomphumela olindelweyo kuyavumelana. Nxa kukhona umehluko, isikhathi esiqondileyo, umqashi othintekayo, isiteshi esisetshenzisiweyo lomlayezo wephutha ongantshintshwanga kuyasiza ekuhlaziyeni. Imininingwane yokungena, ama-token lokuqukethweyo komuntu kakumelanga kufakwe kuzithombe zesikrini kumbe emibhalweni yokusekela.