Ungqinisiso lwe-API

Iphepha elithi „Ukuqinisekiswa kwe-API kwi-Zentor ngaphandle kwesitshixo se-API“ lijongana nommandla womsebenzi ochazwe kwi-URL. Umxholo okhoyo wongezwa ngenkqubo yokwenyani, iimfuno nemida eyaziwayo. I-Zentor ayinayo inkqubo yezitshixo ze-API zabaphuhlisi. Kwi-dashboard kusetyenziswa ii-Session-JWT ezinexesha leeyure ezilishumi elinesibini nee-Refresh-Token ezinexesha leentsuku ezisixhenxe; i-TOTP ne-SSO azinyanzelekanga. Ii-Widget-Embed-Token ziboniswa kanye ngombhalo ocacileyo kwaye zibotshelelwe kwii-Origin ezivunyiweyo.

I-Zentor ayinikezeli ngenkqubo jikelele yezitshixo ze-API zabaphuhlisi. Kwi-dashboard kusetyenziswa ii-Session-JWT ezinexesha leeyure ezilishumi elinesibini nee-Refresh-Token ezinexesha leentsuku ezisixhenxe. I-TOTP ne-SSO ziyafumaneka ngokuzikhethela.

I-widget isebenzisa i-Embed-Token eboniswa kanye kuphela ngombhalo ocacileyo. Ukongeza, i-Origin iyahlolwa. Ngoko ke i-token nemvume yedomeyini zihamba kunye; i-token esebenzayo evela kwi-Origin engavumelekanga ayanelanga.

Ii-Session-JWT nee-token ze-widget akufuneki zingene kwii-repository zekhowudi yomthombo, kwiilogi zoluntu okanye kwimizekelo yamaxwebhu. Emva kokuphela okanye ukurhoxiswa, isicelo kufuneka sisebenzise ngokubophelelayo inkqubo elungiselelweyo yokuhlaziya okanye yokungena.

Iindlela zangaphakathi ze-dashboard neze-Master-Admin aziyonxalenye ye-API yoluntu yabaphuhlisi. Ukungena ngempumelelo kunika amalungelo kuphela ngaphakathi kwendima ne-tenant esebenzayo. Ukudityaniswa akufuneki kuphathe iindawo zokuphela zangaphakathi njengojongano loluntu oluzinzileyo.

Kwiphepha elithi „Ukuqinisekiswa kwe-API kwi-Zentor ngaphandle kwesitshixo se-API“ ngoko kusebenza oku: umbhalo omfutshane okhoyo wandiswa ube sisikhokelo esithembekileyo, ngaphandle kokuthembisa imisebenzi engaphandle kwemeko eqinisekisiweyo yemveliso. Okugqibayo kuhlala kukumithombo yeenyani eqinisekisiweyo nakuxanduva olubonakalayo phakathi kwe-tenant ne-Zentor. Xa kukho umahluko, kufuneka kuhlale kukhankanywa kanye le URL, i-tenant echaphazelekayo nenyathelo elibonwe.

Xa usebenza ngo-„api-authentifizierung“, inyathelo ngalinye kufuneka liqale lihlolwe ngemeko yovavanyo elawulwayo. Okubalulekileyo kukuba isicwangciso esibonakalayo, isimo sokwenyani senkqubo nesiphumo esilindelekileyo ziyahambelana. Xa kukho umahluko, ixesha elichanekileyo, i-tenant echaphazelekayo, ijelo elisetyenzisiweyo nomyalezo wempazamo ongatshintshwanga ziyanceda kuhlalutyo. Iinkcukacha zokungena, ii-token nomxholo wobuqu akufuneki zifakwe kwiiskrini okanye kwimibhalo yenkxaso.