Ukuqinisekiswa kwe-API

Ikhasi elithi „Ukuqinisekisa ubunikazi kwe-API ku-Zentor ngaphandle kokhiye we-API“ liphathelene nendawo yokusebenza eboniswe ku-URL. Okuqukethwe okukhona kwengezwa ngenqubo yangempela, izimfuneko nemikhawulo eyaziwayo. I-Zentor ayinaso isistimu yokhiye be-API bonjiniyela. Kudashibhodi kusetshenziswa ama-JWT eseshini ahlala amahora ayishumi nambili nama-refresh token ahlala izinsuku eziyisikhombisa; i-TOTP ne-SSO kungokungakhethwa. Ama-widget embed token aboniswa kanye kuphela ngombhalo ocacile futhi aboshelwe kuma-origin avunyelwe.

I-Zentor ayinikezi isistimu ejwayelekile yokhiye be-API bonjiniyela. Kudashibhodi kusetshenziswa ama-JWT eseshini ahlala amahora ayishumi nambili nama-refresh token ahlala izinsuku eziyisikhombisa. I-TOTP ne-SSO kuyatholakala uma uthanda.

I-widget isebenzisa i-embed token eboniswa kanye kuphela ngombhalo ocacile. Ngaphezu kwalokho, i-origin iyahlolwa. Ngakho i-token nokuvunyelwa kwesizinda kuhambisana; i-token evumelekile evela ku-origin engavunyelwe ayenele.

Ama-JWT eseshini nama-widget token akufanele angene kuma-repository ekhodi yomthombo, kumarekhodi omphakathi noma ezibonelweni zemibhalo. Ngemva kokuphelelwa yisikhathi noma ukuhoxiswa, uhlelo lokusebenza kufanele lusebenzise inqubo ehlosiwe yokuvuselela noma yokungena.

Imizila yangaphakathi yedashibhodi neye-Master-Admin ayiyona ingxenye ye-API yomphakathi yonjiniyela. Ukungena okuphumelelayo kunikeza imvume kuphela ngaphakathi kwendima ne-tenant esebenzayo. Ukuxhumana akufanele kuthathe ama-endpoint angaphakathi njengesixhumi esizinzile somphakathi.

Ngakho-ke ekhasini elithi „Ukuqinisekisa ubunikazi kwe-API ku-Zentor ngaphandle kokhiye we-API“ kusebenza lokhu: umbhalo omfushane obukhona kusengaphambili unwetshwa ube umhlahlandlela othembekile, ngaphandle kokuthembisa imisebenzi yomkhiqizo engaphandle kwesimo somkhiqizo esiqinisekisiwe. Okuhlala kubalulekile yimithombo yamaqiniso eqinisekisiwe nokwabelana kwemisebenzi okubonakalayo phakathi kwe-tenant ne-Zentor. Uma kukhona ukuhluka, kufanele kuhlale kushiwo le URL ngqo, i-tenant ethintekayo nesinyathelo esibonwe.

Lapho usebenza ne-„api-authentifizierung“, isinyathelo ngasinye kufanele siqale sihlolwe ngecala lokuhlola elilawulwayo. Okubalulekile ukuthi isilungiselelo esibonakalayo, isimo sangempela sesistimu nomphumela olindelekile kuyahambisana. Uma kukhona ukuhluka, isikhathi esiqondile, i-tenant ethintekayo, isiteshi esisetshenzisiwe nomlayezo wephutha ongashintshiwe kusiza ekuhlaziyeni. Imininingwane yokungena, ama-token nokuqukethwe komuntu siqu akufanele kufakwe kuma-screenshot noma emibhalweni yosizo.