February 2021
Beginner to intermediate
372 pages
6h 48m
Korean
Content preview from 웹 애플리케이션 보안: 정찰, 공격, 방어 세 단계로 배우는 웹 애플리케이션 보안의 모든 것
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
68
1
부
정찰
3.2
REST
API
API
를 정의하는 훌륭한 방법인
REST
는 다음과 같은 고유한 특징을 지닌다.
클라이언트와 독립적이어야 한다
REST
API
는 고도의 확장성을 가지면서도 단순한 웹 애플리케이션을 구축하도록 설계됐다.
클라이언트를
API
와 분리하되 엄격한
API
구조를 따름으로써 클라이언트 애플리케이션이
데이터베이스를 호출하거나 서버 측 로직 자체를 수행하는 일 없이 쉽게 리소스를 요청할
수 있다.
상태를 저장하지 않는다
REST
API
는 입력을 받아 출력을 제공하기만 한다.
API
는 클라이언트 연결과 관련해 어떠
한 상태도 저장해서는 안 된다. 그렇지만
REST
API
가 인증과 권한 부여를 수행하지 못하는
것은 아니다. 권한 부여는 토큰화되어 요청할 때마다 전송된다.
쉽게 캐시할 수 있어야 한다
인터넷에서 웹 애플리케이션을 적절히 확장하기 위해
REST
API
는 반드시 캐시 가능 여부
를 쉽게 표시할 수 있어야 한다.
REST
는 어느 엔드포인트가 어떤 데이터를 제공할 것인지
에 대해 매우 엄격하게 정의하므로 적절하게 설계된
REST
API
에서 이것을 아주 쉽게 구성
할 수 있다. 권한이 있는 정보가 다른 사용자에게 실수로 누설되는 것을 방지하기 위해 프로
그래밍으로 캐시를 관리하는 것이 이상적이다.
엔드포인트는 특정 객체나 메서드를 정의해야 한다
엔드포인트는 보통 계층적으로 정의된다 (예:
/
moderators
/
joe
/
logs
/
12
_
21
_
2018
). 그
렇게 함으로써
REST
API
는
GET
,
POST
,
PUT
,
DELETE ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.