Screencast: APIs schützen
Es gibt viele Möglichkeiten den Zugriff auf APIs zu schützen. In diesem Screencast zeigt Ryan erst einen möglichen Schutz über HTTP Basic Auth und später über Tokens die als Parameter übertragen werden.
Downloads in verschiedenen Formaten:
Resourcen:
- Episode 350: REST API Versioning
- HTTP Basic Authentication
- HTTP Token Authentication
- OAuth
- Doorkeeper
- oauth2
- rack-oauth2-server
- oauth2-provider
terminal
rails g model api_key access_token curl http://localhost:3000/api/products -I curl http://localhost:3000/api/products -u 'admin:secret' curl 'http://localhost:3000/api/products?access_token=123' -I curl http://localhost:3000/api/products -H 'Authorization: Token token="c576f0136149a2e2d9127b3901015545"'
api/v1/products_controller.rb
# http_basic_authenticate_with name: "admin", password: "secret"
before_filter :restrict_access
private
# def restrict_access
# api_key = ApiKey.find_by_access_token(params[:access_token])
# head :unauthorized unless api_key
# end
def restrict_access
authenticate_or_request_with_http_token do |token, options|
ApiKey.exists?(access_token: token)
end
end
models/api_key.rb
before_create :generate_access_token
private
def generate_access_token
begin
self.access_token = SecureRandom.hex
end while self.class.exists?(access_token: access_token)
end
Eingestellt am 31.05.2012 um 11:37
Kategorie: Tutorials
Suchen auf rubyonrails.de
Tags
2.0 ActiveRecord Ajax Authentication Buch Capistrano Controller Enterprise Event Formulare Gewinnspiel Grundlagen IDE irb jQuery Kochbuch Konferenz MySQL OReilly Passenger Performance Phusion Plugin PragProgs Rails Rails 3 Rails 3.1 Release Release Candidate Routing Ruby RubyGems rubyonrails.de Ryan Bates Sass Screencast Script-Tip Security Test Tools Tutorial Upgrade Video Views WindowsAktuelle Artikel
- Ruby on Rails Volltextsuche mit ElasticSearch und Tire
- VHS on Rails
- Screencast: Bildbearbeitung mit RMagick
- Screencast: Bullet
- Screencast: Ransack
- Screencast: MiniProfiler
- Screencast: Sidekiq
- Screencast: Active Records Reputation System
- Screencast: Datenexport nach Excel oder CSV
- Screencast: Authentifizierung über Facebook
Artikel Archiv
- October 2012
- August 2012
- July 2012
- May 2012
- April 2012
- March 2012
- February 2012
- January 2012
- December 2011
- November 2011
- October 2011
- September 2011
- August 2011
- July 2011
- June 2011
- May 2011
- April 2011
- March 2011
- February 2011
- January 2011
- December 2010
- November 2010
- October 2010
- September 2010
- August 2010
- July 2010
- June 2010
- May 2010
- April 2010
- March 2010
- February 2010
- January 2010
- December 2009
- November 2009
- October 2009
- September 2009
- August 2009
- July 2009
- May 2009
- April 2009
- March 2009
- February 2009
- December 2008
- November 2008
- August 2008
- July 2008
- June 2008
- May 2008
- March 2008
- February 2008
- January 2008
- December 2007
- November 2007
- October 2007
- September 2007
Aktuelle Rails Version + Abhängigkeiten:
Gem rails-3.0.0actionmailer (= 3.0.0, runtime)
actionpack (= 3.0.0, runtime)
activerecord (= 3.0.0, runtime)
activeresource (= 3.0.0, runtime)
activesupport (= 3.0.0, runtime)
bundler (~> 1.0.0, runtime)
railties (= 3.0.0, runtime)
Rails auf Rubyforge
Rails auf Github
