本当に使ってよかったOpenAPI (Swagger) ツール | フューチャー技術ブログ
サードパーティ製のツール本家からは上述のツールが提供されていますが、サードバーティ製の様々なツールが世の中には存在します。 エコシステムが成熟しているのもSwaggerを利用するメリットの1つですね。 https://openapi.tools/ 冒頭のとおり、このサードパーティ製のツールの中で実際に利用して良かったツールを3つご紹介したいと思います。 Stoplight Studiohttps://stoplight.io/studio/ 1つ目のツールは「Stoplight Studio」というAPI仕様を記載するためのGUIエディタとなります。 今までSwagger Editorを利用してYAMLを書いていたそこのみなさん、YAML筋力はもう必要ありません。 Design APIs 10x faster の謳い文句どおり、Stoplight Studioを使えばGUIで直感的に、高速
NewStore TechTalk - Advanced Testing with Go by Mitchell Hashimoto
Tech star Mitchell Hashimoto talks about "Advanced Testing with Go". Recorded in Berlin on March 15, 2016. Hosted by NewStore. Join our meet up group: http://www.meetup.com/NewStore/ Follow us: https://twitter.com/techtalks_NS Slides: https://speakerdeck.com/mitchellh/advanced-testing-with-go Description: Distributed systems, multi-process RPC, platform-specific code, side-effect dependent be
Advanced Testing in Go
Go is used everywhere at Hashicorp. It has been the primary language for the past 5 years. Their projects have a number of properties that make testing "interesting": Deployed by millions, plus significantly in enterprise Distributed systems (Consul, Serf, Nomad, etc.) Extreme performance (Consul, Nomad) Security (Vault) Correctness (Terraform, but also Consul, Nomad, Vault) There are two parts to
Testing Go services using interfaces
Time to share some strategies for creating testable Go services using interfaces and generated mocks. Table of Contents Defining the goal posts Planning for testability Defining the data model The repository layer The interface The default implementation Testing the default implementation External API clients The interface The default implementation Services The interface The default implementatio
React.js Tutorial: The Complete React Introduction
You can count on this guide to always be recent. We update it after every major change in React. It was last updated after the 17.0 release. Before you begin, please note that this is a beginner-friendly guide that covers the concepts I classify as fundamentals for working with React. It is not a complete guide to React but rather a complete introduction. At the end of this guide, I list a few nex
Fractal — A react app structure for infinite scale | HackerNoon
Too Long; Didn't ReadAfter having worked with <a href="https://hackernoon.com/tagged/react" target="_blank">React</a> and flux (<a href="https://hackernoon.com/tagged/redux" target="_blank">Redux</a>) with over 8 significant projects (100+ screens each), we learned a few things about React apps. After having worked with React and flux (Redux) with over 8 significant projects (100+ screens each), w
What's the difference between INNER JOIN, LEFT JOIN, RIGHT JOIN and FULL JOIN?
An SQL JOIN clause is used to combine rows from two or more tables, based on a common field between them. There are different types of joins available in SQL: INNER JOIN: returns rows when there is a match in both tables. LEFT JOIN: returns all rows from the left table, even if there are no matches in the right table. RIGHT JOIN: returns all rows from the right table, even if there are no matches
PKCE で防げる「認可コード横取り攻撃」とはどのような攻撃か - Qiita
「どうすればそれを実装できるか？」は理解に易くても、 「何故そういう仕組みになったのか？」といったところに焦点を当てた丁寧な解説って、あまりなかったりしますよね。 自分自身、残念ながら腑に落としきれないまま実装することが少なくなかったり、 世の中に出回っているサービスでも、 仕様の意味をきちんと理解されていないのかパラメータが本来の目的で使われておらず隙が発生してしまっているものが存在したり･･･。 ということで、 PKCE について、自分が知っている範囲でメモ残しておこうと思います。 本来あるべきを考える PKCEとは？ PKCEは、OAuth 2.0 の拡張仕様で、 Public Client が被り得る「認可コード横取り攻撃」を防ぐためのものです。 ぴくしーと読みます。OAuthのセキュリティを守る妖精さん 仕様はこれ Proof Key for Code Exchange by O
OAuth & OpenID Connect 関連仕様まとめ - Qiita
はじめに OAuth や OpenID Connect に関連する仕様を紹介していこうと思います。 仕様はたくさんあるものの、ほとんどオプショナルです。しかし、「認可サーバーを実装する際は、RFC 6749 だけではなく、認可コード横取り攻撃への対抗策である RFC 7636 も実装すべきである」* という点は強調しておきたいと思います。 * 「PKCE: 認可コード横取り攻撃対策のために OAuth サーバーとクライアントが実装すべきこと」という記事もご参照ください。 1. OAuth 2.0 (RFC 6749) OAuth 2.0 の仕様の本体は RFC 6749 (The OAuth 2.0 Authorization Framework) です。RFC 6749 の解説記事は世の中にたくさんあるので、ここでは要点だけ手短に紹介します。 RFC 6749 は、アクセストークンを発行
The New RBAC: Resource-Based Access Control
The Stormpath API shut down on August 17, 2017. Thank you to all the developers who have used Stormpath. This article discusses how security policies are managed using the concept of Roles and how the predominant role-based mechanism for securing applications is largely insufficient. I discuss what I believe is a much better way of securing applications. What is a Role? When speaking about applic
the morning paper | a random walk through Computer Science research, by Adrian Colyer
TLDR; this is the last edition of The Morning Paper for now. Plus: one strand of research you won’t want to miss! I was listening to a BBC Radio 4 podcast recently (More or Less: Behind the Stats - Ants and Algorithms) in which the host Tim Harford is interviewing David Sumpter about his recent ... Continue Reading An overview of end-to-end entity resolution for big data, Christophides et al., ACM
[PDF]Understanding Real-World Concurrency Bugs in Go
Understanding Real-World Concurrency Bugs in Go Tengfei Tu∗ BUPT, Pennsylvania State University tutengfei.kevin@bupt.edu.cn Xiaoyu Liu Purdue University liu1962@purdue.edu Linhai Song Pennsylvania State University songlh@ist.psu.edu Yiying Zhang Purdue University yiying@purdue.edu Abstract Go is a statically-typed programming language that aims to provide a simple, efficient, and safe way to build
Casbin · An authorization library that supports access control models like ACL, RBAC, ABAC for Golang, Java, C/C++, Node.js, Javascript, PHP, Laravel, Python, .NET (C#), Delphi, Rust, Ruby, Swift (Objective-C), Lua (OpenResty), Dart (Flutter) and Elixir |
CasbinAn authorization library that supports access control models like ACL, RBAC, ABAC for Golang, Java, C/C++, Node.js, Javascript, PHP, Laravel, Python, .NET (C#), Delphi, Rust, Ruby, Swift (Objective-C), Lua (OpenResty), Dart (Flutter) and Elixir Hybrid access control modelsIn Casbin, an access control model is abstracted into a CONF file based on the PERM metamodel (Policy, Effect, Request, M
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Mini Tokyo 3D
What UIDAI doesn’t tell you about offline use of Aadhaar
X-Road® Developer Resources — X-Road® Data Exchange Layer
Security and safety — e-Estonia
http://portal.oas.org/LinkClick.aspx?fileticket=AJc0N2M3mmc%3D&tabid=1729
e-Estonia: e-Governance in Practice
Password Best Practices for Today | Pluralsight