¥Í¥Ã¥È¥ï¡¼¥¯¥×¥í¥°¥é¥ß¥ó¥°ÆÃÏÀ

Size: px

Start display at page:

Download "¥Í¥Ã¥È¥ï¡¼¥¯¥×¥í¥°¥é¥ß¥ó¥°ÆÃÏÀ"

ふじよしつくとの
4 years ago
Views:

1 11 : HTML5 : API REST API OAuth 1 / 29

2 weather Yahoo myapp/: OAuth google API 2 / 29

3 What is API? API: Application Program Interface API? API? (?) (= ) API 3 / 29

Facebook と API SNS をベースとしたサービス提供プラットフォーム API の主な機能 Graph API (Social Graph にアクセスする API) FQL (Facebook Query Language) API App 3. App 実行 (PHP) Browser 1.

4 Facebook と API SNS をベースとしたサービス提供プラットフォーム API の主な機能 Graph API (Social Graph にアクセスする API) FQL (Facebook Query Language) API App 3. App 実行 (PHP) Browser 1. Facebook 画面内で 3rd Party s App をクリック Facebook Server 4. Iframe 内で表示 2. アクセス Facebook Library (PHP-SDK) Web Apps Server (3rd Party) このほかに UA 上で動作する JavaScript SDK も提供されている

5 Categories of network service APIs API JavaScript JS API JS URI JS URI xhr (CORS ) API SOAP WSDL (web services description language) WSDL REST ( ) JSON /JSONP XML : WebHook 5 / 29

6 API 1: Google Adsense <script type="text/javascript"> google_ad_client = "pub "; google_ad_width = 120;... </script> <script type="text/javascript" src=" </script> 6 / 29

7 API 2: Amazon Widget <SCRIPT charset="utf-8" type="text/javascript" src=" n-adsystem.com/widgets/q?serviceversion= &marketplace=jp&id=v %2FJP%2Fwidgetsamazon-22%2F8009%2F9744abd0-deec-4332-ac5a-f514b5 bfd3e5&operation=getscripttemplate"> </SCRIPT> <NOSCRIPT><A rel="nofol low" HREF=" &MarketPlace=JP&ID=V %2FJP%2Fwidgetsamazon-22%2F8009%2F9 744abd0-deec-4332-ac5a-f514b5bfd3e5&Operation=NoScript">Amazon.co.jp </A></NOSCRIPT> / 29

8 Server-side Mashup ( CGI) API (UA JS Client-side Mashup ) : ( ) ( ) (OAuth ) ID ( ) 8 / 29

9 API API API Twitter API Yahoo API Amazon MWS API Google API Google Maps Geocoding API +Amphitheatre+Parkway,+Mountain+View,+CA&sensor=false 9 / 29

10 SOAP: Simple Object Access Protocol SOAP <env:envelope xmlns:env=" <env:header> <n:alertcontrol xmlns:n=" <n:priority>1</n:priority> <n:expires> t14:00:00-05:00</n:expires> </n:alertcontrol> </env:header> <env:body> <m:alert xmlns:m=" <m:msg>pick up Mary at school at 2pm</m:msg> </m:alert> </env:body> </env:envelope> POST WSDL (Web Services Description Language) WSDL 10 / 29

11 REST: Representational State Transfer URI XML JSON SOAP REST ( API ) 11 / 29

12 Addressability (Address) : ftp.example.com ftp anonymous pub readme.txt ( gmail): ajax : 12 / 29

13 Statelessness http http : 10 : jellyfish 13 / 29

14 Advantages of Stateless API HTTP ( ) ( ) 14 / 29

15 Connectedness URI URI1 Addressable Addressable not Connected Connected 2 URI 3 URI GData ( ) link rel= 15 / 29

16 Uniform Interface 4 ( HEAD ) HTTP GET: HTTP PUT: HTTP POST: HTTP DELETE: : GET /addproduct?name=pencil&price=100 GET 16 / 29

17 PUT POST? PUT: URI URI POST: URI ( : ) POST 17 / 29

18 GET, PUT, DELETE (HTTP ) (safety) GET ( HEAD) = (idempotence) GET, HEAD, PUT, DELETE 2 PUT 2 DELETE : ( ) POST 18 / 29

19 REST : GData (Google Data Protocol) Google Atom GET /myfeed 200 OK <?xml version= 1.0 encoding= utf-8?> <feed xmlns= xmlns:gd= gd:etag= W/"S0wCTlpIIip7ImA0X0QI" > <title>foo</title> <updated> t16:26:03-08:00</updated> <id> <author> <name>jo March</name> </author> <link href= /myfeed rel= self /> <entry gd:etag= "CUUEQX47eCp7ImA9WxRVEkQ." > <id> <link rel= edit href= /> <updated> t16:26:03-08:00</updated> <author> <name>elizabeth Bennet</name> </author> <title type= text >Entry 1</title> <content type= text >This is my entry</content> </entry> </feed> 19 / 29

20 GData rel=edit PUT ETag PUT /myfeed/1/1/ <?xml version= 1.0 encoding= utf-8?> <entry xmlns= xmlns:gd= gd:etag= "CUUEQX47eCp7ImA9WxRVEkQ." > <id> <link rel= edit href= /> <updated> t16:28:05-08:00</updated> <author> <name>elizabeth Bennet</name> </author> <title type= text >Entry 1</title> <content type= text >This is my first entry.</content> </entry> 200 OK ( ) 20 / 29

21 : Open API Initiative OAI: REST API Swagger: OAI API GitHub aws-apigateway-importer : {"swagger": "2.0", "info": {"title": "API Gateway Test API", "description": "Move your app forward with the Uber API", "version": "1.0.0"}, "host": "api.uber.com", "schemes": [ "https" ], "basepath": "/v1", "produces": [ "application/json" ], "paths": { "/products": { "get": { "summary": "Product Types", "description": "The Products endpoint returns ", "parameters": [{"name": "latitude", "in": "query", "description": "Latitude component of location.", "required": true, "type": "number", "format": "double"}, {"name": "longitude", "in": "query", 21 / 29

22 : Roy Fielding: Architectural Styles and the Design of Network-based Software Architectures REST network-based L. Richardson, S. Ruby : RESTful Web, : Web API - The Good Parts, 22 / 29

23 AAA for service mashup AAA: Authentication, Authorization, Accounting AAA UA (Cookie ) OpenID: Authentication ( ) OAuth: Authorization ( ) ( ) OAuth 23 / 29

24 OAuth 2.0 OAuth RFC rd party (=client) A (= owner) B (resource) A client B ( ) ( B ) OAuth 3rd party (authorize) resource owner: resource access resource server (RS): resource server client: resource request (= ) authorization server (AS): access token server : client user agent (browser) Web 24 / 29

25 OAuth client AS ( ) 2 resource owner AS 3 AS access token client 4 RS client access token resource 4 Authorization Code: Client client Web ( ) Implicit Grant: UA client JavaScript (@UA) (Web ) Resource Owner Password Credentials: RO client (client 100% ) Client Credentials: client resource owner client ( ) 2 Client implicit 25 / 29

26 Authorization Code Flow Resource Owner ^ (B) Client Identifier (A)--- & Redirection URI ----> User- Authorization Agent -+---(B)--- User authenticates ---> Server -+---(C)--- Authorization Code ---< (A) (C) ^ v ^ v >---(D)-- Authorization Code Client & Redirection URI <---(E)----- Access Token (w/ Optional Refresh Token) 26 / 29

27 Implicit Grant Flow Resource Owner ^ (B) Client Identifier (A)--- & Redirection URI ----> User- Authorization Agent - ---(B)--- User authenticates ---> Server <--(C)-- Redirection URI with --< Access Token in Fragment (F) < (E) (D) Script Redirection URI (A) (G)Access without Fragment Token ^ v ^ v Web-Hosted Client Client Resource / 29

28 IDs used in Smartphone Services ID ID iphone IMEI ( ): MAC : Cookie: Safari 3rd party cookie UDID (Unique Device Identifier): Advertising Identifier: Identifier for Vendor: UUID: UIID: UUID? Android Android ID: IMEI: MAC : AdvertisingID: Apple Advertising Id UUID: 28 / 29

29 : ( ) : : : API HTML5 (Web ) : Apache/Tomcat/Node.js/Rails PC : IaaS: Amazon EC2 PaaS: Heroku MyVolume public html JS (google Twitter ) API 15 ( ) ( ) ( ) + + ID xxxx 29 / 29

untitled

untitled -1- JAX-RS JAX-RS Java API for RESTful Web Service JAX-RS REST Web API JAX-RS JCP JSR-311 JAX-RS https://jersey.dev.java.net/ Jersey JAX-RS RESTEasy 1RESTJAX-RSJerseyRESTEasy JersyRESTEasy JAX RS REST