REST-201 Flashcards
Which arch style does REST belongs to ?
Distributed Hypermedia Systems
State the 6 REST Principles based on?
Stateless Caching Client-Server Uniform Interface Layered System Code on Demand(Optional and unimp)
Explain State-less?
The client should only know the state, the server should only care about the necessary details to give the respoinse
Explain Cachecable?
The server must present the details to cached the data or not
Explain Uniform Interface?
There are 4 uniform constraints
- Identification Of Resources
- Manipulation of Resources through representations.
- Self Descriptive Messages
- Hypermedia as the engine of application state
Explain Layered System?
Abstraction of Resource providers
Now it mean a Server A to recieve the request, and server B to give the data to A, And server C to authorize & authnticate
Why Resource Identifier in given importance?
The key abstraction is Resource, and each must be identifed by both the parties
What is Resource Representaion?
The state of a resource at any moment.
What is Media Type?
The data format of the resource
What should be common in all RESTFul apis?
They should folow a common naming, return type , XML , JSON and the like
Can a Resource may have sub collection?
Yes Like accounts/{accountId}/customers/{customerId}/
Can we use - or _ to make URI
- is best because it improves readeability
Should we use query naming convetions?
No, Better to use the Correct HTTP method
HTTP DELETE http://api.example.com/device-management/managed-devices/{id} //Delete device for given Id
Which method is by default cached and which one not?
GET : Cached,
POST: Nope
Unless specifeid
Say me the tags related to caching?
Expires: Fri, 20 May 2016 19:20:49 IST
Cache-Control: max-age=3532
Etag: The server associates this header to uniquly identify the resource
Last-Modified:
Say Compression headers?
Accept-encoding: gzip,compress
Accept-encoding: *
and the like values
What happens if the request is having a particuar value to Accept-encoding and server did not respond with the correct format data?
406 UnAcceptable
While the server is ready to entertain the Accept-encoding type , what header it gives back in response ?
Content-Type: text/html
Content-Encoding: gzip
If the content encoding can not be provided by the server?
then it says 415(Unsupported Media Type)
What are the 2 content negotiation types?
Server-Driven
Agent-Driven (Most used)
What is Serven & Agent Drive Negotiation?
Depends on best representation of the resource is best done
WHAT IS THE diff b/w Accept-encoding & Content-Type?
Accept says what it want , Content-Type says what is actally is
Is it possible to have multiple values in Accept and what is q in that header?
Yes Accept: application/json,application/xml;q=0.9
q says the preference order form 0to 1 , 1 is default
What is HATEOS?
Hypermedia as the Engine of Application State
What is idempotency?
Multiple request must be treated same as one request and should leave the resource beneath unchanged, no different outcomes
List the Idemnpotent & Non-Idempotent methods?
Post : Non-Idempotent
GET
Can I delete request show 404 ?
Yes the n-1 requests
What is Least privelege?
Least Privilege: An entity should have least permission to perform a certain actions. Permissions must be added , removed or revoked as required
What is Fail-Safe Defaults?
Fail-Safe Defaults: A user default access level to any resource must be denied
What is Fail-Safe Defaults?
Fail-Safe Defaults: A user default access level to any resource must be denied
What is Economy of Mechanism?
The design should be simple and componets must be simple put together
What is Open Design?
The system design should be open and with no secret algos
What is Separation Of Privilege?
Granting an entity should not be based on single condition, their should be some conditions
What is Least Common Mechanism?
It deals with sharing state, if one Mechanism corrupts the state, the other mechanism can be corrupted
What is Psychological Acceptability?
Security mechanism must be easily understood by user
How do we add modules to Spring Boot?
We have to add the InitClass and the same init class must be annotated with the @corresponding annotation and also in pom as starter package
How do we add a webMVC ?
add spring-boot-stater-web Create a Config Class , do @EnableMvc Extend the class with WebMvcConfigurerAdapter
What are the Best Practises to Spring Security?
Keep it Simple, Use Https: Ussing SSL, you can send the random access token in the username , & get it validated on Basic Http Auth, Passwords must be hashed, Never exposed info on URL, Consider OAuth, Add Timestamp : It will save from replay attacks, Input Param validations
