REST-201 Flashcards by Prashant Chouhan

Which arch style does REST belongs to ?

Distributed Hypermedia Systems

How well did you know this?

Not at all

Perfectly

State the 6 REST Principles based on?

Stateless
Caching
Client-Server
Uniform Interface
Layered System
Code on Demand(Optional and unimp)

How well did you know this?

Not at all

Perfectly

Explain State-less?

The client should only know the state, the server should only care about the necessary details to give the respoinse

How well did you know this?

Not at all

Perfectly

Explain Cachecable?

The server must present the details to cached the data or not

How well did you know this?

Not at all

Perfectly

Explain Uniform Interface?

There are 4 uniform constraints

Identification Of Resources
Manipulation of Resources through representations.
Self Descriptive Messages
Hypermedia as the engine of application state

How well did you know this?

Not at all

Perfectly

Explain Layered System?

Abstraction of Resource providers
Now it mean a Server A to recieve the request, and server B to give the data to A, And server C to authorize & authnticate

How well did you know this?

Not at all

Perfectly

Why Resource Identifier in given importance?

The key abstraction is Resource, and each must be identifed by both the parties

How well did you know this?

Not at all

Perfectly

What is Resource Representaion?

The state of a resource at any moment.

How well did you know this?

Not at all

Perfectly

What is Media Type?

The data format of the resource

How well did you know this?

Not at all

Perfectly

What should be common in all RESTFul apis?

They should folow a common naming, return type , XML , JSON and the like

How well did you know this?

Not at all

Perfectly

Can a Resource may have sub collection?

Yes Like accounts/{accountId}/customers/{customerId}/

How well did you know this?

Not at all

Perfectly

Can we use - or _ to make URI

is best because it improves readeability

How well did you know this?

Not at all

Perfectly

Should we use query naming convetions?

No, Better to use the Correct HTTP method

HTTP DELETE http://api.example.com/device-management/managed-devices/{id} //Delete device for given Id

How well did you know this?

Not at all

Perfectly

Which method is by default cached and which one not?

GET : Cached,
POST: Nope

Unless specifeid

How well did you know this?

Not at all

Perfectly

Say me the tags related to caching?

Expires: Fri, 20 May 2016 19:20:49 IST
Cache-Control: max-age=3532
Etag: The server associates this header to uniquly identify the resource
Last-Modified:

How well did you know this?

Not at all

Perfectly

Say Compression headers?

Accept-encoding: gzip,compress
Accept-encoding: *

and the like values

What happens if the request is having a particuar value to Accept-encoding and server did not respond with the correct format data?

406 UnAcceptable

While the server is ready to entertain the Accept-encoding type , what header it gives back in response ?

Content-Type: text/html

Content-Encoding: gzip

If the content encoding can not be provided by the server?

then it says 415(Unsupported Media Type)

What are the 2 content negotiation types?

Server-Driven

Agent-Driven (Most used)

What is Serven & Agent Drive Negotiation?

Depends on best representation of the resource is best done

WHAT IS THE diff b/w Accept-encoding & Content-Type?

Accept says what it want , Content-Type says what is actally is

Is it possible to have multiple values in Accept and what is q in that header?

Yes Accept: application/json,application/xml;q=0.9

q says the preference order form 0to 1 , 1 is default

What is HATEOS?

Hypermedia as the Engine of Application State

What is idempotency?

Multiple request must be treated same as one request and should leave the resource beneath unchanged, no different outcomes

List the Idemnpotent & Non-Idempotent methods?

Post : Non-Idempotent | GET

Can I delete request show 404 ?

Yes the n-1 requests

What is Least privelege?

Least Privilege: An entity should have least permission to perform a certain actions. Permissions must be added , removed or revoked as required

What is Fail-Safe Defaults?

Fail-Safe Defaults: A user default access level to any resource must be denied

What is Fail-Safe Defaults?

Fail-Safe Defaults: A user default access level to any resource must be denied

What is Economy of Mechanism?

The design should be simple and componets must be simple put together

What is Open Design?

The system design should be open and with no secret algos

What is Separation Of Privilege?

Granting an entity should not be based on single condition, their should be some conditions

What is Least Common Mechanism?

It deals with sharing state, if one Mechanism corrupts the state, the other mechanism can be corrupted

What is Psychological Acceptability?

Security mechanism must be easily understood by user

How do we add modules to Spring Boot?

We have to add the InitClass and the same init class must be annotated with the @corresponding annotation and also in pom as starter package

How do we add a webMVC ?

``` add spring-boot-stater-web Create a Config Class , do @EnableMvc Extend the class with WebMvcConfigurerAdapter ```

What are the Best Practises to Spring Security?

Keep it Simple, Use Https: Ussing SSL, you can send the random access token in the username , & get it validated on Basic Http Auth, Passwords must be hashed, Never exposed info on URL, Consider OAuth, Add Timestamp : It will save from replay attacks, Input Param validations