Kunatsa JWT ukax App Empresarial ukar seguridad uñt’ayañatakix wali askiwa – Ukat kunats KumuluzEE ukax Machaq Suma Amigoma ukhamäspa

Jichhürunakanxa, juk’ampi llakisiñanakaxa lurawi tuqita utjistu, uka pachparakiwa, kunjamasa sistemas ukanakaxa jank’aki ukhamaraki atinisiñampi aruskipt’apxaspa uk yatiñ munapxta. Walja kutiw yatiyawinak apayañ munapxta ukat jan yatiyañ munapxta ukat jan kuna jan walt’äwinakax utjañapataki. Datos sensibles ukax yaqhip pachax web tuqiw jaqinak nayraqatan sarnaqañapa ukat alambre ukan mayni tukuñanx lurawinakaruw sartañapa. Jilapachax lurawinakaw uñstayañ munapxta, ukax mutaciones de datos ukanakaruw puriyani. Uka tuqinakanxa, janiw jiwasan datos ukanakas jark’aqañakix uñch’ukipkti. Jiwasax kuna lurawinakas jiwasan yatiyawinakas apayanisax ch’amanchatäki ukax atinisiñ munapxta. Jiwasax walja tuqinakatw datos ukanakas jark’aqaraksna. Jilapachax, mä (Seguridad de capas de Transporte) uka seguridad conexión tuqiw yatiyawinak apayapxtanxa. Ukax jiwasan datos ukanakax Encriptado alambre tuqiw jikxatasi. Jiwasax Certificados ukanak apnaqapxta, pä jaqinak taypin atinisiñ uñstayañataki ukat ukax phuqhañataki.Aka qillqatanx ukan normapatw aruskipt’añ munta ukat juk’amp uñjañ munta kunjams ukax mä aplicación común ukar mayacht’asispa. Ukhamächi ukhaxa, uñakipt’añäni .Mä qawqha amuyt’awinak uñakipt’añäni. jan ukax JSON Web Token, jan ukax juk’amp sumaxa, JavaScript Object Notation Web Token, ukax mä estándar ukaw ukan qhanañchata. Aka kamachix, taqi (Request For Comments) kamachinakjama, (Fuerza de Tareas de Ingeniería de Internet) ukan qhanañchata, qillqt’ata, ukat uñt’ayata. Walja tuqinakatwa qhanañchasispa. Jilapachax ukax mä compacto, seguro ukhamawa, pä partidos ukanakan reclamaciones ukanakar transmitir sañjamawa. Mä thakhix kunatix mä reclamación ukax simplificar, chiqpachanx mä suti/valor par ukham uñt’ayañawa, ukax yatiyawinak uñt’ayi. Jiwasax aka yatiyawinak munapxta, mä qawqha wakiskir askinak jiwasan internet tuqin yatiyaw garantizañataki. Jiwasax yatiyawinak katuqktan ukax nayrïr kutix chiqapar uñjatäñapataki ukat atinisiñapatakiw ch’amachasiñasa. Ukatxa, ukax chiqapar uñjañasawa. Akax chiqpachanx ukhamawa.Aka norma phuqhañatakix walja marcos ukanakaw apnaqasispa, ukax Java empresan aplicación ukar phuqhañ yanapt’istaspa. Spring Boot ukax wali apnaqatawa. Walja kutiw yaqha sutimp software de propiedad ukan yaqhip organizacionanakat bancos ukhamarak yaqha qullqituqit organizacionanakat uñt’ayataraki. Jiwasan uñacht’äwisatakix yaqha lurañ amtawayta. Spring Boot ukat sipansa, ukamp mä uñacht’äw uñakipt’añäni. Punto ukax ukax kunjamas ukat kunjams uñtasi uk sum uñt’añawa. Java Enterprise Aplicaciones ukax chiqpachanx mä servidor de aplicaciones ukan uñstayatäspawa jan ukax mä servidor incrustado apnaqañ tuqikiw jupanakpachax apnaqasispa. Mä uñacht’awi, Spring Boot ukax mä servidor Tomcat ukan uñt’ayatawa. Aka qillqatanx ukar uñt’ayañäni. Kunjamatix Spring Boot ukax mä servidor embebido ukampiw utjaraki. Jan ukasti aka tuqinx Jetty satawa. Ukax Soldadura ukamp chikt’ataw apnaqasi, ukhamat CDI(Inyección de Dependencia del Contexto) ukar puriñapataki. Taqi Java ukat tecnología ukan kamachinakapax aka ukamp chikancht'atawa . TLS JWT JWT Enterprise KumuluzEE JWT RFC7519 RFC IETF JWT KumuluzEE JWT KumuluzEE EE Jakarta EE framework 2. Caso Uñacht’äwi Kunjams ukax forma básica ukan irnaqt’i uk uñacht’ayañatakix mä thakhi uñacht’ayañaw wakisi. Uñacht’awinakax clásicos ukanakax kawkhantix seguridad ukax mä llakiw bancos ukanakawa. Ukampirus mä banco taqpach solicitud lurañax kunjams ukax irnaqaski uk uñacht’ayañatakix mä pacha ina ch’usar apt’asispa ukat inas walja amuyunakax ukanx utjchispa. Ukhamakipansti, kuntix lurawaykta ukax mä sistema bancario wali sapurukiwa. Jiwasan jach’a llakisax uñacht’ayañawa kunjams datos ukax alambre tuqix saraski ukat kunjams apnaqirinakax yaqhip chiqanakar jiwasan aplicación ukar mantapxi. Ukhamarakiw janiw TLS ukat kunjams encriptado yatiyawinak alambre tuqi apayanisna ukxat aruskipt’añ munkti. Jiwasax ukarux q’uma uñtawimpiw uñch’ukiñäni.Jiwasan casosax sistema bancario ukawa, ukax mä tamaw naturaleza ukat medio ambiente ukar arxati. Akax mä kusiskañ thakhikiwa, kunjams irnaqaski uk uñacht’ayañataki. Aka Liga de Naturaleza ukan nayrïr jaqix Lucy satawa, jupax taqi qillqatanakajanx mä común jaqiruw tukuski. JWT JWT JWT JWT 3. Arquitectura luraña Janïr qalltkasaxa, jiwasan t’ijtir aplicación ukar bosquejarkañäni. Mä aplicación wali sapuru, ukampis wali askiw dibujar: Kunatsa akax wali ch’amawa, kunatix ukax sapa mayiwiruw uñakipata ukatx sapa mayiwix clave pública ukampiw chiqanchataraki, ukhamax yattanwa kunapachatix sapa mayiwix chiqap token apayaniñäni ukhax pasañjamawa. ukax OAuth2, Okta SSO, jan ukax yaqha mecanismo de autorización ukampiw mayacht’asispa. Ukhamächi ukhaxa, kuntix lurasktan ukax autenticación ukat autorizacionanak utt’ayañawa. Jiwasan aplicación ukanx apnaqañaw wakisi ukatx ukampiw, mä firma apnaqañ yatiyaw chiqapar uñt’ayañasa. Ukampirus janiw uka aplikacionarux mantkañäniti. Ukhamakipansti, jiwasax apnaqirinakaruw jiwasan aplicación ukar apnaqañapatak jaysañäni, ukatx suma chiqanchañ tukuyatat. Aka chiqanx, ukax chuymapanx chiqpachanx mä phuqhat aplicación ukan wali jisk’a chiqapawa, uk uñjañax jasakiwa. Ukhampachasa, mä qawqha funcionalidades ukanakax yapxatañaw wakisi. Akax Recursos ukanakaw wakisi: JWT JWT JWT JWT Sistema de equilibrio ukaxa Sistema de crédito ukaxa Jiwasan sistema básico ukax qullqi ukat crédito mayiwinakakiw qillqantatäni sañani. Esencial ukax mäkiw valores ukanakax apthapita. Ukat yaqhip jaqinakax jachʼañchatäpxani ukat yaqhipanakax janiw jachʼañchapkaniti sasaw amuytʼarakiñäni. Yaqhip jaqinakax qullqi imañ yatipxani ukat yaqhip jaqinakax crédito katuqapxani. 4. Tecnologías ukanaka ajlliña Kunjamatix qalltawinx arsuwayktanxa, ukax jiwasan empresan aplicacin ukan marco ukham apnaqañäni, ukatx mä aplicación ultrabsica ukaruw phuqhañäni, ukhamat terminología básica ukat conceptos ukanakar uñakipt’añataki.Java chiqap versión ukaniñapatakiw ch’amachasiñani. Aka pachanxa, Java 17 SDK ukax mä jisk’a uñstayatawa. Jiwasax maven, git, mä Java-compatible IDE IntelliJ ukham munasini, ukat mä shell mä kasta. KumuluzEE JWT 5. Uñstayaña Jiwasan aplicación qalltañatakix mä qawqha dependencias ukanakaw utjistu. Ukax jilpachax kunatix , kunjamakitix Spring Boot ukax mä qawqha dependencias ukanakaw munasispa. POM qillqat mä juk’a uñakipt’añäni: KumuluzEE KumuluzEE com.kumuluz.ee.openapi kumuluzee-openapi-mp com.kumuluz.ee.openapi kumuluzee-openapi-mp-ui com.kumuluz.ee kumuluzee-microProfile-3.3 ch.qos.logback logback-core ch.qos.logback logback-classic org.jetbrains.kotlin kotlin-stdlib org.assertj assertj-core test org.junit.jupiter junit-jupiter test io.mockk mockk-jvm test com.ninja-squad springmockk test io.kotest kotest-assertions-core-jvm test Mä qawqha dependencias ukanakat mä juk’a aruskipt’añäni. Kunjamtix aka ullart’ktanxa, jiwasan qillqatarux patat aynacharu arktañamawa. Aka qhananchawi amuyañatakixa wali askiwa.Jiwasaxa mä paquete de dependencias ukawa munasiraki, ukhamata jiwasana aplicacin ukaxa irnaqañapataki. , Wali askiwa, , Microperfil bibliotecas ukanakaw utjistu ukax paquetes estándar básicos ukanakaw utji aka aplicación qalltañataki. Ukax taqpach -Microprofile biblioteca ukan uñt’ayatawa. Jiwasan app ukax taqi parámetros ukanak wakicht’añatakix mä biblioteca MicroProfile ukaruw yapxatañasa. Uka pachparakiw mä biblioteca de procesamiento JSON ukax wakisi. Ukhamaw Johnson Core jupax lurani. Jiwasax chiqans ukan núcleo ukan irnaqañatakix munapxta. Jetty ukax servidor subyacente ukawa, ukax marco ukaruw apnaqi. Ukatpï jiwasan dependencianakasanx ukax wakisi. ukax munasktan uk amuyt’asax mä biblioteca ukaruw yanapt’arakistu. Jiwasan REST tukuyañ chiqanakas ch’amanchañatakix ukan samarañ biblioteca ukax wakisiwa. Jiwasan API ukar puriñatakikix, ukatx mä biblioteca Geronimo ukaruw munapxta. Ukhamatwa mä phuqhawi ukax utjañapataki. Ukhamaraki, ukat ukan utjki ukanak qhanañchañaw wakisi.Lombok ukax janiw chiqpachans per se wakiskiti. ¡Taqi kuns suma ukat lliphipiyañakiw tukuyi! Ukhamaraki, logback ukaxa wali askiwa, ukhamata registros ukanaka juk’ampi ch’amanchañataki ukhamaraki jiwasana lurawinakasa amuyañataki.Jichhaxa jiwasana carpeta uñakipt’añäni.Qalltañatakixa nayraqata amuyt’añäni kunsa aka carpeta ukan jikxatañ suyktanxa. Jiwasana aplicacionasaxa , Logback ukampi chikt’ata ukampi wakicht’añasawa ukatxa tukuyañatakixa, kuna habas lurañasatakixa mä juk’a sañasawa.Ukanxa juk’ampi sapuru archivo uñakipt’añäni. Uka beans.xml ukax META-INF ukan jikxatasi: pom.xml KumuluzEE KumuluzEE JWT KumuluzEE KumuluzEE CDI KumuluzEE JSR-374 JWT JSON-formatted resources JWT Akax mä típico ukhamakiwa ukat kunjamtix jichhax amuyapkta ukhama, mä juk’a nayra archivo. Aka pachanx amuyt’awix ukar t’ijtayañakiw. Jiwasax mä acción exclusión ukaniwa. Ukax Weld ukarux Cuentas de clase ukar jan amuyt’añapatakiw säna, acción de habas ukar escaneo ukanxa. Ukax wali askiw kunatix implementación ukampiw apnaqasktan ukampixa, ukax básicamente sapa clase ukarux mä ch’usat constructor ukamp mä haba ukham uñjani. Qhipharux uñjañäni kunats Cuentas ukanakax mä habas ukham uñjatäñap jan munktanti. Jichha pachatakix amtañaniw mayiwinak lurasktanxa Alcance de Request ukanxa. Ukax logico ukhamawa kunatix sapa mayiwix yaqha apnaqiriw utjaspa.Jichhax kunjams " " ukax phuqhasi uk uñjañäni. Ukhamaraki ukan jikxatasi : KumuluzEE Weld logback META-INF %d{HH:mm:ss.SSS} [%thread] %-5level %logger{36} - %msg%n Akax jiwasan ukanakatakix mä configuración wali chiqapawa .Qhiparusti, inas jiwasan aplicación ukan juk’amp wakiskir archivox utjchispa. Akax config-plantilla ukawa. Aka chiqanx wali askiw yatiñax yaqhip archivonakax aka proyecton lurat ukanakax mä plantilla estructura ukan chikanchatawa. Uka toqetjja, qhepatwa jukʼamp qhanañchtʼä. Aka plantilla qillqatax mä config.yml qillqatar tukuyañapawa ukax MicroProfile ukan uñakipatawa. Aka qillqatax yänakan saphipankiwa: logs kumuluzee: name: your-financeje-banking version: 1.0.0 jwt-auth: public-key: {{ publicKey }} issuer: {{ issuer }} healthy: true Taqi uka propiedades ukanakax chiqpachapunix kamsañs muni ukxa qhipat uñjañäni. Taqe ukanakajj jupanak pachpaw qhanañchapjje. publicKey ukat emisor ukax taqpach parámetros ukawa ukax mayjt’ayatarakiniwa. Uka toqet qhepat yatjjatañäni. Jiwasan bash scripts ukanakax mayjt’ayatäñapatakiw yanapt’ani.Niya codificación ukar sarañatakix wakicht’atäxtanwa, ukampis nayraqatax token ukan estructurap uñakipt’añäni. JWT 6. Amparampi lurata codigo Jiwasan wali jisk’a aplicación lurañäni. Aka t’aqax kunjams ukamp irnaqañapatak solicitud ukar puriysna uk qhanañcht’añäni. Kuntix uñjañ munktan ukax mä qawqha lurawinakasar mantañatakix apnaqirinakaruw uñt’ayañasa, janiw yaqhanakar mantañatakikiti.Mä thakhix aka código uñakipañ qalltañatakix nayraqatax jiwasan sanu token ukar uñakipañawa. Akax jiwasan admin uñacht’äwisawa: JWT REST JWT { "iss": "joaofilipesabinoesperancinha", "jti": "01MASTERFINANCE", "sub": "admin", "aud": "nature", "upn": "admin", "groups": [ "user", "admin", "client", "credit" ], "user_id": 1, "access": "TOP", "name": "Admin" } Jiwasan ukanx sapa mayniw uka sutinakax reclamaciones ukham uñt’ata. Jiwasan uñacht’äwisanx mä qawqha Reservado ukan arsutanakap uñjtanxa: JSON " " — Akax token ukan apsutapawa. Ukatakix mä valoraniw arbitrariamente ajlliraksna. Aka parámetro ukan chimpunakapax variable emisor ukampiw chikancht’asiñapa, ukax config.yml ukan mayjt’ayañatakiw nayraqat uñjata. iss " " — Akax mä sapa uñt’ayawiwa. Jiwasax sañani aka arsuwimp apnaqaraksnawa mä token jan pä kuti jan ukax juk’amp kuti apnaqañapataki. jti " " — Akax token ukan temapawa. Ukax apnaqiris jan ukax kunayman munañanakas utjaspawa. Wali askiw amtañaxa, akax mä identificador, llave, sutinchaña, jan ukax kunayman munañanakas ukhamarakiw apnaqasispa. sub " " — Usuario principal suti. Ukax apnaqirix apnaqir principal ukar uñt’ayañatakiw apnaqasi. upn " " — Akax mä matriz ukawa, kuna tamas jichha apnaqirix utji. Esencial ukax kuntix mä mayiwix aka token ukampix luraspa ukx amtañapawa. Jiwasan token ukanx, ukatx mä qawqha Custom reclamaciones ukanakaw uñjasi. Ukax kunjamatix Reservado ukan arsutanakapax ukhamarakiw apnaqaraksna groups " " — Jiwasax aka apnaqañ id ukar uñt’ayañatakiw apnaqañäni. user_id " " — Jiwasax apnaqirin nivel de acceso ukar uñt’ayañäni. access " " — Uka apnaqirin sutipa. name 7. Amparampi lurata codigo Kuntï jichhakam yatktan ukanak mä recapitular lurañäni. Jiwasax yattanwa mä estructura amtawayktan ukampiw tokens ukanakamp aruskipt’añäni. Ukhamaraki, jiwasana apnaqawisan configuración, logback configuración ukat tukuyañatakix, empresan habas uñakipañatakix mä configuración personalizada ukaw utt’ayata.Modelo de paquete ukar uñakipt’añäni. Aka chiqanx 3 clase ukanakaw jikxatasi. Aka clasenakax básicamente mä agregación de cuentas ukat representación ukat ukanakan uñacht'ayañakiw . Ukhamat qalltañasawa kotlin archivo Model.kt uñakipt’asa kawkhantix ukax utjki: client account Client data class Client constructor( @JsonProperty var name: String ?= null ) Aka nayrïr clase modelo ukax jiwasan cliente ukan representación ukawa. Jiwasan jiwasatakix mä sutikiw utji. Akax " " atributo sutimp uñacht'ayatawa.Ukhamaraki, : client jwt Account data class Account( @JsonProperty val accountNumber: String?, @JsonProperty val client: Client? = null, @JsonProperty var currentValue: BigDecimal = BigDecimal.ZERO, @JsonProperty var creditValue: BigDecimal = BigDecimal.ZERO ) { fun addCurrentValue(value: Long) = Account( accountNumber, client, currentValue .add(BigDecimal.valueOf(value)), creditValue ) fun addCreditValue(value: Long): Account = Account( accountNumber, client, currentValue, currentValue .add(BigDecimal.valueOf(value)) ) } Aka clasenxa, jiwasax chiqpachanx mä accountNumber, mä cliente, mä currentValue ukat qhipharux mä creditValue ukham utt’ayapxtanxa. Uñakipt’añatakix taqi valores ukanakax 0. Jiwasax BigDecimal uka apnaqaraktanwa, q’uma kunatix qullqimp apasiñax utjistu. Qullqix chiqapawa ukatx janiw sistema round-ups jan ukax round-downs ukanakax t’aqhisiykaspati. Ukaxa sañ muniwa mä arunxa ukhamaraki mä uñacht’awi ukhama mä jakhüwi ukhama 0. Euros ukaxa uka jakhüwixa taqi pachana qhiparañapawa. Ukhamaraki, jiwasan cuentasarux valores ukanakamp yapxatañ munapxta. Akax kawkhantix addCurrentValue uka thakhix utjki ukawa. Uka pachpa amuyunak laykux, jiwasan crédito ukampiw phuqt’ayatarakini .Qhiparusti, qhipa chiqanw jiwasan datos ukan utt’ayat ukanx de clase ukar puripxta : 0000000000000000000000000000000000000000000000000001 addCreditValue Accounts open class Accounts constructor( open val accountMap: MutableMap = mutableMapOf() ) Akax chiqpachanx taqi cuentanakasan mä agregador ukhamakiwa. Mapa ukan utjki ukanak apnaqañäni, mä base de datos ukan sarnaqawip uñtasit lurañataki.Jichhax paquete de controlador ukar uñakipt’añäni. Akax kawkhantix jiwasan aplicación ukax modelo de datos ukampiw apnaqasi. Nayraqatxa, uka clase uñakipt’añäni : BankApplication @LoginConfig(authMethod = "MP-JWT") @ApplicationPath("/") @DeclareRoles("admin", "creditor", "client", "user") class BankApplication : Application() Ukampixa, 3 wakiskir arunakwa parlasktanxa. LoginConfig anotación ukampixa, MicroProfile ukarjamaxa tokens ukanaka apnaqañataki ukhamaraki amuyañatakixa qhananchatawa. ApplicationPath ukax aplikasiyun saphip uñt’ayi. Akax kawkhantix URL ukax aplicación ukan qalltasini. Jiwasan uñacht’awisanx ukaw utjani. Tukuyañatakix DeclareRoles ukax kuna lurawinakas apnaqasini ukat jiwasan mayiwisan katuqatäni ukanak qhanañchi. Roles ukatxa Grupos ukaxa términos intercambiables ukawa aka situación ukanxa.Inyección ukaxa suma irnaqañapatakixa, mä anotación específica lurapxta, ukaxa mapa de cuenta uñt’ayañataki: JWT HTTP://localhost:8080 annotation class AccountsProduct Pantalla phuqhata modalidad ukar mantaña Pantalla phuqhata modalidad ukar mantaña Ukxarusti, mä caché objeto fabrica AccountsFactory luraña: class AccountsFactory : Serializable { @Produces @AccountsProduct @ApplicationScoped fun accounts(): Accounts = Accounts(mutableMapOf()) companion object { @Throws(JsonProcessingException::class) fun createResponse( currentAccount: Account, name: JsonString, accounts: Accounts, log: Logger, objectMapper: ObjectMapper, principal: Principal?, jsonWebToken: JsonWebToken? ): Response { val jsonObject = Json.createObjectBuilder() .add("balance", currentAccount.currentValue) .add("client", name) .build() accounts.accountMap[name.string] = currentAccount log.info("Principal: {}", objectMapper.writeValueAsString(principal)) log.info("JSonWebToken: {}", objectMapper.writeValueAsString(jsonWebToken)) return Response.ok(jsonObject) .build() } } } Aka fabricax kunatsa ukanakatakix específicamente uñakipañax jan ch’amanchatäki ukawa. Uñakipt’aña lurawixa mä haba lurañataki jaytañat sipansa, jiwasa pachpawa instancia agregador ukaxa lurapxta. Anotación Produce uka apnaqañaxa, jawasa lurañatakixa yanapt’istu. Jiwasan anotación costumbre, AccountsProduct uka apnaqasa, aka habas apnaqañax juk’amp específicas ukham lurapxta. Tukuyañatakix apnaqasa, ukax alcancepjamaw uñt’ayasi. Mä arunxa, cuenta agregación bean ukax mä singleton objeto ukhamaw aplikacionanx sarnaqani." " ukax mä genérico thakhikiwa JSON jaysawinak lurañataki.Kunatix jichhax munaski ukax pä "Recursos" ukawa. Ukax chiqpachanx " " Primavera ukan pachpakiwa. Yaqha sutiwa, ukampis chiqpachapuniw pachpa clase uñakipt’añäni: Accounts ApplicationScoped Application createResponse Controllers AccountsResource @Path("accounts") @RequestScoped @Produces(MediaType.APPLICATION_JSON) open class AccountResource { @Inject @AccountsProduct open var accounts: Accounts? = null @Inject open var principal: Principal? = null @Inject open var jsonWebToken: JsonWebToken? = null @Inject @Claim("access") open var access: JsonString? = null @Claim("iat") @Inject open var iat: JsonNumber? = null @Inject @Claim("name") open var name: JsonString? = null @Inject @Claim("user_id") open var userId: JsonNumber? = null @POST @RolesAllowed("admin", "client", "credit") @Throws(JsonProcessingException::class) open fun createAccount(): Response = createResponse( requireNotNull(accounts).accountMap[requireNotNull(name).string] ?: Account( client = Client(name = requireNotNull(name).string), accountNumber = UUID.randomUUID().toString() ) ) @POST @RolesAllowed("admin", "user") @Path("user") @Throws(JsonProcessingException::class) open fun createUser(): Response { return createResponse( requireNotNull(accounts).accountMap[requireNotNull(name).string] ?: Account( client = Client(name = requireNotNull(name).string), accountNumber = UUID.randomUUID().toString() ) ) } @GET @RolesAllowed("admin", "client") @Throws(JsonProcessingException::class) open fun getAccount(): Response? { return createResponse( requireNotNull(accounts).accountMap[requireNotNull(name).string] ?: return Response.serverError() .build() ) } @PUT @RolesAllowed("admin", "client") @Consumes(MediaType.APPLICATION_JSON) @Throws( JsonProcessingException::class ) open fun cashIn(transactionBody: TransactionBody): Response? { val userAccount = requireNotNull(accounts).accountMap[requireNotNull(name).string] ?: return Response.serverError() .build() val currentAccount = userAccount.addCurrentValue(transactionBody.saldo?: 0) requireNotNull(accounts).accountMap[requireNotNull(name).string] = currentAccount return createResponse(currentAccount) } @GET @Path("all") @Produces(MediaType.APPLICATION_JSON) @Throws( JsonProcessingException::class ) open fun getAll(): Response? { val allAccounts = ArrayList( requireNotNull(accounts).accountMap .values ) logger.info("Principal: {}", objectMapper.writeValueAsString(principal)) logger.info("JSonWebToken: {}", objectMapper.writeValueAsString(jsonWebToken)) return Response.ok(allAccounts) .build() } @GET @Path("summary") @Throws(JsonProcessingException::class) open fun getSummary(): Response? { val totalCredit = requireNotNull(accounts).accountMap .values .map(Account::currentValue) .stream() .reduce { result, u -> result.add(u) } .orElse(BigDecimal.ZERO) val jsonObject = Json.createObjectBuilder() .add("totalCurrent", totalCredit) .add("client", "Mother Nature Dream Team") .build() logger.info("Summary") logger.info("Principal: {}", objectMapper.writeValueAsString(principal)) logger.info("JSonWebToken: {}", objectMapper.writeValueAsString(jsonWebToken)) return Response.ok(jsonObject) .build() } @GET @RolesAllowed("admin", "client") @Path("jwt") open fun getJWT(): Response? { val jsonObject = Json.createObjectBuilder() .add("jwt", requireNotNull(jsonWebToken).rawToken) .add("userId", requireNotNull(userId).doubleValue()) .add("access", requireNotNull(access).string) .add("iat", requireNotNull(iat).doubleValue()) .build() return Response.ok(jsonObject) .build() } @Throws(JsonProcessingException::class) private fun createResponse(currentAccount: Account): Response = AccountsFactory.createResponse( currentAccount, requireNotNull(name), requireNotNull(accounts), logger, objectMapper, principal, jsonWebToken ) companion object { val objectMapper: ObjectMapper = ObjectMapper() val logger: Logger = LoggerFactory.getLogger(AccountResource::class.java) } } Mä juk’a pachax aka clase ukar juk’amp uñakipt’añamawa. anotación ukax kunjams aka yänak saphitpach puriñax uk qhanañchi. Amtañani, jiwasax "/" saphirjam apnaqasktanwa. Ukhamächi ukhaxa, "cuentas" ukax jiwasan saphin mantañ chiqawa aka yänakataki. Taqi jiwasan recursos ukanakax, jiwasanakanx päkiw alcance RequestResource ukamp apnaqapxi. Anotación ukampixa Produces ukaxa amtiwa taqi jaysawinakaxa taqi mayiwinakaruxa kunaymana kasta jani ukaxa JSON formato ukana yatiyawinakaparu uñtasitawa.Jiwasana ukarux inyectañatakix ukakipkarakiw anotación Inject ukampi anotación ukampi chikt ata apnaqapxta: Path aggregator AccountsProduct @Inject @AccountsProduct open var accounts: Accounts? = null Ukax kuntix fabrican qhanañchapkta ukampiw chikanchasi.Ukhamaraki, pä wakiskir elementos de seguridad ukanakaruw inyectapxarakta. Mä ukat : principal jsonWebToken @Inject open var principal: Principal? = null @Inject open var jsonWebToken: JsonWebToken? = null ukat ukax pachpakïniwa, ukat ukax jiwasan registronakasan uñjañäni.Jiwasan yänakasanx, sapa kutiw mä mayiwit mä token ukamp reclamaciones inyectassna: JsonWebToken Principal @Inject @Claim("name") open var name: JsonString? = null @Inject @Claim("user_id") open var userId: JsonNumber? = null Ukax ukat uka anotaciones ukanakamp chikt’ataw phuqhasi. Anotación ukar uñt’ayat sutix kawkir reclamación ukar inyectañ munktan uk qhanañchi. Jiwasax kuna kastampiw parámetros ukanakas uñt’ayañasa, ukax wali amuyumpiw uñjañasa. Jiwasan uñacht’awisanxa,r ukat uka kastanakakiw munasispa.Nayraqatax kunjams cuentas ukat usuarios ukanakax lurasiski uk uñakipt’añäni: Inject Claim Claim JsonString JsonNumber @POST @RolesAllowed("admin", "client", "credit") @Throws(JsonProcessingException::class) open fun createAccount(): Response = createResponse( requireNotNull(accounts).accountMap[requireNotNull(name).string] ?: Account( client = Client(name = requireNotNull(name).string), accountNumber = UUID.randomUUID().toString() ) ) @POST @RolesAllowed("admin", "user") @Path("user") @Throws(JsonProcessingException::class) open fun createUser(): Response { return createResponse( requireNotNull(accounts).accountMap[requireNotNull(name).string] ?: Account( client = Client(name = requireNotNull(name).string), accountNumber = UUID.randomUUID().toString() ) ) } Cuentas ukatxa apnaqirinaka luraña Aka chiqanx amtawix thakhinak jaljañ yatiñawa, ukat kunayman permisonak churañawa. Jiwasan uñacht’awisanx panpachaniw mä cuenta lurapxi, ukampis wali askiw amuyañaxa, rols usuario ukan apnaqirinakakiw createUser uka thakhi apnaqapxaspa. Ukhamaraki, cliente ukatxa crédito uka lurawinakampi apnaqirinakakiw createAccount uka thakhirux mantapxaspa.Jichhax aka yän PUT mayiwi thakhiparjam sum uñakipt’añäni: @PUT @RolesAllowed("admin", "client") @Consumes(MediaType.APPLICATION_JSON) @Throws( JsonProcessingException::class ) open fun cashIn(transactionBody: TransactionBody): Response? { val userAccount = requireNotNull(accounts).accountMap[requireNotNull(name).string] ?: return Response.serverError() .build() val currentAccount = userAccount.addCurrentValue(transactionBody.saldo?: 0) requireNotNull(accounts).accountMap[requireNotNull(name).string] = currentAccount return createResponse(currentAccount) } Cashing In ukax mä juk’a pachanakanwa Jiwasax yattanwa anotación ukax uñacht’ayiwa aka lurawix tipo mayiwinakampikiw puriñjama. Ukatx Anotación Thakhix Jetty-rux uka thakhix mä valoraniw sasaw yatiyaraki. Ukax ukham uñt'atarakiwa. Tukuyañatakix, jiwasax qhanañcht’araksnawa aka lurawix apnaqañapatakix jaysatawa rols admin jan ukax cliente ukampi. Ukatxa, mantawi chimpuxa PathParam uka apnaqawimpiwa jiwasana Larga valor variable ukarux pasawayxi.Jiwasaxa jani kuna lurawinaksa qhananchkstanxa, ukatxa kawkiri apnaqirixa chiqapa token ukampixa uka lurawinakaruxa mantañapawa.CreditResource pachpa lurawimpiwa phuqhatarakini phurma: PUT PUT PathParam CreditResource @Path("credit") @RequestScoped @Produces(MediaType.APPLICATION_JSON) open class CreditResource { @Inject @AccountsProduct open var accounts: Accounts? = null @Inject open var principal: Principal? = null @Inject open var jsonWebToken: JsonWebToken? = null @Inject @Claim("access") open var access: JsonString? = null @Inject @Claim("iat") open var iat: JsonNumber? = null @Inject @Claim("name") open var name: JsonString? = null @Inject @Claim("user_id") open var userId: JsonNumber? = null @GET @RolesAllowed("admin", "credit") @Throws(JsonProcessingException::class) open fun getAccount(): Response = requireNotNull(accounts).let { accounts -> createResponse( accounts.accountMap[requireNotNull(name).string] ?: return Response.serverError().build() ) } @PUT @RolesAllowed("admin", "credit") @Consumes(MediaType.APPLICATION_JSON) @Throws( JsonProcessingException::class ) open fun cashIn(transactionBody: TransactionBody) = requireNotNull(accounts).let { accounts -> requireNotNull(name).let { name -> accounts.accountMap[name.string] = (accounts.accountMap[name.string] ?: return Response.serverError() .build()).addCreditValue(transactionBody.saldo?: 0L) createResponse( (accounts.accountMap[name.string] ?: return Response.serverError() .build()).addCreditValue(transactionBody.saldo?: 0L) ) } } @GET @Path("all") @Produces(MediaType.APPLICATION_JSON) @Throws( JsonProcessingException::class ) open fun getAll(): Response? { val allAccounts = ArrayList( requireNotNull(accounts).accountMap .values ) logger.info("Principal: {}", objectMapper.writeValueAsString(principal)) logger.info("JSonWebToken: {}", objectMapper.writeValueAsString(jsonWebToken)) return Response.ok(allAccounts) .build() } @GET @Path("summary") @Produces(MediaType.APPLICATION_JSON) @Throws( JsonProcessingException::class ) open fun getSummary(): Response? { val totalCredit = requireNotNull(accounts).accountMap .values .map(Account::creditValue) .stream() .reduce { total, v -> total.add(v) } .orElse(BigDecimal.ZERO) val jsonObject = Json.createObjectBuilder() .add("totalCredit", totalCredit) .add("client", "Mother Nature Dream Team") .build() logger.info("Summary") logger.info("Principal: {}", objectMapper.writeValueAsString(principal)) logger.info("JSonWebToken: {}", objectMapper.writeValueAsString(jsonWebToken)) return Response.ok(jsonObject) .build() } @GET @RolesAllowed("admin", "client") @Path("jwt") open fun getJWT(): Response? { val jsonObject = Json.createObjectBuilder() .add("jwt", requireNotNull(jsonWebToken).rawToken) .add("userId", requireNotNull(userId).doubleValue()) .add("access", requireNotNull(access).string) .add("iat", requireNotNull(iat).doubleValue()) .build() return Response.ok(jsonObject) .build() } @Throws(JsonProcessingException::class) private fun createResponse(currentAccount: Account): Response { return AccountsFactory.createResponse( currentAccount, requireNotNull(name), requireNotNull(accounts), logger, objectMapper, principal, jsonWebToken ) } companion object { val objectMapper: ObjectMapper = ObjectMapper() val logger: Logger = LoggerFactory.getLogger(CreditResource::class.java) } } Ukax mayj mayjawa, rols ukat ukanak apnaqañat sipansa jichhax ukat rols ukanak apnaqapxta. Ukhamaraki, uñjañamawa, apnaqirinakan cuentanakapax janipuniw aka ukan luratäkaniti . Ukax cuentan uka tuqikiw lurasispa .Jichhax kunjams código ukax phuqhasi uk yattanxa nayraqatax kawkir thakhinaks servicio ukan lurapxta uk wasitat uñakipt’añäni. admin client admin credit resource resource REST 8. Aplicación apnaqaña Uka lista uñakipt’añäni, kuna servicios ukanakas apnaqasiski: Tipo,URL,Payload,Resultado,Roles ukax jaysatawa UÑT'AYAÑA, créditos,Taqi http://localhost:8080/cuentas,n/a,Uñt’ayata cuenta,admin/cliente/crédito ukanak uñt’ayaña UÑT'AYAÑA, http://localhost:8080/cuentas/usuario,n/a,Uñt’ayata apnaqiri,admin/usuyiri JIKXATAÑA, http://localhost:8080/cuentas,n/a,Uñstayata cuenta,admin/cliente ukanak uñt’ayaña UCHAÑA, http://localhost:8080/cuentas,{saldo: Ukax mä jach'a uñacht'äwiwa. Jaya}, Jichha Saldo,admin/cliente JIKXATAÑA, http://localhost:8080/cuentas/taqi,n/a,Taqi jichha pacha cuentanaka,Taqi JIKXATAÑA, http://localhost:8080/cuentas/resumen,n/a,Sum taqi balanzanakatxa,Taqi JIKXATAÑA, http://localhost:8080/credit,n/a,Ukax mä juk’a uñakipt’atawa cuenta,admin/cliente ukanak uñt’ayaña UCHAÑA, http://localhost:8080/credit,{saldo: Ukax mä jach'a uñacht'äwiwa. Jaya}, Jichha Crédito,admin/cliente JIKXATAÑA, http://localhost:8080/crédito/taqi,n/a,Taqi créditos,Taqi JIKXATAÑA, http://localhost:8080/crédito/resumen,n/a,Sum 9. Yant’awi pacha luraña Nayax mä archiw saphi carpeta ukan lurawayta. Aka qillqataxa "setupCertificates.sh" satawa. Kuns luraski uk amuyt’añatakix uñakipt’añäni: bash #!/bin/bash mkdir -p your-finance-files cd your-finance-files || exit openssl genrsa -out baseKey.pem openssl pkcs8 -topk8 -inform PEM -in baseKey.pem -out privateKey.pem -nocrypt openssl rsa -in baseKey.pem -pubout -outform PEM -out publicKey.pem echo -e '\033[1;32mFirst test\033[0m' java -jar ../your-finance-jwt-generator/target/your-finance-jwt-generator.jar \ -p ../jwt-plain-tokens/jwt-token-admin.json \ -key ../your-finance-files/privateKey.pem >> token.jwt CERT_PUBLIC_KEY=$(cat ../your-finance-files/publicKey.pem) CERT_ISSUER="joaofilipesabinoesperancinha" echo -e "\e[96mGenerated public key: \e[0m $CERT_PUBLIC_KEY" echo -e "\e[96mIssued by: \e[0m $CERT_ISSUER" echo -e "\e[96mYour token is: \e[0m $(cat token.jwt)" cp ../your-financeje-banking/src/main/resources/config-template ../your-financeje-banking/src/main/resources/config_copy.yml CERT_CLEAN0=${CERT_PUBLIC_KEY//"/"/"\/"} CERT_CLEAN1=${CERT_CLEAN0//$'\r\n'/} CERT_CLEAN2=${CERT_CLEAN1//$'\n'/} CERT_CLEAN3=$(echo "$CERT_CLEAN2" | awk '{gsub("-----BEGIN PUBLIC KEY-----",""); print}') CERT_CLEAN4=$(echo "$CERT_CLEAN3" | awk '{gsub("-----END PUBLIC KEY-----",""); print}') CERT_CLEAN=${CERT_CLEAN4//$' '/} echo -e "\e[96mCertificate cleanup: \e[0m ${CERT_CLEAN/$'\n'/}" sed "s/{{ publicKey }}/$CERT_CLEAN/g" ../your-financeje-banking/src/main/resources/config_copy.yml > ../your-financeje-banking/src/main/resources/config_cert.yml sed "s/{{ issuer }}/$CERT_ISSUER/g" ../your-financeje-banking/src/main/resources/config_cert.yml > ../your-financeje-banking/src/main/resources/config.yml rm ../your-financeje-banking/src/main/resources/config_cert.yml rm ../your-financeje-banking/src/main/resources/config_copy.yml echo -e "\e[93mSecurity elements completely generated!\e[0m" echo -e "\e[93mGenerating tokens...\e[0m" TOKEN_FOLDER=jwt-tokens mkdir -p ${TOKEN_FOLDER} # CREATE_ACCOUNT_FILE=createAccount.sh CREATE_USER_FILE=createUser.sh SEND_MONEY_FILE=sendMoney.sh ASK_CREDIT_FILE=askCredit.sh TOKEN_NAME_VALUE=tokenNameValue.csv echo "#!/usr/bin/env bash" > ${CREATE_ACCOUNT_FILE} chmod +x ${CREATE_ACCOUNT_FILE} echo "#!/usr/bin/env bash" > ${CREATE_USER_FILE} chmod +x ${CREATE_USER_FILE} echo "#!/usr/bin/env bash" > ${SEND_MONEY_FILE} chmod +x ${SEND_MONEY_FILE} echo "#!/usr/bin/env bash" > ${ASK_CREDIT_FILE} chmod +x ${ASK_CREDIT_FILE} for item in ../jwt-plain-tokens/jwt-token*.json; do if [[ -f "$item" ]]; then filename=${item##*/} per_token=${filename/jwt-token-/} token_name=${per_token/.json/} cp "${item}" jwt-token.json java -jar ../your-finance-jwt-generator/target/your-finance-jwt-generator.jar \ -p jwt-token.json \ -key ../your-finance-files/privateKey.pem > token.jwt cp token.jwt ${TOKEN_FOLDER}/token-"${token_name}".jwt token=$(cat token.jwt) echo "# Create account: ""${token_name}" >> ${CREATE_ACCOUNT_FILE} echo "echo -e \"\e[93mCreating account \e[96m${token_name}\e[0m\"" >> ${CREATE_ACCOUNT_FILE} echo curl -i -H"'Authorization: Bearer ""${token}""'" http://localhost:8080/accounts -X POST >> ${CREATE_ACCOUNT_FILE} echo "echo -e \"\e[93m\n---\e[0m\"" >> ${CREATE_ACCOUNT_FILE} echo "# Create user: ""${token_name}" >> ${CREATE_USER_FILE} echo "echo -e \"\e[93mCreating user \e[96m${token_name}\e[0m\"" >> ${CREATE_USER_FILE} echo curl -i -H"'Authorization: Bearer ""${token}""'" http://localhost:8080/accounts/user -X POST >> ${CREATE_USER_FILE} echo "echo -e \"\e[93m\n---\e[0m\"" >> ${CREATE_USER_FILE} echo "# Send money to: "${token_name} >> ${SEND_MONEY_FILE} echo "echo -e \"\e[93mSending money to \e[96m${token_name}\e[0m\"" >> ${SEND_MONEY_FILE} echo curl -i -H"'Content-Type: application/json'" -H"'Authorization: Bearer ""${token}""'" http://localhost:8080/accounts -X PUT -d "'{ \"saldo\": "$((1 + RANDOM % 500))"}'" >> ${SEND_MONEY_FILE} echo "echo -e \"\e[93m\n---\e[0m\"" >> ${SEND_MONEY_FILE} echo "# Asking money credit to: "${token_name} >> ${ASK_CREDIT_FILE} echo "echo -e \"\e[93mAsking credit from \e[96m${token_name}\e[0m\"" >> ${ASK_CREDIT_FILE} echo curl -i -H"'Content-Type: application/json'" -H"'Authorization: Bearer ""${token}""'" http://localhost:8080/credit -X PUT -d "'{ \"saldo\": "$((1 + RANDOM % 500))"}'">> ${ASK_CREDIT_FILE} echo "echo -e \"\e[93m\n---\e[0m\"" >> ${ASK_CREDIT_FILE} echo "${token_name},${token}" >> ${TOKEN_NAME_VALUE} fi done Pachamaman utjirinaka generación Mä juk’a arktañamawa, kunjamatix nayax qhanañcht’kta kuntix luraski ukhama. Ukajj wali wakiskiriwa, ukhamat kuntï luraski uk sum amuyañataki. Nayraqatax llaves privadas ukat públicas ukanakaw formato ukan lurasi. Ukatx clave privada ukax jiwasan apnaqañjam "your-finance-jwt-generator.jar" ukampiw apnaqapxta. Akax jiwasan runnable jar ukawa ukax tokens ukanakan jank’ak lurañ yanapt’i. Uka emisorax janiw qhipat mayjt’ayatäkaspati. Tukuyañatakix mä token uñstayi. Kunjamsa aka token liytʼsna uk qhepat uñjañäni. Aka token ukax 3 extra Header reclamaciones ukaniwa. Ukanakax "kid", "typ", ukat "alg" ukanakawa. Ukax aka formato ukarjamawa: PEM { "kid": "jwt.key", "typ": "JWT", "alg": "RS256" } ukan p’iqinchawipa JWT Uka arsutanakat jukʼamp sum uñakiptʼañäni: "kid" — Mä pista reclamación ukhamaw irnaqäna. Ukax kawkir kasta algoritmo apnaqasktan uk uñacht’ayi. "typ" — Ukax medios de comunicación ukan kastanak uñt'ayañatakiw apnaqasi. Kimsa amtawinakaw utji (JSON Web token), (JSON Web Encryption), ukat (JSON Web Algorithms). Aka kastax janiw jiwasan yant’awisatakix wakiskirïkiti. Jiwasan token ukax janiw chiqpachans sum encriptado ukhamäkiti ukat chiqpachans descifrar ukax jasakiwa. Ukhamaraki uñjañäni, fichas descifrar yasksnasa, janiw ukhama jasaki tamper the to perform other actions. IANA JWT JWE JWA "alg" — Akax kunjams firma kasta apnaqañ munktan uk qhanañcht’apxtanxa. Firma ukax mä operación criptográfica ukhamaw uñjasispa, ukax token original ukax janiw mayjt’ayatakiti ukat atinisiñapawa. Jiwasanakanxa, RS256 ukax yaqha uñt’atawa RSA Signature ukampi SHA-256 ukampi. Jiwasan clave pública ukampixa, qhipharux plantilla ukar mayjt’ayañatakiw apnaqaraksna. Machaq config.yml qillqatax akham uñtañapawa: kumuluzee: name: your-financeje-banking version: 1.0.0 jwt-auth: public-key: FAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKE.FAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETO.FAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKEN issuer: joaofilipesabinoesperancinha healthy: true config.yml ukax mä juk’a pachanakanwa Payïri lurawixa pusi qillqatanaka lurañawa. Sapa mayni plain token ukatakix directorio " " ukatakix pusi kamachinak lurañäni. Nayrïr kamachix apnaqirinaka lurañawa, jupanakax cuentanakapamp sum lurapxaspa. Akax perfiles " ", " ", ukat " " ukan apnaqirinakawa. " " qillqat apnaqañäni, jupanakar lurañataki. Payïr kamachix mayni apnaqirinakaruw uñstayani, jupanakax janiw kuna derechonïpkiti. Akax "createUser.sh" qillqatawa. Uk tʼijtjjañäni. Jichhax uñjañäni, taqi apnaqirinakax qhipharux luratäxiwa. Jichhaxa lurawinakatxa juk’ampi uñakipt’añäni ukatxa qhipa pä kamachi uñakipt’añäni. Maynix "cashin" ukat maynix juk'amp crédito mayiñatakiwa. Nayrïr lurat qillqatax "sendMoney.sh" bash script ukawa. Aka chiqanx taqi mayiwinak " " ukar jikxatsna. Aka qillqatanx mä curl mayiwiw jikxatasi, qullqix aleatorio qullqinak apnaqirinakar apayaniñataki, sapa apnaqiritaki. Uka admin tuqit uñakipt’añäni: jwt-plain-tokens admin client credit createAccount.sh cashin #!/usr/bin/env bash # Send money to: admin echo -e "\e[93mSending money to \e[96madmin\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer= FAKE.FAKE.FAKE' http://localhost:8080/accounts -X PUT -d '{ "saldo": 125}' echo -e "\e[93m\n---\e[0m" # Send money to: cindy echo -e "\e[93mSending money to \e[96mcindy\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/accounts -X PUT -d '{ "saldo": 360}' echo -e "\e[93m\n---\e[0m" # Send money to: faustina echo -e "\e[93mSending money to \e[96mfaustina\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/accounts -X PUT -d '{ "saldo": 50}' echo -e "\e[93m\n---\e[0m" # Send money to: jack echo -e "\e[93mSending money to \e[96mjack\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/accounts -X PUT -d '{ "saldo": 205}' echo -e "\e[93m\n---\e[0m" # Send money to: jitska echo -e "\e[93mSending money to \e[96mjitska\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/accounts -X PUT -d '{ "saldo": 332}' echo -e "\e[93m\n---\e[0m" # Send money to: judy echo -e "\e[93mSending money to \e[96mjudy\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/accounts -X PUT -d '{ "saldo": 295}' echo -e "\e[93m\n---\e[0m" # Send money to: lucy echo -e "\e[93mSending money to \e[96mlucy\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/accounts -X PUT -d '{ "saldo": 160}' echo -e "\e[93m\n---\e[0m" # Send money to: malory echo -e "\e[93mSending money to \e[96mmalory\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/accounts -X PUT -d '{ "saldo": 413}' echo -e "\e[93m\n---\e[0m" # Send money to: mara echo -e "\e[93mSending money to \e[96mmara\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/accounts -X PUT -d '{ "saldo": 464}' echo -e "\e[93m\n---\e[0m" # Send money to: namita echo -e "\e[93mSending money to \e[96mnamita\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/accounts -X PUT -d '{ "saldo": 51}' echo -e "\e[93m\n---\e[0m" # Send money to: pietro echo -e "\e[93mSending money to \e[96mpietro\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/accounts -X PUT -d '{ "saldo": 491}' echo -e "\e[93m\n---\e[0m" # Send money to: rachelle echo -e "\e[93mSending money to \e[96mrachelle\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/accounts -X PUT -d '{ "saldo": 474}' echo -e "\e[93m\n---\e[0m" # Send money to: sandra echo -e "\e[93mSending money to \e[96msandra\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/accounts -X PUT -d '{ "saldo": 417}' echo -e "\e[93m\n---\e[0m" # Send money to: shikka echo -e "\e[93mSending money to \e[96mshikka\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/accounts -X PUT -d '{ "saldo": 64}' echo -e "\e[93m\n---\e[0m" sendMoney.sh ukax mä juk’a pachanakanwa Pachpa apnaqirinakax crédito mayiwinakapax jupanakarux churatarakiwa: #!/usr/bin/env bash # Asking money credit to: admin echo -e "\e[93mAsking credit from \e[96madmin\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/credit -X PUT -d '{ "saldo": 137}' echo -e "\e[93m\n---\e[0m" # Asking money credit to: cindy echo -e "\e[93mAsking credit from \e[96mcindy\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/credit -X PUT -d '{ "saldo": 117}' echo -e "\e[93m\n---\e[0m" # Asking money credit to: faustina echo -e "\e[93mAsking credit from \e[96mfaustina\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/credit -X PUT -d '{ "saldo": 217}' echo -e "\e[93m\n---\e[0m" # Asking money credit to: jack echo -e "\e[93mAsking credit from \e[96mjack\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/credit -X PUT -d '{ "saldo": 291}' echo -e "\e[93m\n---\e[0m" # Asking money credit to: jitska echo -e "\e[93mAsking credit from \e[96mjitska\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/credit -X PUT -d '{ "saldo": 184}' echo -e "\e[93m\n---\e[0m" # Asking money credit to: judy echo -e "\e[93mAsking credit from \e[96mjudy\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/credit -X PUT -d '{ "saldo": 388}' echo -e "\e[93m\n---\e[0m" # Asking money credit to: lucy echo -e "\e[93mAsking credit from \e[96mlucy\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/credit -X PUT -d '{ "saldo": 219}' echo -e "\e[93m\n---\e[0m" # Asking money credit to: malory echo -e "\e[93mAsking credit from \e[96mmalory\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/credit -X PUT -d '{ "saldo": 66}' echo -e "\e[93m\n---\e[0m" # Asking money credit to: mara echo -e "\e[93mAsking credit from \e[96mmara\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/credit -X PUT -d '{ "saldo": 441}' echo -e "\e[93m\n---\e[0m" # Asking money credit to: namita echo -e "\e[93mAsking credit from \e[96mnamita\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/credit -X PUT -d '{ "saldo": 358}' echo -e "\e[93m\n---\e[0m" # Asking money credit to: pietro echo -e "\e[93mAsking credit from \e[96mpietro\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/credit -X PUT -d '{ "saldo": 432}' echo -e "\e[93m\n---\e[0m" # Asking money credit to: rachelle echo -e "\e[93mAsking credit from \e[96mrachelle\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/credit -X PUT -d '{ "saldo": 485}' echo -e "\e[93m\n---\e[0m" # Asking money credit to: sandra echo -e "\e[93mAsking credit from \e[96msandra\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/credit -X PUT -d '{ "saldo": 500}' echo -e "\e[93m\n---\e[0m" # Asking money credit to: shikka echo -e "\e[93mAsking credit from \e[96mshikka\e[0m" curl -i -H'Content-Type: application/json' -H'Authorization: Bearer FAKE.FAKE.FAKE' http://localhost:8080/credit -X PUT -d '{ "saldo": 89}' echo -e "\e[93m\n---\e[0m" askCredit.sh ukax mä juk’a pachanakanwa Taqi jiwasan Liga de ukankapxiwa . Esencial ukhama mä qawqha jaqinakawa aka sistema bancario ukankapxañapataki. Uka tuqinx jupanakax pachamamaruw arxatapxi. Janiw chiqpachans qillqatatakix wakiskiti kuntix aka tama jaqinakax lurapki jan ukax kawkhans sarnaqäwinx uñt’ayasipxi, jan ukasti contexto ukatakix, jupanakax lurawinakanw chikanchasipxi pachamamaru arxatañataki ukhamarak jan walt’awinakapar juk’amp juk’ampi . Yaqhip taqi kuns lurapxaspawa, yaqhipanakax janiw kuns lurapkaspati ukat yaqhipanakax "cashin" jan ukax "crédito mayiñaki" ukhamakiw lurapxaspa. Ukat amuytʼasiraki, sensitivo yatiyäwinak chʼamaktʼayaskta. Aka tokens normalmente janiw uñt’ayatäñapäkiti jan ukax URL particular ukan uñjatäñapäkiti. Jupanakax jïsa sapa kutiw consola desarrolladora de navegador tuqix utji ukampis kunjamakitix yaqhip mayiwinak lurat . Aka amuyunakax "seguridad-por-obscurity" ukham uñt'atawa técnicamente ukax janiw jark'kiti apnaqirirux token apnaqatapat yatiñapataki, ukampirus jark'aqirjamaw irnaqaski.Pani thakhinx, kunapachatix depósito lurasktan jan ukax kunapachatix jiwasax crédito mayiña, amuyañani sapa mayiwitakixa, mä aleatorio jakhüwi 1 ukatxa 500 ukjakama apayanipxta.Jichhaxa niyaw wakicht’atäxtanxa, jiwasana mayiwi qalltañataki, ukampisa nayraqata, mä buceo ukar sarañäni mä juk’a juk’ampi teoría. characters Nature pacha mayjt’awinakan characters protect and 10. Kunjamsa mä token lurasi JWT Jichhax jiwasan tokens ukanakax generación lurawaytanxa, ukat mayniruw uñakipt’añäni. Nayax mä ch’amakt’at chimpu uñacht’ayañ munapxsma, ukat uka chimpumpiw uk amuyañatakix apnaqapxä.Akanx jiwasan chimpunakasan utji: . . Kunatix akanx wali wakiskir uñjañax jiwasan token ukax kimsa chiqar jaljatawa: FAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKE FAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETO FAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKENFAKETOKEN — Akax Base64 codificado JSON configuración p’iqinchawiwa, kunjamatix nayraqat arsuwayktan ukhama. P’iqinchawi — Akax Base64 codificado JSON payload ukawa. Akax kawkhantix jiwasan Reservado ukat Costumbre ukanakan reclamaciones ukanakax qhanañcht’atäki ukawa. Ukhamaraki aka chiqanx reclamaciones Privadas ukat Públicas ukanakat qhanañcharaksnawa. Panpachaniw Aduana ukan reclamaciones ukar jaqukipapxi. Mä jank’a yatiyäwi, uka pä arsuwinakampix kuntix munktan uk luraraksnawa. Ukampirus reclamaciones públicas ukax uñt’atawa kunjamatix IANA JSON Web Token Registry ukan qhanañchatäki ukhama. Wali askiw jiwasan tokens ukanakar mä sutimp uñt’ayañasa, ukhamat registro ukamp jan ch’axwañataki. Reclamaciones públicas ukaxa opcionales estándar sata uñt’atarakiwa. Reclamaciones privadas ukanakax janiw kuna normas ukarjam phuqhapkiti ukat jiwasanakan uñt’ayañax wakisiwa. Carga útil — Akax kawkhantix mä juk’a lurañ yatktan ukawa. Firma ukax mä cifrado combinación ukawa ukampi . Jiwasax algoritmo apnaqañ munktan ukx amtapxtanwa ukatx aka bit de token ukax chiqpachanx yatiyaw apayanktan ukax atinisiñjamati janicha ukx amtañani. Uka mayacht'asiwix sapakïxiwa ukatx jiwasan servidor ukax "public-key" ukampiw apnaqani, ukax mä uñt'ayawiw utjiti janicha uk yatiñataki. Uka patat amtassta ukhax apnaqapxta jiwasan uñacht’äwisanxa. Firma Header Payload RS256 Janïr sarantkasaxa, amuyañamawa, ukat ukanakax jiwasan uñacht’äwisanx ukhamawa. Jiwasax "janiw" carga útil jan ukax p'iqinchäwimp mayjt'ayañjamäkiti ukat wali atinisiñjam luraraksnawa. Mä jan wali token ukan jan walt’awinakapat jark’aqasiñax algoritmo ukarjam ajllitäki ukampikiw jark’aqasispa. Ukhamajj wali amuyumpi ajlliñamawa.Jumatï mä organizacionan irnaqasksta, ukanjja, jamasat yatiyasaw llakisi, sañäni, bancon irnaqtʼasksta ukhajja, JANIW kuntï lurañ amtapkta uk luramti. Akax mä thakhikiwa jiwasatakix internet tuqin uñakipañataki kunatix tokens ukanakax local ukan luratäki ukanak uñakipañataki.Nayraqatax ukar mantañäni ukat token ukar phuqhantañäni. Jichhak lurat token apnaqañamawa: Header Payload decyphered https://jwt.io/ JWT apnaqasa jiwasan tokenan utjkistu uk uñakipañatakiKuns aka chiqan utjkistu uk uñakipt’añäni. Akax jiwasan administrador ukan chimpupawa. Uka jaqix jiwasan uñacht'äwisanx "Admin" satawa. Jiwasax uñjaraksnawa, jiwasan parámetros ukanakax taqpachaw utji. Jiwasan listasanx "sub", "aud", "upn", "access", "user_id", "iss", "suti", "grupos" ukat qhiparusti "jti" ukanakaw uñjasi. Ukhamarakiw mä qawqha extra reclamaciones ukanakax utjarakistu. Jupanakat yatjjatañäni: https://jwt.io/ " " — Akax kunapachatix chiqanchawix utjki ukhawa. Jiwasan token kunjamtix chiqanchatäki ukhamarjamax domingo, 17 uru lapaka phaxsit 2022 maran 16:15:47 GMT+02:00 DST" " — Akax kunapachatix token luratäki ukhawa. Jiwasanakanxa, akax auth_time." " — Akax token ukan tukusiñapawa. Ukax domingo 17 uru lapaka phaxsit 2022 maran 16:32:27 GMT+02:00 DST pacharuw tukusi. Jiwasax janiw kuna fechas de vencimiento ukas token ukanx qhanañchapkti. Ukax sañ muniw ukax ~15 minutos ukjaw apnaqi. auth_time iat exp JWT Jichhax mä qawqha yant’äwinak lurañäni. 11. Aplicación apnaqaña Uka chimpux ukan apnaqañatakix wakicht'atawa. Jiwasatix código uñakipt’añäni ukat Intellij ukamp jist’arañäni ukhax yatiñasawa janiw aka aplicación ukarux Spring Boot ukar uñtasit apnaqksnati. Ukax mä "psvm" ukawa, ukax mä juk'a pachanakanwa. Ukhamakipansti, ukakipkarakiw generado jar ukax chiqak apnaqañasa ukatx mä "mvn build" ukax mä juk'a nayraqat lurañax wakisispa. Akax kunjams jichhax apnaqaskta ukawa: GitHub [1] . ] "Aplicación apnaqañatakix pachamamax wakicht'atawa") https://github.com/jesperancinha/your-finance-je Jichhax " " qillqat mayamp apnaqañäni. Janiw yatiskti qawqha pachas aka chiqar puriñax apst’asiwayta ukampis wali amuyatawa 15 minutos ukax niyaw aka pachanx tukusxi. Janis ukhamäkchi ukhaxa, mayamp apnaqañamawa.Jiwasan app qalltañäni!Akham qalltsna: setupCertificates.sh mvn clean install java -jar your-financeje-banking/target/your-financeje-banking.jar Jan ukax jiwasan wakicht’at t’ijtir configuración tuqikiw apnaqaraksna. Repo ukat Makefile ukanak nayraqat uñakipt’añamawa, taqi kunatix luraski uk amuyañ munsta ukhaxa: make dcup-full-action Aka script ukax 2 servicios ukanakaw apnaqasini. Maynix puertonkiwa ukatx maynix puertonkiwa. Puerto uksanx mä versión uka software ukax jiwasan código apnaqañapawa tokens uñstayañataki. Puerto 8081 ukanx mä versión generador ukamp apnaqañäni, ukan luratawa. Aka qillqatanx uñakipt’añäni, ukampis servicio ukax puerto ukan irnaqaski uka tuqitwa. Munasma ukhaxa, ukampi t’ijt’asmawa: 8080 8081 8080 JWT jwtknizr Adam Bien 8080 cypress make cypress-open Ukhamatwa consola ukax , ukatx yant’awinakax navegador ukampiw lurasini. Ukampirus, navegador ukan amtawinakax aka pachanx wali jisk’akiwa. Jilpacha mayiwinakax chiqpachanx ukan churat línea de comando mayiwinakaw utjani .Jichhakamax janiw " " ukar mantañäniti. Navegador ukar mantam ukat aka chiqar p’iqincham: cypress open cypress cypress http://localhost:8080/cuentas/taqi ukanak uñt’ayañataki Jiwasax akham mä resultado jikxatañasawa: Kunjamtï uñjktanxa, " ", " ", ukat " " ukanakax janiw kuna crédito ukat qullqis utjkiti. Ukax kunatix jupanakarux apnaqir tamanakarukiw churapxi. Ukhamarakiw uñjañax juparux janiw kuna créditos ukanakas churatäkiti. " ", ukax jiwasan sapa cliente ukawa, jupax janiw crédito de grupo ukax utjkiti.Jiwasax registros ukar uñakipt'añäni ukhax uñjaraksnawa, operaciones exitosas ukax aka formato ukaruw puri: Malory Jack Fallout Jitska Shikka Shikka Sending money to admin HTTP/1.1 200 OK Date: Sun, 17 Jul 2022 15:01:13 GMT X-Powered-By: KumuluzEE/4.1.0 Content-Type: application/json Content-Length: 32 Server: Jetty(10.0.9) {"balance":212,"client":"Admin"} Mä 200 ukax operación ukax sum sarantatap yatiyarakistu."Malory", "Jack Fallout", ukat "Jitska" ukanakanx panpacha operacionanakax jan walt'ayataw uñjasi ukat ukjatx aka kasta yatiyaw katuqañäni: Sending money to jitska HTTP/1.1 403 Forbidden X-Powered-By: KumuluzEE/4.1.0 Content-Length: 0 Server: Jetty(10.0.9) Mä 403 ukax yatiyarakistuw jiwasan token ukax chiqapar uñjata ukat ukax atinisitawa. Ukampirus uka apnaqirix uka luraw lurañ jark’atawa. Mä arunxa, jupanakax janiw uka amtat thakhirux mantañ yatipkiti. JWT Jiwasan tokens ukanakamp mä juk’a mayjt’ayañäni. Jiwasatix mä qawqha tokens sendMoney.sh qillqatan mayjt’ayañäni. Jiwasax akanak katuqañasawa: Sending money to admin HTTP/1.1 401 Unauthorized X-Powered-By: KumuluzEE/4.1.0 WWW-Authenticate: Bearer realm="MP-JWT" Content-Length: 0 Server: Jetty(10.0.9) Pantalla phuqhata modalidad ukar mantaña Pantalla phuqhata modalidad ukar mantaña Aka ukax sañ muniw jiwasan token ukax janiw validadakiti. Ukax sañ muniw clave pública ukax servidor ukax apnaqi jiwasan token ukax atinisiñapati janicha uk uñakipañataki, janiw mä uñtasit jikxatkiti. Llave pública ukax janiw JWT token ukan firmap uñakipañjamäkiti ukat chiqapar uñjañjamäkani ukhaxa, ukatx janiw sañapawa. 401 Mä recapitular ukhama, Header ukat "Payload" ukax janiw encriptado ukhamäkiti. Jupanakax mä base 64 "codificado" ukhamawa. Ukax sañ muniw "Decodificación" ukax sapa kutiw mä uñakipäw manqhan utjañapatak jaytistu, kunatix chiqpachanx carga útil ukax ukhamawa. Jiwasatix carga útil ukar jan ist'añat jark'aqañ thaqhaskstanxa, janiw token ukan "Carga de pago" ukax yaqhatak apnaqañasäkiti jan ukasti parámetros de identificación ukanakaw ajlliñasa. Jan walt’awix chiqpachans kunapachatix maynix amparanakap token ukar puri, sañäni, kunapachatix túnel TLS ukax jan walt’ayat uñjasi ukat maynix mayjt’ayat yatiyawinakan contenido uñakipañ yati. Ukhamächi ukhajja, yaqha jarkʼaqasiñaw utjaraki. Ukat akax firmawa. Mä yatiyaw mantañapatakix mä sapakiw ch’amanchasi, ukax servidor ukawa, ukax clave pública ukaruw uñt’ayasi. Aka llave pública, pública ukhamäkchisa, ukax firma ukat "P'iqinchiri + Carga útil" ukar jan walt’ayasaw mantanir yatiyaw chiqanchañatakix jayti. JWT 12. Tukuyañataki Jiwasax sesión tukuyañkamaw puriwaytanxa. Uk arktapxatamat yuspajarapxsmawa.Kunjamsa tokens ukax compactos ukat wali juk’amp jan verboso ukanak tokens ukanakat sipanx uñjaraksnawa. Jiwasax uñjtanwa kunjams jasakiw tokens lurañax ukat apnaqañax yaqhip autorizaciones ukanak jikxatañatakix yaqhip thakhinakatakix wakisi ukat kunjams mä token firmado tuqix ukaruw puripxta.Ukampirus wali wakiskiriwa kunjams irnaqaski uk mä amuyt’äw jikxatañataki. Jiwasax suyt’tanwa, akampixa, kunjams tokens ukanakax irnaqapxi uka tuqit mä suma uñt’ayawi churapxsma.Kunjamsa taqi ukanakax irnaqapxi uk juk’amp sum amuyt’añatakix, yant’äwinak phuqhachatäki ukanakamp anatt’apxañamatakiw iwxt’apxsma. Akax mä jach’a thakhiwa kunjams mayiwinakax lurasiski ukat kunanaks yant’asktan ukat kunas suyt’ata uk uñjañataki. Ukatx juk’amp suma amuyt’awiw utjaraki kunats yaqhip apnaqirinakax yaqhip lurawinakarux puripxi ukatx yaqhipanakax janiw lurapkiti.Nayaw taqi código fuente uka aplicación uka ukar uñt’ayawayta Nayax suyt’twa jumanakax aka qillqatanx kusisipxañamataki kunjamatix nayax qillqañax wali askïki ukhama it.Ullart'apxatamat yuspajarapxsmawa! JWT SAML JWT JWT cypress GitHub 13. Uñakipt’atanaka Eclipse MicroProfile JWT ukan chiqapar uñjañ API MicroPerfil JSON Web Token (JWT) ukax mä juk’a pachanakanwa. JSON Web Token ukax mä juk’a pachanakanwa Kumuluz Blog ukax mä jach’a uñacht’äwiwa kumuluzEE REST API Seguridad ukax utjiwa RESTful API Seguridad ukax utjiwa Yatichäwi: Java ukan JWTs ukanaka luraña ukat chiqapar uñjaña oktadesarrollador/okta-java-jwt-uñacht’awi Primavera Boot ukax CLI ukawa Java EE Seguridad API (JSR 375/Soteria) ukax JWT ukan chimpunakapampix payara/Payara-Uñacht’awinaka JAX-RS Endpoints ukax JWT ukampiw jark’aqasiña Ukax Eclipse MicroProfile JWT Auth ukampiw apnaqasi JWT Dispensador ukax mä juk’a pachanakanwa Configurable Token Expiración ukaxa 4.0.0 Microservicios ukaxa KumuluzEE MicroProfile ukampi 1.2 JWT ukan chiqañchäwipa: Kunapachas ukat kunjamsa apnaqañasa JWTs ukanak frontend clientes ukan apnaqañatakix Qhipa Guía (GraphQL) . IANA JSON Web Token (JWT) ukax mä jach’a uñacht’äwiwa. CiberChef ukax mä juk’a pachanakanwa KumuluzEE Seguridad uka apnaqaña Mä qhana inglés uñt’ayawi JSON web tokens (JWT): kunas ukat kunas jan ukax Fuerza de Tareas de Ingeniería de Internet ukax RFC7519 ukawa