{"id":833,"date":"2018-01-03T15:32:16","date_gmt":"2018-01-04T00:32:16","guid":{"rendered":"\/blog\/?p=833"},"modified":"2023-09-21T09:37:38","modified_gmt":"2023-09-21T00:37:38","slug":"rest-api-%eb%b3%b4%ec%95%88","status":"publish","type":"post","link":"https:\/\/hasu0707.duckdns.org\/blog\/?p=833","title":{"rendered":"REST API \ubcf4\uc548"},"content":{"rendered":"\n

\ucd9c\ucc98: <\/span>http:\/\/bcho.tistory.com\/955<\/span><\/a>
<\/p>\n

REST API \ubcf4\uc548 <\/span><\/strong>\n\n\n<\/span><\/p>\n\n<\/span>

API \ubcf4\uc548\uc5d0 \ub300\ud574\uc11c\ub294 \ubc31\ubc88,\ucc9c\ubc88\uc744 \uac15\uc870\ud574\ub3c4 \uacfc\ud568\uc774 \uc5c6\ub2e4. \uadfc\ub798\uc5d0 \ub300\ubd80\ubd84\uc758 \uc11c\ube44\uc2a4 \uc2dc\uc2a4\ud15c\ub4e4\uc740 API\ub97c \uae30\ubc18\uc73c\ub85c \ud1b5\uc2e0\uc744 \ud55c\ub2e4.\n<\/span><\/p>\n\n<\/span>

\uc571\uacfc \uc11c\ubc84\uac04\uc758 \ud1b5\uc2e0 \ub610\ub294 \uc790\ubc14\uc2a4\ud06c\ub9bd\ud2b8 \uc6f9 \ud074\ub77c\uc774\uc5b8\ud2b8 \uc640 \uc11c\ubc84\uac04\uc758 \ud1b5\uc2e0\ub4f1 \ub300\ubd80\ubd84\uc758 \ud1b5\uc2e0\uc774 \uc774 API\ub4e4\uc744 \uc774\uc6a9\ud574\uc11c \uc774\ub8e8\uc5b4\uc9c0\uae30 \ub54c\ubb38\uc5d0, \ud55c\ubc88 \ubcf4\uc548\uc774 \ub6ab\ub824 \ubc84\ub9ac\uba74 \uac1c\uc778 \uc815\ubcf4\uac00 \ud0c8\ucde8\ub418\ub294 \uac83 \ubfd0\ub9cc \uc544\ub2c8\ub77c \ub9ce\uc740 \ud070 \ubb38\uc81c\ub97c \uc57c\uae30\ud560 \uc218 \uc788\ub2e4.\n<\/span><\/p>\n\n<\/span>


\n<\/span><\/p>\n\n<\/span>

REST API \ubcf4\uc548 \uad00\uc810<\/span><\/strong><\/span><\/p>\n\n<\/span>

API\ub294 \ubcf4\uc548 \ud3ec\uc778\ud2b8\uc5d0 \ub530\ub77c\uc11c \uc5ec\ub7ec\uac00\uc9c0 \ubcf4\uc548 \uad00\uc810\uc774 \uc874\uc7ac\ud558\ub294\ub370, \ud06c\uac8c \uc544\ub798\uc640 \uac19\uc774 5\uac00\uc9c0 \uc815\ub3c4\ub85c \ubcfc \uc218 \uc788\ub2e4.\n<\/span><\/p>\n\n<\/span>


<\/span><\/strong>\n\n\n<\/span><\/p>\n\n<\/span>

\uc778\uc99d (Authentication)<\/span><\/strong>\n\n\n<\/span><\/p>\n\n<\/span>

\uc778\uc99d\uc740 \ub204\uac00 \uc11c\ube44\uc2a4\ub97c \uc0ac\uc6a9\ud558\ub294\uc9c0\ub97c \ud655\uc778\ud558\ub294 \uc808\ucc28\uc774\ub2e4.\n<\/span><\/p>\n\n<\/span>

\uc27d\uac8c \uc0dd\uac01\ud558\uba74 \uc6f9 \uc0ac\uc774\ud2b8\uc5d0 \uc0ac\uc6a9\uc790 \uc544\uc774\ub514\uc640 \ube44\ubc00 \ubc88\ud638\ub97c \ub123\uc5b4\uc11c, \uc0ac\uc6a9\uc790\ub97c \ud655\uc778\ud558\ub294 \uacfc\uc815\uc774 \uc778\uc99d\uc774\ub2e4.\n<\/span><\/p>\n\n<\/span>

API\ub3c4 \ub9c8\ucc2c\uac00\uc9c0\ub85c API\ub97c \ud638\ucd9c\ud558\ub294 \ub300\uc0c1 (\ub2e8\ub9d0\uc774 \ub418\uc5c8\uac74, \ub2e4\ub978 \uc11c\ubc84\uac00 \ub418\uc5c8\uac74, \uc0ac\uc6a9\uc790\uac00 \ub418\uc5c8\uac74)\uc744 \ud655\uc778\ud558\ub294 \uc808\ucc28\uac00 \ud544\uc694\ud558\uace0 \uc774\ub97c API \uc778\uc99d\uc774\ub77c\uace0 \ud55c\ub2e4. \n<\/span><\/p>\n\n<\/span>


\n<\/span><\/p>\n\n<\/span>

\uc778\uac00 (Authorization)<\/span><\/strong>\n\n\n<\/span><\/p>\n\n<\/span>

\uc778\uac00\ub294 \ud574\ub2f9 \ub9ac\uc18c\uc2a4\uc5d0 \ub300\ud574\uc11c, \uc0ac\uc6a9\uc790\uac00 \uadf8 \ub9ac\uc18c\uc2a4\ub97c \uc0ac\uc6a9\ud560 \uad8c\ud55c\uc774 \uc788\ub294\uc9c0 \uccb4\ud06c\ud558\ub294 \uad8c\ud55c \uccb4\ud06c \uacfc\uc815\uc774\ub2e4.\n<\/span><\/p>\n\n<\/span>

\uc608\ub97c \ub4e4\uc5b4 \/users\ub77c\ub294 \ub9ac\uc18c\uc2a4\uac00 \uc788\uc744 \ub54c, \uc77c\ubc18 \uc0ac\uc6a9\uc790 \uad8c\ud55c\uc73c\ub85c\ub294 \ub0b4 \uc0ac\uc6a9\uc790 \uc815\ubcf4\ub9cc \ubcfc \uc218 \uc788\uc9c0\ub9cc, \uad00\ub9ac\uc790 \uad8c\ud55c\uc73c\ub85c\ub294 \ub2e4\ub978 \uc0ac\uc6a9\uc790 \uc815\ubcf4\ub97c \ubcfc \uc218 \uc788\ub294 \uac83\uacfc \uac19\uc740 \uad8c\ud55c\uc758 \ucc28\uc774\ub97c \uc758\ubbf8\ud55c\ub2e4.\n<\/span><\/p>\n\n<\/span>


\n<\/span><\/p>\n\n<\/span>

\ub124\ud2b8\uc6cc\ud06c \ub808\ubca8 \uc554\ud638\ud654<\/span><\/strong>\n\n\n<\/span><\/p>\n\n<\/span>

\uc778\uc99d\uacfc \uc778\uac00 \uacfc\uc815\uc774 \ub05d\ub098\uc11c API\ub97c \ud638\ucd9c\ud558\uac8c \ub418\uba74, \ub124\ud2b8\uc6cc\ud06c\ub97c \ud1b5\ud574\uc11c \ub370\uc774\ud130\uac00 \uc654\ub2e4\uac14\ub2e4 \ud558\ub294\ub370, \ud574\ucee4\ub4f1\uc774 \uc911\uac04\uc5d0 \uc774 \ub124\ud2b8\uc6cc\ud06c \ud1b5\uc2e0\uc744 \ub09a\uc544 \ucc44\uc11c(\uac10\uccad) \ub370\uc774\ud130\ub97c \ubcfc \uc218 \uc5c6\uac8c \ud560 \ud544\uc694\uac00 \uc788\ub2e4.\n<\/span><\/p>\n\n<\/span>

\uc774\ub97c \ub124\ud2b8\uc6cc\ud06c \ud504\ub85c\ud1a0\ucf5c\ub2e8\uc5d0\uc11c \ucc98\ub9ac\ud558\ub294 \uac83\uc744 \ub124\ud2b8\uc6cc\ud06c \ub808\ubca8\uc758 \uc554\ud638\ud654\ub77c\uace0 \ud558\ub294\ub370, HTTP\uc5d0\uc11c\uc758 \ub124\ud2b8\uc6cc\ud06c \ub808\ubca8 \uc554\ud638\ud654\ub294 \uc77c\ubc18\uc801\uc73c\ub85c HTTPS \uae30\ubc18\uc758 \ubcf4\uc548 \ud504\ub85c\ud1a0\ucf5c\uc744 \uc0ac\uc6a9\ud55c\ub2e4.\n<\/span><\/p>\n\n<\/span>


\n<\/span><\/p>\n\n<\/span>

\uba54\uc2dc\uc9c0 \ubb34\uacb0\uc131 \ubcf4\uc7a5<\/span><\/strong>\n\n\n<\/span><\/p>\n\n<\/span>

\uba54\uc2dc\uc9c0 \ubb34\uacb0\uc131\uc774\ub780, \uba54\uc2dc\uc9c0\uac00 \uc911\uac04\uc5d0 \ud574\ucee4\uc640 \uac19\uc740 \uc678\ubd80 \uc694\uc778\uc5d0 \uc758\ud574\uc11c \ubcc0\uc870\uac00 \ub418\uc9c0 \uc54a\uac8c \ubc29\uc9c0\ud558\ub294 \uac83\uc744 \uc774\uc57c\uae30 \ud55c\ub2e4.\n<\/span><\/p>\n\n<\/span>

\ubb34\uacb0\uc131\uc744 \ubcf4\uc7a5\ud558\uae30 \uc704\ud574\uc11c \ub9ce\uc774 \uc0ac\uc6a9\ud558\ub294 \ubc29\uc2dd\uc740 \uba54\uc2dc\uc9c0\uc5d0 \ub300\ud55c Signature\ub97c \uc0dd\uc131\ud574\uc11c \uba54\uc2dc\uc9c0\uc640 \uac19\uc774 \ubcf4\ub0b8 \ud6c4\uc5d0 \uac80\uc99d\ud558\ub294 \ubc29\uc2dd\uc73c\ub85c, \uc608\ub97c \ub4e4\uc5b4 \uba54\uc2dc\uc9c0 \ubb38\uc790\uc5f4\uc774 \uc788\uc744 \ub54c, \uc774 \ubb38\uc790\uc5f4\uc5d0 \ub300\ud55c \ud574\uc26c\ucf54\ub4dc\ub97c \uc0dd\uc131\ud574\uc11c, \ubb38\uc790\uc5f4\uacfc \ud568\uaed8 \ubcf4\ub0b8 \ud6c4, \uc218\uc2e0\ucabd\uc5d0\uc11c \ubc1b\uc740 \ubb38\uc790\uc5f4\uacfc \uc774 \ubc1b\uc740 \ubb38\uc790\uc5f4\ub85c \uc0dd\uc131\ud55c \ud574\uc26c \ucf54\ub4dc\ub97c \ubb38\uc790\uc5f4\uacfc \ud568\uaed8 \uc628 \ud574\uc26c\ucf54\ub4dc\uc640 \ube44\uad50\ud558\ub294 \ubc29\ubc95\uc774 \uc788\ub2e4. \ub9cc\uc57d\uc5d0 \ubb38\uc790\uc5f4\uc774 \uc911\uac04\uc5d0 \ubcc0\uc870\ub418\uc5c8\uc73c\uba74, \uc6d0\ub798 \ubb38\uc790\uc5f4\uacfc \ud568\uaed8 \uc804\uc1a1\ub41c \ud574\uc26c\ucf54\ub4dc\uc640 \ub9de\uc9c0 \uc54a\uae30 \ub54c\ubb38\uc5d0 \uba54\uc2dc\uc9c0\uac00 \uc911\uac04\uc5d0 \ubcc0\uc870\uac00\ub418\uc5c8\ub294\uc9c0 \ud655\uc778\ud560 \uc218 \uc788\ub2e4.\n<\/span><\/p>\n\n<\/span>

\uba54\uc2dc\uc9c0\uc758 \ubb34\uacb0\uc131\uc758 \uacbd\uc6b0, \uc55e\uc5d0\uc11c \uc5b8\uae09\ud55c \ub124\ud2b8\uc6cc\ud06c \ub808\ubca8\uc758 \uc554\ud638\ud654\ub97c \uc644\ubcbd\ud558\uac8c \uc0ac\uc6a9\ud55c\ub2e4\uba74 \uc678\ubd80\uc801\uc778 \uc694\uc778(\ud574\ucee4)\ub4f1\uc5d0 \uc758\ud574\uc11c \uba54\uc2dc\uc9c0\ub97c \ud574\uc11d \ub2f9\ud560 \uc5fc\ub824\uac00 \uc5c6\uae30 \ub54c\ubb38\uc5d0 \uc0ac\uc6a9\ud560 \ud544\uc694\uac00 \uc5c6\ub2e4.\n<\/span><\/p>\n\n<\/span>


\n<\/span><\/p>\n\n<\/span>

\uba54\uc2dc\uc9c0 \ubcf8\ubb38 \uc554\ud638\ud654<\/span><\/strong>\n\n\n<\/span><\/p>\n\n<\/span>

\ub124\ud2b8\uc6cc\ud06c \ub808\ubca8\uc758 \uc554\ud638\ud654\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc5c6\uac70\ub098, \ub610\ub294 \ub124\ud2b8\uc6cc\ud06c \ub808\ubca8\uc758 \uc554\ud638\ud654\ub97c \uc2e0\ub8b0\ud560 \uc218 \uc5c6\ub294 \uc0c1\ud669\uc758 \uacbd\uc6b0 \ucd94\uac00\uc801\uc73c\ub85c \uba54\uc2dc\uc9c0 \uc790\uccb4\ub97c \uc554\ud638\ud654 \ud558\ub294 \ubc29\ubc95\uc744 \uc0ac\uc6a9\ud55c\ub2e4. \uc774\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ub2e8\uc5d0\uc11c \uad6c\ud604\ud558\ub294\ub370, \uc804\uccb4 \uba54\uc2dc\uc9c0\ub97c \uc554\ud638\ud654 \ud558\ub294 \ubc29\ubc95\uacfc \ud2b9\uc815 \ud544\ub4dc\ub9cc \uc554\ud638\ud654 \ud558\ub294 \ubc29\ubc95 \ub450\uac00\uc9c0\ub85c \uc811\uadfc\ud560 \uc218 \uc788\ub2e4.\n<\/span><\/p>\n\n<\/span>

\uc804\uccb4 \uba54\uc2dc\uc9c0\ub97c \uc554\ud638\ud654\ud560 \uacbd\uc6b0, \uc554\ud638\ud654\uc5d0 \uc18c\uc694\ub418\ub294 \ube44\uc6a9\uc774 \ud074 \ubfd0\ub354\ub77c \uc911\uac04\uc5d0 API Gateway\ub4f1\uc744 \ud1b5\ud574\uc11c \uba54\uc2dc\uc9c0\ub97c \uc5f4\uc5b4\ubcf4\uace0 \uba54\uc2dc\uc9c0 \uae30\ubc18\uc73c\ub85c \ub77c\uc6b0\ud305 \ubcc0\ud658\ud558\ub294 \uc791\uc5c5\ub4f1\uc774 \uc5b4\ub835\uae30 \ub54c\ubb38\uc5d0 \uc77c\ubc18\uc801\uc73c\ub85c \uc804\uccb4\ub97c \uc554\ud638\ud654 \ud558\uae30 \ubcf4\ub2e4\ub294 \ubcf4\uc548\uc774 \ud544\uc694\ud55c \ud2b9\uc815 \ud544\ub4dc\ub9cc \uc554\ud638\ud654 \ud558\ub294 \ubc29\ubc95\uc744 \uc0ac\uc6a9\ud55c\ub2e4.\n<\/span><\/p>\n\n<\/span>


<\/p>\n\n<\/span>

\uadf8\ub7ec\uba74 \uc9c0\uae08\ubd80\ud130 \uac01 \ubcf4\uc548 \uad00\uc810\uc5d0 \ub300\ud574\uc11c \uc870\uae08 \ub354 \uad6c\uccb4\uc801\uc73c\ub85c \uc0b4\ud3b4\ubcf4\ub3c4\ub85d \ud558\uc790. \n<\/span><\/p>\n\n<\/span>


\n<\/span><\/p>\n\n<\/span>

\uc778\uc99d (Authentication)<\/span><\/strong>\n\n\n<\/span><\/p>\n\n<\/span>

API \uc5d0 \ub300\ud55c \uc778\uc99d\uc740 \uc5ec\ub7ec\uac00\uc9c0 \ubc29\ubc95\uc774 \uc788\uc73c\uba70 \uac01 \ubc29\uc2dd\uc5d0 \ub530\ub77c \ubcf4\uc548 \uc218\uc900\uacfc \uad6c\ud604 \ub09c\uc774\ub3c4\uac00 \ub2e4\ub974\uae30 \ub54c\ubb38\uc5d0, \uac01 \ubc29\uc2dd\uc758 \uc7a5\ub2e8\uc810\uc744 \uc798 \uc774\ud574\ud558\uc5ec \uc11c\ube44\uc2a4 \uc218\uc900\uc5d0 \ub9de\ub294 \uc801\uc808\ud55c API \uc778\uc99d \ubc29\uc2dd\uc744 \uc120\ud0dd\ud558\ub3c4\ub85d \ud560 \ud544\uc694\uac00 \uc788\ub2e4.\n<\/span><\/p>\n\n<\/span>


\n<\/span><\/p>\n\n<\/span>

API Key \ubc29\uc2dd<\/span><\/strong>\n\n\n<\/span><\/p>\n\n<\/span>

\uac00\uc7a5 \uae30\ucd08\uc801\uc778 \ubc29\ubc95\uc740 API Key\ub97c \uc774\uc6a9\ud558\ub294 \ubc29\ubc95\uc774\ub2e4. API Key\ub780 \ud2b9\uc815 \uc0ac\uc6a9\uc790\ub9cc \uc54c \uc218 \uc788\ub294 \uc77c\uc885\uc758 \ubb38\uc790\uc5f4\uc774\ub2e4. API\ub97c \uc0ac\uc6a9\ud558\uace0\uc790 \ud560 \ub54c, \uac1c\ubc1c\uc790\ub294 API \uc81c\uacf5\uc0ac\uc758 \ud3ec\ud0c8 \ud398\uc774\ub4f1 \ub4f1\uc5d0\uc11c API Key\ub97c \ubc1c\uae09 \ubc1b\uace0, API\ub97c \ud638\ucd9c\ud560 \ub54c API Key\ub97c \uba54\uc2dc\uc9c0 \uc548\uc5d0 \ub123\uc5b4 \ud638\ucd9c\ud55c\ub2e4. \uc11c\ubc84\ub294 \uba54\uc2dc\uc9c0 \uc548\uc5d0\uc11c API Key\ub97c \uc77d\uc5b4 \uc774 API\uac00 \ub204\uac00 \ud638\ucd9c\ud55c API\uc778\uc9c0\ub97c \uc778\uc99d\ud558\ub294 \ud750\ub984\uc774\ub2e4.\n<\/span><\/p>\n\n<\/span>

\ubaa8\ub4e0 \ud074\ub77c\uc774\uc5b8\ud2b8\ub4e4\uc774 \uac19\uc740 API Key\ub97c \uacf5\uc720\ud558\uae30 \ub54c\ubb38\uc5d0 \ud55c\ubc88 API Key\uac00 \ub178\ucd9c\uc774 \ub418\uba74 \uc804\uccb4 API\uac00 \ub6ab\ub824 \ubc84\ub9ac\ub294 \ubb38\uc81c\uac00 \uc788\uae30 \ub54c\ubb38\uc5d0 \ub192\uc740 \ubcf4\uc548 \uc778\uc99d\uc744 \uc694\uad6c \ud558\ub294 \uacbd\uc6b0\uc5d0\ub294 \uad8c\uc7a5\ud558\uc9c0 \uc54a\ub294\ub2e4.\n<\/span><\/p>\n\n<\/span>


\n<\/span><\/p>\n\n<\/span>

API Token \ubc29\uc2dd<\/span><\/strong><\/span><\/p>\n\n<\/span>

\ub2e4\ub978 \ubc29\uc2dd\uc73c\ub85c\ub294 API Token\uc744 \ubc1c\uae09\ud558\ub294 \ubc29\uc2dd\uc774 \uc788\ub294\ub370, \uc0ac\uc6a9\uc790 ID,PASSWD\ub4f1\uc73c\ub85c \uc0ac\uc6a9\uc790\ub97c \uc778\uc99d\ud55c \ud6c4\uc5d0, \uadf8 \uc0ac\uc6a9\uc790\uac00 API \ud638\ucd9c\uc5d0 \uc0ac\uc6a9\ud560 \uae30\uac04\uc774 \uc720\ud6a8\ud55c API Token\uc744 \ubc1c\uae09\ud574\uc11c API Token\uc73c\ub85c \uc0ac\uc6a9\uc790\ub97c \uc778\uc99d\ud558\ub294 \ubc29\uc2dd\uc774\ub2e4.\n<\/span><\/p>\n\n<\/span>

\ub9e4\ubc88 API \ud638\ucd9c\uc2dc \uc0ac\uc6a9\uc790 ID,PASSWD\ub97c \ubcf4\ub0b4\uc9c0 \uc54a\uace0, API Token\uc744 \uc0ac\uc6a9\ud558\ub294 \uc774\uc720\ub294 \uc0ac\uc6a9\uc790 PASSWD\ub294 \uc8fc\uae30\uc801\uc73c\ub85c \ubc14\ub014 \uc218 \uc788\uae30 \ub54c\ubb38\uc774\uace0, \ub9e4\ubc88 \ub124\ud2b8\uc6cc\ud06c\ub97c \ud1b5\ud574\uc11c \uc0ac\uc6a9\uc790 ID\uc640 PASSWD\ub97c \ubcf4\ub0b4\ub294 \uac83\uc740 \ubcf4\uc548\uc801\uc73c\ub85c \uc0ac\uc6a9\uc790 \uacc4\uc815 \uc815\ubcf4\ub97c \ud0c8\ucde8 \ub2f9\ud560 \uac00\ub2a5\uc131\uc774 \ub192\uae30 \ub54c\ubb38\uc5d0 API Token\uc744 \ubcc4\ub3c4\ub85c \ubc1c\uae09\ud574\uc11c \uc0ac\uc6a9\ud558\ub294 \uac83\uc774\ub2e4.\n<\/span><\/p>\n\n<\/span>

API Token\uc744 \ud0c8\ucde8 \ub2f9\ud558\uba74 API\ub97c \ud638\ucd9c\ud560 \uc218 \ub294 \uc788\uc9c0\ub9cc, \ubc18\ub300\ub85c \uc0ac\uc6a9\uc790 ID\uc640 PASSWD\ub294 \ud0c8\ucde8 \ub2f9\ud558\uc9c0 \uc54a\ub294\ub2e4. \uc0ac\uc6a9\uc790PASSWD\ub97c \ud0c8\ucde8\ub2f9\ud558\uba74 \uc77c\ubc18\uc801\uc73c\ub85c \uc0ac\uc6a9\uc790\ub4e4\uc740 \ub2e4\ub978 \uc11c\ube44\uc2a4\uc5d0\ub3c4 \uac19\uc740 PASSWD\ub97c \uc0ac\uc6a9\ud558\ub294 \uacbd\uc6b0\uac00 \ub9ce\uae30 \ub54c\ubb38\uc5d0 \uc5f0\uc1c4\uc801\uc73c\ub85c \ub2e4\ub978 \uc11c\ube44\uc2a4\uc5d0 \ub300\ud574\uc11c\ub3c4 \uacf5\uaca9\uc744 \ub2f9\ud560 \uc218 \uc788\ub294 \uac00\ub2a5\uc131\uc774 \ub192\uc544\uc9c0\uae30 \ub54c\ubb38\uc774\ub2e4. \uc608\ub97c \ub4e4\uc5b4\uc11c \ub9e4\ubc88 \ud638\ucd9c\uc2dc\ub9c8\ub2e4 \uc0ac\uc6a9\uc790 ID,PASSWD\ub97c \ubcf4\ub0b4\uc11c \ud398\uc774\uc2a4\ubd81\uc758 \uacc4\uc815\uacfc \ube44\ubc00\ubc88\ud638\ub97c \ud0c8\ucde8 \ub2f9\ud55c \uacbd\uc6b0, \ud574\ucee4\uac00 \uc774 \uacc4\uc815\uacfc \ube44\ubc00 \ubc88\ud638\ub97c \uc774\uc6a9\ud574\uc11c GMail\uc774\ub098 \ud2b8\uc704\ud130\uc640 \uac19\uc740 \ub2e4\ub978 \uc11c\ube44\uc2a4\uae4c\uc9c0 \ud574\ud0b9 \ud560 \uc218 \uc788\uae30 \ub54c\ubb38\uc5d0, \uc774\ub7ec\ud55c \uac00\ub2a5\uc131\uc744 \ucd5c\uc18c\ud654\ud558\uae30 \uc704\ud568\uc774\ub2e4.\n<\/span><\/p>\n\n<\/span>

 \n<\/span><\/p>\n\n<\/span>

\"01.png\"\n<\/span><\/p>\n\n<\/span>


<\/p>\n\n<\/span>

\ud750\ub984\uc744 \uc124\uba85\ud558\uba74 \uc704\uc758 \uadf8\ub9bc\uacfc \uac19\ub2e4.\n<\/span><\/p>\n\n<\/span>

1.<\/span> <\/span>API Client\uac00 \uc0ac\uc6a9\uc790 ID,PASSWD\ub97c \ubcf4\ub0b4\uc11c API\ud638\ucd9c\uc744 \uc704\ud55c API Token\uc744 \uc694\uccad\ud55c\ub2e4.<\/span>\n<\/span><\/p>\n\n<\/span>

2.<\/span> <\/span>API \uc778\uc99d \uc11c\ubc84\ub294 \uc0ac\uc6a9\uc790 ID,PASSWD\ub97c \uac00\uc9c0\uace0, \uc0ac\uc6a9\uc790 \uc815\ubcf4\ub97c \ubc14\ud0d5\uc73c\ub85c \uc0ac\uc6a9\uc790\ub97c \uc778\uc99d\ud55c\ub2e4.<\/span>\n<\/span><\/p>\n\n<\/span>

3.<\/span> <\/span>\uc778\uc99d\ub41c \uc0ac\uc6a9\uc790\uc5d0 \ub300\ud574\uc11c API Token\uc744 \ubc1c\uae09\ud55c\ub2e4. (\uc720\ud6a8 \uae30\uac04\uc744 \uac00\uc9c0\uace0 \uc788\ub2e4.)<\/span>\n<\/span><\/p>\n\n<\/span>

4.<\/span> <\/span>API Client\ub294 \uc774 API Token\uc73c\ub85c API\ub97c \ud638\ucd9c\ud55c\ub2e4. API Server\ub294 API Token\uc774 \uc720\ud6a8\ud55c\uc9c0\ub97c API Token \uad00\ub9ac \uc11c\ubc84\uc5d0 \ubb38\uc758\ud558\uace0, API Token\uc774 \uc720\ud6a8\ud558\uba74 API \ud638\ucd9c\uc744 \ubc1b\uc544 \ub4e4\uc778\ub2e4.<\/span>\n<\/span><\/p>\n\n<\/span>

\uc774 \uc778\uc99d \ubc29\uc2dd\uc5d0\ub294 \uc5ec\ub7ec\uac00\uc9c0 \ub2e4\uc591\ud55c \ubcc0\uc885\uc774 \uc874\uc7ac\ud558\ub294\ub370\n<\/span><\/p>\n\n<\/span>

\uba3c\uc800 1\ub2e8\uacc4\uc758 \uc0ac\uc6a9\uc790 \uc778\uc99d \ub2e8\uacc4\uc5d0\uc11c\ub294 \ubcf4\uc548 \uc218\uc900\uc5d0 \ub530\ub77c\uc11c \uc5ec\ub7ec\uac00\uc9c0 \ubc29\uc2dd\uc744 \uc0ac\uc6a9\ud560 \uc218 \uc788\ub2e4.\n<\/span><\/p>\n\n<\/span>


\n<\/span><\/p>\n\n<\/span>

HTTP Basic Auth <\/span><\/strong>\n<\/span><\/p>\n\n<\/span>

\u203b \uc0c1\uc138 : http:\/\/en.wikipedia.org\/wiki\/Basic_access_authentication\n<\/span><\/p>\n\n<\/span>

\uac00\uc7a5 \uae30\ubcf8\uc801\uc774\uace0 \ub2e8\uc21c\ud55c \ud615\ud0dc\uc758 \uc778\uc99d \ubc29\uc2dd\uc73c\ub85c \uc0ac\uc6a9\uc790 ID\uc640 PASSWD\ub97c HTTP Header\uc5d0 Base64 \uc778\ucf54\ub529 \ud615\ud0dc\ub85c \ub123\uc5b4\uc11c \uc778\uc99d\uc744 \uc694\uccad\ud55c\ub2e4.\n<\/span><\/p>\n\n<\/span>

\uc608\ub97c \ub4e4\uc5b4 \uc0ac\uc6a9\uc790 ID\uac00 terry\uc774\uace0 PASSWD\uac00 hello world\uc77c \ub54c, \ub2e4\uc74c\uacfc \uac19\uc774 HTTP \ud5e4\ub354\uc5d0 \"terry:hello world\"\ub77c\ub294 \ubb38\uc790\uc5f4\uc744 Base64 \uc778\ucf54\ub529\uc744\ud574\uc11c \"Authorization\"\uc774\ub77c\ub294 \uc774\ub984\uc758 \ud5e4\ub354\ub85c \uc11c\ubc84\uc5d0 \uc804\uc1a1\ud558\uc5ec \uc778\uc99d\uc744 \uc694\uccad\ud55c\ub2e4.\n<\/span><\/p>\n\n<\/span>

Authorization: Basic VGVycnk6aGVsbG8gd29ybGQ=\n<\/span><\/p>\n\n<\/span>

\uc911\uac04\uc5d0 \ud328\ud0b7\uc744 \uac00\ub85c\ucc44\uc11c \uc774 \ud5e4\ub354\ub97c Base64\ub85c \ub514\ucf54\ub529\ud558\uba74 \uc0ac\uc6a9\uc790 ID\uc640 PASSWD\uac00 \uadf8\ub300\ub85c \ub178\ucd9c\ub418\uae30 \ub54c\ubb38\uc5d0 \ubc18\ub4dc\uc2dc HTTPS \ud504\ub85c\ud1a0\ucf5c\uc744 \uc0ac\uc6a9\ud574\uc57c \ud55c\ub2e4.\n<\/span><\/p>\n\n<\/span>


\n<\/span><\/p>\n\n<\/span>

Digest access Authentication<\/span><\/strong>\n<\/span><\/p>\n\n<\/span>

\u203b<\/span> <\/span>\uc0c1\uc138 : http:\/\/en.wikipedia.org\/wiki\/Digest_access_authentication<\/span>\n<\/span><\/p>\n\n<\/span>

HTTP Basic Auth\uac00 Base64 \ud615\ud0dc\ub85c PASSWD\ub97c \uc2e4\uc5b4\uc11c \ubcf4\ub0b4\ub294 \ub2e8\uc810\uc744 \ubcf4\uac15\ud558\uc5ec \ub098\uc628 \uc778\uc99d \ud504\ub85c\ud1a0\ucf5c\uc774 Digest access Authentication \uc774\ub77c\ub294 \ubc29\ubc95\uc73c\ub85c, \uae30\ubcf8 \uc6d0\ub9ac\ub294 \ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \uc778\uc99d\uc744 \uc694\uccad\ud560 \ub54c, \ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \uc11c\ubc84\ub85c\ubd80\ud130 nonce \ub77c\ub294 \uc77c\uc885\uc758 \ub09c\uc218\uac12\uc744 \ubc1b\uc740 \ud6c4\uc5d0, (\uc11c\ubc84\uc640 \ud074\ub77c\uc774\uc5b8\ud2b8\ub294 \uc774 \ub09c\uc218 \uac12\uc744 \uc11c\ub85c \uc54c\uace0 \uc788\uc74c), \uc0ac\uc6a9\uc790 ID\uc640 PASSWD\ub97c \uc774 \ub09c\uc218\uac12\uc744 \uc774\uc6a9\ud574\uc11c HASH\ud654\ud558\uc5ec \uc11c\ubc84\ub85c \uc804\uc1a1\ud558\ub294 \ubc29\uc2dd\uc774\ub2e4.\n<\/span><\/p>\n\n<\/span>

\uc774 \uacbd\uc6b0\uc5d0\ub294 \uc9c1\uc811 ID\uc640 PASSWD\uac00 \ud3c9\ubb38 \ud615\ud0dc\ub85c \ub0a0\uc544\uac00\uc9c0 \uc54a\uae30 \ub54c\ubb38\uc5d0, \ud574\ucee4\uac00 \uc911\uac04\uc5d0 PASSWD\ub97c \ud0c8\ucde8\ud560 \uc218 \uc5c6\uace0, \uc124\ub839 HASH \uc54c\uace0\ub9ac\uc998\uc744 \uc54c\uace0 \uc788\ub2e4\uace0 \ud558\ub354\ub77c\ub3c4, HASH\ub41c \uac12\uc5d0\uc11c \ubc18\ub300\ub85c PASSWD\ub97c \ucd94\ucd9c\ud558\uae30\uac00 \uc5b4\ub835\uae30 \ub54c\ubb38\uc5d0, Basic Auth \ubc29\uc2dd\uc5d0 \ube44\ud574\uc11c \ud5a5\uc0c1\ub41c \ubcf4\uc548\uc744 \uc81c\uacf5\ud55c\ub2e4. \uc804\uccb4\uc801\uc778 \ud750\ub984\uc744 \ubcf4\uc790\n<\/span><\/p>\n\n<\/span>


\n<\/span><\/p>\n\n<\/span>

\"02.png\"\n<\/span><\/p>\n\n<\/span>

 <\/span>
<\/p>\n\n<\/span>

1.<\/span> <\/span>\ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \uc11c\ubc84\uc5d0 \ud2b9\uc815\ub9ac\uc18c\uc2a4 \/car\/index.html \uc744 \uc694\uccad\ud55c\ub2e4.<\/span>\n<\/span><\/p>\n\n<\/span>


\n<\/span><\/p>\n\n<\/span>

2.<\/span> <\/span>\uc11c\ubc84\ub294 \ud574\ub2f9 \uc138\uc158\uc5d0 \ub300\ud55c nonce\uac12\uc744 \uc0dd\uc131\ud558\uc5ec \uc800\uc7a5\ud55c \ud6c4\uc5d0, \ud074\ub77c\uc774\uc5b8\ud2b8\uc5d0 \ub9ac\ud134\ud55c\ub2e4. \uc774\ub54c realm\uc744 \uac19\uc774 \ub9ac\ud134\ud558\ub294\ub370, realm\uc740 \uc778\uc99d\uc758 \ubc94\uc704\ub85c, \uc608\ub97c \ub4e4\uc5b4 \ud558\ub098\uc758 \uc6f9 \uc11c\ubc84\uc5d0 car.war, market.war\uac00 \uac01\uac01 http:\/\/myweb\/car , http:\/\/myweb\/market \uc774\ub77c\ub294 URL\ub85c \ubc30\ud3ec\uac00 \ub418\uc5c8\ub2e4\uace0 \ud558\uba74, \uc774 \uc6f9\uc0ac\uc774\ud2b8\ub294 \uac01\uac01 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 car.war\uc640 market.war\uc5d0 \ub300\ud574\uc11c \uc11c\ub85c \ub2e4\ub978 \uc778\uc99drealm\uc744 \uac16\ub294\ub2e4. <\/span>\n<\/span><\/p>\n\n<\/span>

\u203b \ud574\ub2f9 session\uc5d0 \ub300\ud574\uc11c nonce \uac12\uc744 \uc720\uc9c0 \uc800\uc7a5\ud574\uc57c \ud558\uae30 \ub54c\ubb38\uc5d0, \uc11c\ubc84 \ucabd\uc5d0\uc11c\ub294 \uc0c1\ud0dc \uc720\uc9c0\uc5d0 \ub300\ud55c \ubd80\ub2f4\uc774 \uc0dd\uae34\ub2e4. HTTP Session\uc744 \uc0ac\uc6a9\ud558\uac70\ub098 \ub610\ub294 \uc11c\ubc84\uac04\uc5d0 \uacf5\uc720 \uba54\ubaa8\ub9ac(memcached\ub098 redis\ub4f1)\uc744 \ub123\uc5b4\uc11c \uc11c\ubc84\uac04\uc5d0 \uc0c1\ud0dc \uc815\ubcf4\ub97c \uc720\uc9c0\ud560 \uc218 \uc788\ub294 \uc124\uacc4\uac00 \ud544\uc694\ud558\ub2e4.\n<\/span><\/p>\n\n<\/span>


\n<\/span><\/p>\n\n<\/span>

3.<\/span> <\/span>\ud074\ub77c\uc774\uc5b8\ud2b8\ub294 \uc55e\uc5d0\uc11c \uc11c\ubc84\ub85c\ubd80\ud130 \ubc1b\uc740 realm\uacfc nonce\uac12\uc73c\ub85c Hash \uac12\uc744 \uc0dd\uc131\ud558\ub294\ub370, <\/span>\n<\/span><\/p>\n\n<\/span>

HA1 = MD5(\uc0ac\uc6a9\uc790\uc774\ub984:realm:\ube44\ubc00\ubc88\ud638)\n<\/span><\/p>\n\n<\/span>

HA2 = MD5(HTTP method:HTTP URL)\n<\/span><\/p>\n\n<\/span>

response hash = MD5(HA1:nonce:HA2)\n<\/span><\/p>\n\n<\/span>

\ub97c \ud1b5\ud574\uc11c response hash \uac12\uc744 \uc0dd\uc131\ud55c\ub2e4.\n<\/span><\/p>\n\n<\/span>

\uc608\ub97c \ub4e4\uc5b4\uc11c \/car\/index.html \ud398\uc774\uc9c0\ub97c \uc811\uadfc\ud558\ub824\uace0 \ud588\ub2e4\uace0 \ud558\uc790, \uc11c\ubc84\uc5d0\uc11c nonce\uac12\uc744 dcd98b7102dd2f0e8b11d0f600bfb0c093\ub97c \ub9ac\ud134\ud558\uc600\uace0, realm\uc740 car_realm@myweb.com \uc774\ub77c\uace0 \ud558\uc790. \uadf8\ub9ac\uace0 \uc0ac\uc6a9\uc790 \uc774\ub984\uc774 terry, \ube44\ubc00 \ubc88\ud638\uac00 hello world\ud558\uba74\n<\/span><\/p>\n\n<\/span>

HA1 = MD5(terry:car_realm@myweb.com:hello world)\ub85c 7f052c45acf53fa508741fcf68b5c860 \uac12\uc774 \uc0dd\uc131\ub418\uace0\n<\/span><\/p>\n\n<\/span>

HA2 = MD5(GET:\/car\/index.html) \uc73c\ub85c 0c9f8cf299f5fc5c38d5a68198f27247 \uac12\uc774 \uc0dd\uc131\ub41c\ub2e4.\n<\/span><\/p>\n\n<\/span>

Response Hash\ub294MD5(7f052c45acf53fa508741fcf68b5c860: dcd98b7102dd2f0e8b11d0f600bfb0c093:0c9f8cf299f5fc5c38d5a68198f27247) \ub85c \uacb0\uacfc\ub294 95b0497f435dcc9019c335253791762f \ub41c\ub2e4.\n<\/span><\/p>\n\n<\/span>

\ud074\ub77c\uc774\uc5b8\ud2b8\ub294 \uc0ac\uc6a9\uc790 \uc774\ub984\uc778 \"terry\"\uc640 \uc55e\uc11c \ubc1b\uc740 nonce\uac12\uc778 dcd98b7102dd2f0e8b11d0f600bfb0c093\uc640 \uacc4\uc0b0\ub41c hash\uac12\uc778 95b0497f435dcc9019c335253791762f \uac12\uc744 \uc11c\ubc84\uc5d0\uac8c \uc804\uc1a1\ud55c\ub2e4.\n<\/span><\/p>\n\n<\/span>


\n<\/span><\/p>\n\n<\/span>

4.<\/span> <\/span>\uc11c\ubc84\ub294 \uba3c\uc800 3\uc5d0\uc11c \uc804\ub2ec\ub41c nonce\uac12\uc774 \uc774 \uc138\uc158\uc744 \uc704\ud574\uc11c \uc11c\ubc84\uc5d0 \uc800\uc7a5\ub41c nonce \uac12\uacfc \uac19\uc740\uc9c0 \ube44\uad50\ub97c \ud55c\ud6c4, \uc804\ub2ec\ub41c \uc0ac\uc6a9\uc790 \uc774\ub984\uc778 terry\uc640nonce\uac12 \uadf8\ub9ac\uace0 \uc11c\ubc84\uc5d0 \uc800\uc7a5\ub41c \uc0ac\uc6a9\uc790 \ube44\ubc00 \ubc88\ud638\ub97c \uc774\uc6a9\ud574\uc11c 3\ubc88\uacfc \uac19\uc740 \ubc29\uc2dd\uc73c\ub85c response hash \uac12\uc744 \uacc4\uc0b0\ud558\uc5ec \ud074\ub77c\uc774\uc5b8\ud2b8\uc5d0\uc11c \uc804\ub2ec\ub41c hash\uac12\uacfc \uac19\uc740\uc9c0 \ube44\uad50\ub97c \ud558\uace0 \uac19\uc73c\uba74 \ud574\ub2f9 \ub9ac\uc18c\uc2a4\ub97c (\/car\/index.html \ud30c\uc77c)\uc744 \ub9ac\ud134\ud55c\ub2e4. <\/span>\n<\/span><\/p>\n\n<\/span>


\n<\/span><\/p>\n\n<\/span>

\uac04\ub2e8\ud55c \uae30\ubcf8 \uba54\ucee4\ub2c8\uc998\ub9cc \uc124\uba85\ud55c\uac83\uc774\uba70, \uc0ac\uc2e4 digest access authentication\uc740 qop (quality of protection)\uc774\ub77c\ub294 \ub808\ubca8\uc5d0 \ub530\ub77c\uc11c \uc5ec\ub7ec\uac00\uc9c0 \ubcc0\uc885(\ucd94\uac00\uc801\uc778 \ubcf4\uc548)\uc744 \uc9c0\uc6d0\ud55c\ub2e4. \uc5b8\ub73b \ubcf4\uba74 \ubcf5\uc7a1\ud574\uc11c \ubcf4\uc548 \ub808\ubca8\uc774 \ub192\uc544\ubcf4\uc774\uc9c0\ub9cc \uc0ac\uc2e4 Hash \uc54c\uace0\ub9ac\uc998\uc73c\ub85c MD5\ub97c \uc0ac\uc6a9\ud558\ub294\ub370, \uc774 MD5\ub294 \ubcf4\uc548 \ub808\ubca8\uc774 \ub0ae\uae30 \ub54c\ubb38\uc5d0 \ubbf8\uc815\ubd80 \ubcf4\uc548 \uc778\uc99d \uaddc\uaca9\uc778 FIPS\uc778\uc99d (http:\/\/csrc.nist.gov\/publications\/fips\/fips140-2\/fips1402annexa.pdf) \uc5d0\uc11c \uc778\uc99d\ud558\uace0 \uc788\uc9c0 \uc54a\ub2e4. FIPS \uc778\uc99d\uc5d0\uc11c\ub294 \ucd5c\uc18c\ud55c SHA-1,SHA1-244,SHA1-256 \uc774\uc0c1\uc758 \ud574\uc26c \uc54c\uace0\ub9ac\uc998\uc744 \uc0ac\uc6a9\ud558\ub3c4\ub85d \uad8c\uc7a5\ud558\uace0 \uc788\ub2e4.\n<\/span><\/p>\n\n<\/span>

MD5 \ud574\uc26c\uc758 \uacbd\uc6b0\uc5d0\ub294 \ud2b9\ud788\ub098 Dictionary Attack\uc5d0 \ucde8\uc57d\ud55c\ub370, Dictionary Attack\uc774\ub780, Hash\ub41c \uac12\uacfc \uc6d0\ub798 \uac12\uc744 Dictionary (\uc0ac\uc804) \ub370\uc774\ud130 \ubca0\uc774\uc2a4\ub85c \uc720\uc9c0\ud574\ub193\uace0, Hash \uac12\uc73c\ub85c \uc6d0\ubcf8 \uba54\uc2dc\uc9c0\ub97c \uac80\uc0c9\ud558\ub294 \ubc29\uc2dd\uc778\ub370, \uc2e4\uc81c\ub85c http:\/\/en.wikipedia.org\/wiki\/Digest_access_authentication \uc124\uba85\uc5d0\uc11c \uc608\uc81c\ub85c \ub4e0\n<\/span><\/p>\n\n<\/span>