20.500.12556/DKUM-75211 Varovanje programskih vmesnikov spletnih storitev v sodobnih porazdeljenih sistemih s protokolom OpenID Connect diplomsko delo Securing web service application programming interfaces in modern distributed systems with the OpenID Connect protocol V diplomskem delu smo opisali, kako zavarovati dostopne točke spletnih aplikacij v porazdeljenih sistemih. Zavarovali smo jih s slojem avtorizacije, ki ob vsakem poskusu klica dostopnih točk preveri dovoljenja klicatelja. To smo dosegli s protokolom OpenID Connect, ki ga implementira odprtokodna rešitev Keycloak. Za prikaz delovanja varovanja v različnih scenarijih smo pripravili spletno aplikacijo, zgrajeno v aplikacijskem ogrodju Spring Boot in napisano v jeziku Java. Po analizi uporabe dostopnih točk preko varnostnega sloja smo ugotovili, da je protocol OpenID Connect enostavna in primerna rešitev za avtoriziranje zunanjih uporabnikov. Za dodaten nivo varnosti OpenID Connect ponuja rešitev za avtentikacijo uporabnikov, kar pa ni bil cilj naloge. In this thesis we have described how to protect the access points in our web application. We secured them by adding an authorization layer, which checks for user privileges on every call made on the access points. This was achieved by using protocol OpenID Connect, which is implemented by the opensource service Keycloak. For demonstration purposes, we prepared a web application built in Spring Boot framework and written in the Java programming language. After evaluating the usage of protected end-points, we have deducted that protocol OpenID Connect is a simple and appropriate solution for authorization purposes. For an extra layer of security, OpenID Connect offers additional functionality with the possibility of authenticating users, but that was not the purpose of this project. mikroservisna arhitektura varovanje programskih vmesnikov OAuth 2.0 OpenID Connect servis Keycloak microservice architecture securing APIs OAuth 2.0 OpenID Connect Keycloak service true true false [L. Horvatič] Slovenski jezik Angleški jezik Diplomsko delo/naloga 2019-09-27 12:54:49 2019-11-08 11:22:04 2022-08-09 11:03:35 2019-12-18 03:16:28 2019 0 Maribor 0 Maribor VI, 35 f. 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 004.777(043.2) 22865686 URN:SI:UM:DK:AJO5SBI3 UN_Horvatic_Luka_2019.pdf UN_Horvatic_Luka_2019.pdf 1 34FDD02267C4890B7D46807A23FE46E5 3f44de8eeed0d2d7c187d994cb7c30b6c8d30e15c30c776a5bf3511ba3fd38cd 0d683870-7c11-11eb-bb7a-00155d0001ca 20.500.12556/dkum/b9e5ea2d-207c-4532-b00a-e7ed518f753a https://dk.um.si/Dokument.php?lang=slv&id=138710 Fakulteta za elektrotehniko, računalništvo in informatiko 0 0 0