This article discusses the key points of developing a secure RESTful web service API for keeping a student achievement journal. The relevance of using web services has been analyzed. The classification of web applications is given. The features of the Single Page Application architecture were considered. Comparative characteristics of architectural styles of application programming interfaces are given. Requirements to be met by RESTful API services are considered. The basic principles of API security were analyzed. A list of the main vulnerabilities that may appear during the development of the REST API is given. An overview of popular authentication schemes (methods) is given. Comparative characteristics of web frameworks of the Python programming language are given. The main tools used in the development of web API applications are listed. The process of creating a secure prototype of a RESTful web service API in Python using the Flask microframework and a tool for describing the Swagger specifications is presented. The process of configuring the application was examined in detail. The main recommendations for securing a web application, database and web server settings are listed. The key points of ensuring the protection of the developed web application are considered. The results obtained were analyzed.
This article is devoted to solving the problem of accumulation, systematization and translation of the practices of using digital educational technologies in municipal educational organizations. The solution to this problem was carried out through the implementation of the municipal project "Organization of a system of digital education practices in the urban district of the city of Yelets" in 2019. The project was aimed at involving at least 350 managing and teaching staff, 4000 students into the active practice of using digital educational technologies in educational organizations of the urban district of the city of Yelets by the end of 2019. As a way to achieve the goal, the implementation of a system of digital education practices in educational organizations of the urban district of the city of Yelets was determined. Continuity and concession are key features of this system. Consequently, the stakeholders are preschool educational organizations, general educational organizations, organizations of additional education, secondary vocational education and higher education. This system involved the use of such organizational forms as a resource center, a municipal network platform, a pivotal school, an author’s school, within which approbation, tuning and dissemination of the experience of using software products, the LECTA digital educational platform, the digital educational environment "Mobile e-education" and directions 3D modeling, digital video and robotics. The key results of the conducted research were not only quantitative but also qualitative indicators. The main problem that has blocked the adoption of digital education tools among the pedagogical community is the belief that they are ineffective compared to full-time education.
The developers of 1C offer a line of software products to automate the production processes of enterprises. 1C: ERP Enterprise Management and 1C: Salary and Personnel Management are the flagship solutions of 1C. In the course of the work, the difficulties that arise when it is necessary to synchronize data between the configurations of 1C: ERP Enterprise Management and 1C: Salary and Personnel Management have been analyzed. This article analyzes the functionality of the above products. An overview of the main elements underlying the mechanism for synchronizing information between 1C applied solutions is given. The process of data exchange and synchronization between the products 1C: ERP Enterprise Management and 1C: Salary and Personnel Management using the built-in tools of the 1C software platform is considered. The process of organizing interaction and data synchronization in the considered solutions is presented. Recommendations related to setting up and receiving synchronized objects are given. The analysis of the results is carried out, conclusions are drawn.
The article is devoted to the development of a prototype of a secure single page-application (SPA) web service for automating user information accounting. The relevance of this study is very high due to the use of web services. The article provides a classification of web applications and shows the features of the architecture of a single page application used in the development of the service. Based on a comparative analysis of the architectural styles of the API, the most appropriate style was selected. Considered and taken into account the key points of the development of a secure application programming interface (API), the requirements that must be met by RESTful API services. The work used popular authentication schemes (methods). A comparative characteristic of web frameworks of the Python programming language is given, on the basis of which a tool for implementing a web service is selected. Shows the main advantages of using Python when developing paged web services and the security tools included in the standard package of the Flask web services development framework. Shows how to securely prototype a Python RESTful SPA Web Service API using Flask. An example of using the Swagger tool to describe the specifications of the developed API is given. The process of setting up the application is considered in detail. The main recommendations for securing a web application, setting up a database and a web server are listed. The key points of ensuring the protection of the developed web application are considered. Conclusions are made regarding the choice of the architectural style of the application API, the most suitable tools and technologies for the software implementation of the service.
scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.
customersupport@researchsolutions.com
10624 S. Eastern Ave., Ste. A-614
Henderson, NV 89052, USA
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Copyright © 2024 scite LLC. All rights reserved.
Made with 💙 for researchers
Part of the Research Solutions Family.