Fonti

Fonti autorevoli

Le definizioni, la semantica degli status code e le pratiche di design in questo pack sono fondate sui seguenti standard primari e riferimenti ampiamente riconosciuti. Dove un concetto ha una specifica canonica (ad esempio la semantica HTTP o Problem Details), viene citato il documento IETF mantenuto.

HTTP e standard web fondamentali (IETF)

  • HTTP Semantics - RFC 9110 (metodi, idempotenza, status code, richieste condizionali), IETF. https://www.rfc-editor.org/rfc/rfc9110.html
  • HTTP Caching - RFC 9111, IETF. https://www.rfc-editor.org/rfc/rfc9111.html
  • Problem Details for HTTP APIs - RFC 9457 (rende obsoleta la RFC 7807), IETF. https://www.rfc-editor.org/rfc/rfc9457.html
  • RateLimit header fields for HTTP - draft IETF (httpapi WG). https://datatracker.ietf.org/doc/draft-ietf-httpapi-ratelimit-headers/
  • The Sunset HTTP Header Field - RFC 8594, IETF. https://www.rfc-editor.org/rfc/rfc8594.html
  • The Deprecation HTTP Header Field - RFC 9745, IETF. https://www.rfc-editor.org/rfc/rfc9745.html

Autenticazione e autorizzazione

  • The OAuth 2.0 Authorization Framework - RFC 6749, IETF. https://www.rfc-editor.org/rfc/rfc6749.html
  • Proof Key for Code Exchange (PKCE) - RFC 7636, IETF. https://www.rfc-editor.org/rfc/rfc7636.html
  • JSON Web Token (JWT) - RFC 7519, IETF. https://www.rfc-editor.org/rfc/rfc7519.html
  • OpenID Connect Core 1.0 - OpenID Foundation. https://openid.net/specs/openid-connect-core-1_0.html

Formati di aggiornamento e patch

  • JSON Merge Patch - RFC 7386, IETF. https://www.rfc-editor.org/rfc/rfc7386.html
  • JSON Patch - RFC 6902, IETF. https://www.rfc-editor.org/rfc/rfc6902.html

Descrizione e stile delle API

  • OpenAPI Specification - OpenAPI Initiative (Linux Foundation). https://spec.openapis.org/oas/latest.html
  • Architectural Styles and the Design of Network-based Software Architectures (REST) - Roy T. Fielding, dissertazione. https://ics.uci.edu/~fielding/pubs/dissertation/top.htm
  • JSON:API Specification. https://jsonapi.org/format/
  • Microsoft REST API Guidelines. https://github.com/microsoft/api-guidelines/blob/vNext/Guidelines.md
  • Google API Improvement Proposals (AIP). https://google.aip.dev/

Piattaforma web e sicurezza

  • CORS - MDN Web Docs (Mozilla). https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS
  • HTTP response status codes - MDN Web Docs (Mozilla). https://developer.mozilla.org/en-US/docs/Web/HTTP/Status
  • OWASP API Security Top 10. https://owasp.org/API-Security/editions/2023/en/0x00-header/
  • Richardson Maturity Model - Martin Fowler. https://martinfowler.com/articles/richardsonMaturityModel.html

RPC e schema

  • gRPC Documentation. https://grpc.io/docs/
  • GraphQL Specification. https://spec.graphql.org/
  • Semantic Versioning 2.0.0. https://semver.org/