In un approfondimento dedicato alle linee guida API abbiamo spiegato quanto siano fondamentali, nel contesto di un API management<\/a> moderno, concetti come quello delle API guidelines e di APIOps<\/a>, quest\u2019ultimo inteso come l’applicazione delle pratiche DevOps all’intero ciclo di vita delle API. L\u2019API Linting \u00e8 un\u2019attivit\u00e0 assimilabile all\u2019analisi statica del codice delle API e finalizzata a identificare eventuali incongruenze, anomalie, errori o violazioni di specifiche regole e standard definite nell\u2019API style book aziendale.<\/p>\n L\u2019API Linting permette quindi di evidenziare alcuni problemi di progettazione delle API<\/a> come, ad esempio:<\/p>\n Posizionare l\u2019API Linting all\u2019inizio del ciclo di vita delle API<\/a>, cosa che Intesys fa da tempo e supporta i clienti<\/strong> nel fare altrettanto, garantisce che le API siano ben progettate, implementate in modo coerente, utilizzabili in modo uniforme e indipendente dai team che le hanno realizzate. Questo le rende pi\u00f9 facili da usare, ma anche pi\u00f9 sicure<\/strong>.[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][divider line_type=”No Line” custom_height=”10″][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” bg_image=”13704″ bg_position=”left top” background_image_loading=”default” bg_repeat=”no-repeat” scene_position=”center” text_color=”light” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” color_overlay=”#000000″ advanced_gradient_angle=”0″ overlay_strength=”0.5″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”padding-4-percent” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” constrain_group_2=”yes” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” advanced_gradient_angle=”0″ gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” gradient_type=”default”][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/6″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][image_with_animation image_url=”10304″ image_size=”full” animation_type=”entrance” animation=”None” animation_movement_type=”transform_y” hover_animation=”none” alignment=”” border_radius=”none” box_shadow=”none” image_loading=”default” max_width=”custom” max_width_custom=”35%”][\/vc_column_inner][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”5\/6″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n Come anticipato, un altro tema molto attuale e di interesse per Intesys \u00e8 l\u2019API Security<\/a>. Anche in quest\u2019ambito l\u2019API Linting, abbinato all\u2019approccio API First, ha una rilevanza centrale e diventa cos\u00ec una buona pratica sia per aspetti funzionali che di API security<\/strong>, integrandosi perfettamente nell\u2019approccio di security by design<\/em><\/a> che adottiamo in ogni nostro progetto.<\/p>\n Il concetto alla base del Linting ovviamente non cambia, ma le informazioni che veicola possono essere determinanti ai fini della progettazione sicura dell\u2019API. Per esempio, il Linting pu\u00f2:[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][divider line_type=”No Line” custom_height=”10″][nectar_icon_list animate=”true” color=”Extra-Color-3″ direction=”vertical” icon_size=”small” icon_style=”no-border”][nectar_icon_list_item icon_type=”icon” icon_family=”iconsmind” text_full_html=”html” title=”List Item” id=”1752148401691-6″ tab_id=”1752148401691-5″ header=”Verificare la conformit\u00e0 delle risposte di errore ad uno schema dati adeguato;” icon_iconsmind=”iconsmind-Info-Window”][\/nectar_icon_list_item][nectar_icon_list_item icon_type=”icon” icon_family=”iconsmind” text_full_html=”html” title=”List Item” id=”1752148401703-3″ tab_id=”1752148401703-1″ header=”Forzare la presenza di campi security per indicare il tipo di autenticazione da rispettare;” icon_iconsmind=”iconsmind-Computer-Secure”][\/nectar_icon_list_item][nectar_icon_list_item icon_type=”icon” icon_family=”iconsmind” text_full_html=”html” title=”List Item” id=”1752148401711-6″ tab_id=”1752148401712-6″ header=”Forzare l\u2019utilizzo di data type specifici in determinati campi.” icon_iconsmind=”iconsmind-Data-Download”][\/nectar_icon_list_item][\/nectar_icon_list][divider line_type=”No Line” custom_height=”10″][vc_column_text css=”” text_direction=”default”]Per questa attivit\u00e0, in Intesys ci affidiamo a dei tool dedicati<\/strong>. Il linting, in sostanza, ci consente di ottenere il meglio dei due mondi: delle API coerenti in tutta l\u2019organizzazione, facili da utilizzare da parte dei consumer, ben progettate, implementate e gestite, oltre che rispettose delle migliori pratiche di sicurezza.[\/vc_column_text][divider line_type=”No Line” custom_height=”10″][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” bg_color=”#000000″ bg_image=”15225″ bg_position=”left top” background_image_loading=”default” bg_repeat=”no-repeat” scene_position=”center” text_color=”light” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” color_overlay=”rgba(0,0,0,0.01)” color_overlay_2=”rgba(0,0,0,0.01)” advanced_gradient_angle=”0″ overlay_strength=”0.5″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”padding-4-percent” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” constrain_group_2=”yes” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” advanced_gradient_angle=”0″ gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” gradient_type=”default”][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/6″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][image_with_animation image_url=”10304″ image_size=”full” animation_type=”entrance” animation=”None” animation_movement_type=”transform_y” hover_animation=”none” alignment=”” border_radius=”none” box_shadow=”none” image_loading=”default” max_width=”custom” max_width_custom=”35%”][\/vc_column_inner][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”5\/6″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text css=”” text_direction=”default”]SERVIZI IT[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”2\/3″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_custom_heading text=”API Management e API Security” font_container=”tag:h3|font_size:34px|text_align:left|color:%23ffffff|line_height:42px” use_theme_fonts=”yes” css=””][nectar_btn size=”medium” open_new_tab=”true” button_style=”see-through-2″ color_override=”#ffffff” hover_color_override=”#ffffff” hover_text_color_override=”#000000″ icon_family=”none” text=”SCOPRI COME POSSIAMO AIUTARTI” margin_top=”30″ url=”https:\/\/www.intesys.it\/information-technology\/servizi-it\/api-management-e-api-security\/”][\/vc_column_inner][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/3″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][divider line_type=”No Line” custom_height=”20″][nectar_btn size=”large” open_new_tab=”true” button_style=”regular” button_color_2=”Accent-Color” icon_family=”none” text=”Scopri anche il Servizio Gestito QUIAPIGATEWAY” url=”https:\/\/www.inetworking.it\/servizi-gestiti-cloud-native-toolkit\/servizio-gestito-di-api-gateway-quiapigateway\/”][\/vc_column][\/vc_row]\n","protected":false},"excerpt":{"rendered":" [vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right”…<\/p>\n","protected":false},"author":25,"featured_media":14752,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[27],"tags":[52,54,56,61],"class_list":{"0":"post-14735","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-information-technology","8":"tag-api","9":"tag-api-gateway","10":"tag-api-management","11":"tag-api-security"},"acf":[],"yoast_head":"\n
\nSe la progettazione delle API deve tener conto di specifiche linee guida definite dall\u2019azienda e volte a standardizzare tematiche funzionali e di security, diventa necessaria un\u2019attivit\u00e0 (o uno strumento, a seconda della prospettiva di osservazione) di verifica della corretta progettazione di un\u2019API fin dalla fase in cui questa viene pensata, descritta e formalizzata, ad esempio tramite la specifica OpenAPI. Questa attivit\u00e0 prende il nome di API Linting.[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text css=”” text_direction=”default”]\nL\u2019API Linting e il suo ruolo nel ciclo di vita delle API<\/h2>\n
\n
STORIA DI TRASFORMAZIONE DIGITALE<\/h5>\n[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”2\/3″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_custom_heading text=”Automatizzare i rilasci e i test di un API Gateway” font_container=”tag:h3|font_size:34px|text_align:left|color:%23ffffff|line_height:42px” use_theme_fonts=”yes”][nectar_btn size=”medium” open_new_tab=”true” button_style=”see-through-2″ color_override=”#ffffff” hover_color_override=”#17fdb4″ hover_text_color_override=”#000000″ icon_family=”none” text=”SCOPRI IL CASO” margin_top=”30″ url=”https:\/\/www.intesys.it\/portfolio\/automatizzare-rilasci-api-gateway-compagnia-assicurativa\/”][\/vc_column_inner][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/3″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text css=”” text_direction=”default”]\n
API Security: come la potenziamo con il linting<\/h2>\n
\nTra questi, segnaliamo i software open source Spectral e Spectral CLI<\/strong>, che possono essere integrati nelle pipeline di CI\/CD<\/a>. Spectral consente di sfruttare dei RuleSet<\/em>, ovvero delle librerie sia custom (della specifica azienda) che open source, ovvero \u2013 in quest\u2019ultimo caso \u2013 degli insiemi di librerie gi\u00e0 pubblicati dalle organizzazioni che sposano la filosofia open source<\/a><\/strong>.<\/p>\n