具存取控管之通用資源存取框架J2S與其結構化前端查詢語言之設計

Abstract

現今網路存取成本低廉，雲端運算興起，網路服務開發門檻大幅降低，且由以往的業務邏輯導向轉成了資源操作導向，系統架構由 SAO 為主流逐漸轉為 ROA 以及 REST 為主流。服務初期所需的資源增刪改查操作大同小異，若針對每個資源逐一開發 API 會耗費大量開發時間，且前端往往僅以 URL 查詢參數提供有限資訊，極度缺乏彈性，不若對資料庫做存取時有 SQL 等語言可以使用。 本文將提出 GRAF 此一後端系統架構，搭配當今網路開發之主流工具與概念，使資源的增刪改查在後端開發者對路徑註冊資源後立即可用，不需額外撰寫任何程式碼，並將提出一結構化前端查詢語言之設計，其對應到 SQL 常用之功能，賦予前端強大查詢能力。該框架亦提供開發者進行資源存取控制之設計，阻擋未授權操作，並在多個層級提供預設選項以及客製化之功能，目的在使得後端系統開發時程相對於資源數目之複雜度能由 O(n) 降為 O(1)，同時允許開發者在多個層級客製業務邏輯。 本文亦驗證作者實作之 j2s 套件符合 GRAF 原則，並能夠完整涵蓋ALCHEMA 此一 IoT 服務提供者對於後端的需求，並確實改善開發流程與縮短開發時間。意即任一遵照 GRAF 原則開發之套件，皆應能大幅縮短網路服務之後端開發者的開發時間。

As web services turn s to more resource oriented from business-activity oriented ones, the once dominant architecture SOA is now gradually replaced by ROA and REST. While developing individual APIs for each resource is time-costly, operations upon different resources are similar. The way using URL query parameters to carry information when sending requests is also less flexible, but database generally provides much powerful data manipulation tools like SQL. In this thesis, we design the General Resource Access Framework (GRAF), to make resource manipulation service immediately available, requires no extra code written. We also design the Structured Front-end Query Language (SFQL), which empowers front-ends to build complicated query statements. GRAF also allow configurations for access control to block unauthorized access. GRAF aims to lower down the complexity of development time from O(n) to O(1), in respect of resource number. We also validates that using j2s, a GRAF style npm package, is functionally complete to cover all requirements that ALCHEMA needs, which is an IoT service provider, and that j2s did shorten development time, as we claimed.