ENSURING API SECURITY IN WEB SERVICES DEVELOPED IN PYTHON

Аннотация

This article discusses the key points of developing a secure RESTful web service API for keeping a student achievement journal. The relevance of using web services has been analyzed. The classification of web applications is given. The features of the Single Page Application architecture were considered. Comparative characteristics of architectural styles of application programming interfaces are given. Requirements to be met by RESTful API services are considered. The basic principles of API security were analyzed. A list of the main vulnerabilities that may appear during the development of the REST API is given. An overview of popular authentication schemes (methods) is given. Comparative characteristics of web frameworks of the Python programming language are given. The main tools used in the development of web API applications are listed. The process of creating a secure prototype of a RESTful web service API in Python using the Flask microframework and a tool for describing the Swagger specifications is presented. The process of configuring the application was examined in detail. The main recommendations for securing a web application, database and web server settings are listed. The key points of ensuring the protection of the developed web application are considered. The results obtained were analyzed. Keywords: RESTFull API , Artificial Intelligence (AI) , Machine Learning (ML) , Deep Learning , Natural Language Processing (NLP) , Real-Time Analysis. A web application is no longer a pre-assembled collection of HTML pages, style files, scripts, and media files. Web applications are based on a client-server architecture based on the separation of a functional block and appearance). The business logic of the application is performed on a special dedicated server (back-end), while the client interacts through the user interface (UI) in his Internet browser (front-end). This approach allows to generate HTML markup content in real time, with a minimum number of reloads on the 74-son 3–to’plam Iyun-2025 Sahifa: 88 Ustozlar uchun pedagoglar.org viewed web page. Almost all modern e-commerce sites, social networks, instant messengers, online programs, forums, and search engines are web applications. By the type of main components, web applications can be classified into several types: backend, frontend and SPA. Backend applications (server-side applications) collect the main functionality and logic of the application, interact with the database. They are developed using a number of programming languages, the most popular of which are: Python, Ruby, PHP, C # (.NET), Node.js. However, it is almost impossible to implement production-ready solutions without the use of special tools called web frameworks. Each of the programming languages listed above has its own set of frameworks for creating web applications: Python (Django, Flask, FastAPI, Tornado), PHP (Laravel, Simfony, Yii2), Ruby (Ruby on Rails, Sinatra), Node.js (Express .js), C # (ASP .NET Core). Frameworks take on some of the developer's responsibilities and help in ensuring application security, working with typical redirection, authentication, registration and other functionality. The application is deployed on a specially configured web server and independently generates the HTML representing pages (however, the browser will reload the page in most cases). Frontend applications (client-side applications) work directly in the user's web browser. They are developed using JavaScript, TypeScript and Vue.js, ReactJS, AngularJS programming languages. They are applicable in cases when the application does not work with the database and does not store client information for longer than one session. They are fully responsible for the presentation of the HTML code. SPA (Single Page Application) is a combination of solutions, dividing a web application into two (frontdend and backend) and organizing interaction between them. The backend part deals with logic, processes request, works with the database; the frontend part forms an external view based on the data received from the backend and displays the result in the browser. The exchange of information between the client and the server parts of the application, as a rule, occurs through a specially developed application programming interface (API). Almost all modern web applications are based on the SPA concept. API is a set of methods and rules by which applications exchange messages and transfer data. As a rule, these are classes, functions, structures of one program, interacting with other programs. API not only helps organize interactions; it also plays an important role in securing that interaction. Such an interface hides the specifics of the service implementation and works within the framework of what the developers provide. Using the program interface of the application, the operations that are available to the user are defined, restrictions are imposed, input and output data are indicated. In addition,