{"version":"1.0","provider_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","provider_url":"https:\/\/fatihsoysal.com\/blog","author_name":"Fatih Soysal","author_url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/","title":"Auth Series #5: Passport.js ile Yetkilendirme Uygulamas\u0131","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"Vsc0YRNM1p\"><a href=\"https:\/\/fatihsoysal.com\/blog\/auth-series-5-passport-js-ile-yetkilendirme-uygulamasi\/\">Auth Series #5: Passport.js ile Yetkilendirme Uygulamas\u0131<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/fatihsoysal.com\/blog\/auth-series-5-passport-js-ile-yetkilendirme-uygulamasi\/embed\/#?secret=Vsc0YRNM1p\" width=\"600\" height=\"338\" title=\"&#8220;Auth Series #5: Passport.js ile Yetkilendirme Uygulamas\u0131&#8221; &#8212; Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" data-secret=\"Vsc0YRNM1p\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script>\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n<\/script>\n","description":"Modern web uygulamalar\u0131, kullan\u0131c\u0131lar\u0131n ki\u015fisel verilerinden finansal i\u015flemlere kadar geni\u015f bir yelpazede hassas bilgileri bar\u0131nd\u0131r\u0131r. Bu bilgilerin korunmas\u0131, sadece etik bir sorumluluk de\u011fil, ayn\u0131 zamanda yasal bir zorunluluktur. Peki, bir kullan\u0131c\u0131 sisteme giri\u015f yapt\u0131\u011f\u0131nda, yani kimli\u011fi do\u011fruland\u0131\u011f\u0131nda, hangi kaynaklara eri\u015febilece\u011fine veya hangi i\u015flemleri yapabilece\u011fine nas\u0131l karar veririz? \u0130\u015fte bu noktada yetkilendirme (authorization) devreye girer. Yetkilendirme, kullan\u0131c\u0131lar\u0131n belirli kaynaklara veya i\u015flevlere eri\u015fim haklar\u0131n\u0131 tan\u0131mlayan ve uygulayan kritik bir g\u00fcvenlik mekanizmas\u0131d\u0131r. Do\u011fru uygulanmayan bir yetkilendirme sistemi, veri ihlallerine, yetkisiz eri\u015fimlere ve potansiyel olarak \u00e7ok ciddi g\u00fcvenlik zafiyetlerine yol a\u00e7abilir. Bu makalede, Node.js ekosisteminin pop\u00fcler kimlik do\u011frulama middleware'i olan Passport.js'i kullanarak yetkilendirmeyi nas\u0131l ba\u015far\u0131l\u0131 bir \u015fekilde uygulayaca\u011f\u0131m\u0131z\u0131 derinlemesine inceleyece\u011fiz. Amac\u0131m\u0131z, uygulamalar\u0131n\u0131z\u0131n sadece kimlik do\u011frulamada de\u011fil, ayn\u0131 zamanda yetkilendirme katman\u0131nda da sa\u011flam ve g\u00fcvenli olmas\u0131n\u0131 sa\u011flamakt\u0131r."}