Modern yaz\u0131l\u0131m sistemlerinde yetkilendirme, kritik bir g\u00fcvenlik katman\u0131d\u0131r. Geleneksel rol tabanl\u0131 veya kaynak tabanl\u0131 yakla\u015f\u0131mlar, dinamik ve karma\u015f\u0131k i\u015f kurallar\u0131n\u0131 y\u00f6netmekte yetersiz kalabilir. Bu makale, Merkezi Yetkilendirme Politikalar\u0131 (MCP) tarz\u0131 bir yakla\u015f\u0131m\u0131n pratik uygulamalar\u0131n\u0131, deneysel bir “Proof of Concept” (PoC) \u00fczerinden inceleyerek, bu g\u00fc\u00e7l\u00fc paradigmaya ad\u0131m atmak isteyen geli\u015ftiriciler i\u00e7in kapsaml\u0131 bir k\u0131lavuz sunmay\u0131 hedeflemektedir.<\/p>\n
Merkezi Yetkilendirme Politikalar\u0131 (MCP) tarz\u0131 yetkilendirme, eri\u015fim kararlar\u0131n\u0131n merkezi bir politika motoru taraf\u0131ndan, tan\u0131mlanm\u0131\u015f kurallar ve mevcut ba\u011flam bilgileri temel al\u0131narak verildi\u011fi bir g\u00fcvenlik modelidir. Geleneksel y\u00f6ntemlerin aksine, yetkilendirme mant\u0131\u011f\u0131 uygulama kodundan ayr\u0131\u015ft\u0131r\u0131l\u0131r ve deklaratif politikalar halinde y\u00f6netilir.<\/p>\n
Geleneksel olarak yetkilendirme, genellikle Rol Tabanl\u0131 Eri\u015fim Kontrol\u00fc (RBAC) veya Kaynak Tabanl\u0131 Eri\u015fim Kontrol\u00fc (ReBAC) gibi modellerle uygulan\u0131r. RBAC’ta kullan\u0131c\u0131lar rollere atan\u0131r ve bu rollere belirli izinler verilir. ReBAC ise kaynaklar\u0131n kendilerine ba\u011fl\u0131 izinler tan\u0131mlar. Her iki yakla\u015f\u0131m da basit senaryolarda etkili olsa da, kullan\u0131c\u0131 \u00f6zelliklerine, ortam de\u011fi\u015fkenlerine veya karma\u015f\u0131k i\u015f ak\u0131\u015flar\u0131na dayal\u0131 dinamik kararlar gerekti\u011finde yetersiz kalabilir.<\/p>\n
MCP, yetkilendirme mant\u0131\u011f\u0131n\u0131 merkezi bir politika deposunda tutar ve bu politikalar\u0131 de\u011ferlendirmek i\u00e7in bir politika motoru kullan\u0131r. Uygulamalar, bir eylemin ger\u00e7ekle\u015ftirilip ger\u00e7ekle\u015ftirilemeyece\u011fini \u00f6\u011frenmek i\u00e7in politika motoruna bir istek (\u00f6rne\u011fin, “Kullan\u0131c\u0131 X, belge Y’yi d\u00fczenleyebilir mi?”) g\u00f6nderir. Politika motoru, bu iste\u011fi ve ilgili ba\u011flam bilgilerini (kullan\u0131c\u0131n\u0131n rol\u00fc, belgenin durumu, g\u00fcn\u00fcn saati vb.) kullanarak bir karar verir (\u0130zin Ver\/Reddet).<\/p>\n
G\u00fcn\u00fcm\u00fcz\u00fcn mikroservis tabanl\u0131, bulut yerlisi uygulamalar\u0131nda yetkilendirme kararlar\u0131 statik olmaktan uzakt\u0131r. Bir kullan\u0131c\u0131n\u0131n bir kayna\u011fa eri\u015fimi, yaln\u0131zca rol\u00fcne de\u011fil, ayn\u0131 zamanda IP adresine, g\u00fcn\u00fcn saatine, kayna\u011f\u0131n hassasiyet seviyesine veya kullan\u0131c\u0131n\u0131n \u00f6nceki eylemlerine de ba\u011fl\u0131 olabilir. MCP, bu t\u00fcr dinamik ve ko\u015fullu yetkilendirme ihtiya\u00e7lar\u0131n\u0131 kar\u015f\u0131lamak i\u00e7in ideal bir \u00e7\u00f6z\u00fcm sunar.<\/p>\n
MCP tarz\u0131 yetkilendirme, geleneksel y\u00f6ntemlere k\u0131yasla bir\u00e7ok avantaj sunar. Bu avantajlar, \u00f6zellikle b\u00fcy\u00fck ve karma\u015f\u0131k sistemlerde kendini g\u00f6sterir.<\/p>\n
Uygulama say\u0131s\u0131 artt\u0131k\u00e7a, her bir uygulamadaki yetkilendirme mant\u0131\u011f\u0131n\u0131 ayr\u0131 ayr\u0131 y\u00f6netmek bir kabusa d\u00f6n\u00fc\u015febilir. MCP ile t\u00fcm yetkilendirme politikalar\u0131 merkezi olarak tan\u0131mlan\u0131r ve y\u00f6netilir. Bu, yeni bir mikroservis eklendi\u011finde veya mevcut bir servisin yetkilendirme kurallar\u0131 de\u011fi\u015fti\u011finde s\u00fcreci basitle\u015ftirir. Politika motorlar\u0131 genellikle y\u00fcksek performans ve \u00f6l\u00e7eklenebilirlik i\u00e7in tasarlanm\u0131\u015ft\u0131r.<\/p>\n
Merkezi politikalar, g\u00fcvenlik denetimini ve uyumlulu\u011fu kolayla\u015ft\u0131r\u0131r. T\u00fcm eri\u015fim kararlar\u0131 tek bir noktadan al\u0131nd\u0131\u011f\u0131 i\u00e7in, kimin neye neden eri\u015fti\u011fini anlamak ve raporlamak \u00e7ok daha basittir. Ayr\u0131ca, g\u00fcvenlik politikalar\u0131 koddan ayr\u0131ld\u0131\u011f\u0131 i\u00e7in, geli\u015ftiricilerin yanl\u0131\u015fl\u0131kla g\u00fcvenlik a\u00e7\u0131klar\u0131na yol a\u00e7ma riski azal\u0131r. Yeni g\u00fcvenlik gereksinimleri h\u0131zla politikalara yans\u0131t\u0131labilir.<\/p>\n
\u0130\u015f gereksinimleri s\u00fcrekli de\u011fi\u015fir ve yetkilendirme kurallar\u0131 da bu de\u011fi\u015fimlere ayak uydurmak zorundad\u0131r. MCP, politika de\u011fi\u015fikliklerini uygulama kodunu yeniden da\u011f\u0131tmaya gerek kalmadan yapma esnekli\u011fi sunar. Bu, “canl\u0131” politika g\u00fcncellemeleri ve A\/B testi gibi senaryolar i\u00e7in de olanak tan\u0131r, b\u00f6ylece i\u015f \u00e7evikli\u011fi art\u0131r\u0131l\u0131r.<\/p>\n
Bir MCP sistemi, genellikle a\u015fa\u011f\u0131daki ana bile\u015fenlerden olu\u015fur:<\/p>\n
Politika motoru, yetkilendirme isteklerini alan, ilgili politikalar\u0131 de\u011ferlendiren ve bir eri\u015fim karar\u0131 (izin ver\/reddet) d\u00f6nd\u00fcren \u00e7ekirdek bile\u015fendir. Open Policy Agent (OPA) gibi \u00e7\u00f6z\u00fcmler, bu rol\u00fc \u00fcstlenen pop\u00fcler politika motorlar\u0131d\u0131r. Motor, giri\u015f verilerini (kullan\u0131c\u0131, kaynak, eylem, ba\u011flam) al\u0131r, tan\u0131ml\u0131 kurallara g\u00f6re i\u015fler ve bir \u00e7\u0131kt\u0131 \u00fcretir.<\/p>\n
Politikalar, genellikle \u00f6zel bir politika dili kullan\u0131larak yaz\u0131l\u0131r. Bu diller, ko\u015fullu mant\u0131\u011f\u0131, veri manip\u00fclasyonunu ve karar verme kurallar\u0131n\u0131 ifade etmek i\u00e7in tasarlanm\u0131\u015ft\u0131r. \u00d6rne\u011fin, OPA Rego dilini kullan\u0131rken, XACML (eXtensible Access Control Markup Language) XML tabanl\u0131 bir standartt\u0131r. Bu diller, “e\u011fer bu ko\u015fullar sa\u011flan\u0131yorsa, bu eyleme izin ver” \u015feklinde kurallar tan\u0131mlamaya olanak tan\u0131r.<\/p>\n
package authz\n\ndefault allow = false\n\nallow {\n input.method == \"GET\"\n input.path == [\"users\", user_id]\n input.subject.role == \"admin\"\n}\n\nallow {\n input.method == \"GET\"\n input.path == [\"users\", user_id]\n input.subject.user == user_id\n}\n\nallow {\n input.method == \"POST\"\n input.path == [\"products\"]\n input.subject.role == \"editor\"\n}\n<\/pre>\n<\/code><\/p>\n
Yukar\u0131daki Rego \u00f6rne\u011fi, bir y\u00f6neticinin t\u00fcm kullan\u0131c\u0131lar\u0131 g\u00f6r\u00fcnt\u00fclemesine, bir kullan\u0131c\u0131n\u0131n kendi profilini g\u00f6r\u00fcnt\u00fclemesine ve bir edit\u00f6r\u00fcn yeni \u00fcr\u00fcnler olu\u015fturmas\u0131na izin veren basit kurallar tan\u0131mlar.<\/p>\n
Karar Noktalar\u0131 (Policy Enforcement Points - PEP) ve Ba\u011flam Sa\u011flay\u0131c\u0131lar (Context Providers)<\/h4>\n
Karar Noktalar\u0131 (PEP), yetkilendirme karar\u0131 gerektiren uygulama veya servislerdir. Bir API a\u011f ge\u00e7idi, bir mikroservis veya hatta bir veritaban\u0131, bir PEP olabilir. PEP'ler, bir iste\u011fi politika motoruna iletir ve motorun karar\u0131n\u0131 bekler. Ba\u011flam Sa\u011flay\u0131c\u0131lar ise, politika motorunun karar vermesi i\u00e7in gerekli olabilecek ek bilgileri (kullan\u0131c\u0131n\u0131n co\u011frafi konumu, g\u00fcncel stok durumu vb.) sa\u011flayan sistemlerdir.<\/p>\n
Kimlik ve Rol Y\u00f6netimi Entegrasyonu<\/h4>\n
MCP sistemleri, genellikle mevcut kimlik ve rol y\u00f6netimi (IAM) \u00e7\u00f6z\u00fcmleriyle entegre \u00e7al\u0131\u015f\u0131r. Kullan\u0131c\u0131 kimlik do\u011fruland\u0131ktan sonra, ilgili kimlik bilgileri (kullan\u0131c\u0131 ID'si, rolleri, gruplar\u0131) yetkilendirme iste\u011fiyle birlikte politika motoruna iletilir. Politika motoru, bu bilgileri politikalar\u0131 de\u011ferlendirmek i\u00e7in kullan\u0131r.<\/p>\n
Deneysel PoC Tasar\u0131m\u0131 ve Mimarisi<\/h3>\n
Bu b\u00f6l\u00fcmde, basit bir MCP tarz\u0131 yetkilendirme PoC'si i\u00e7in bir tasar\u0131m ve mimari \u00f6nerisi sunulmaktad\u0131r. Amac\u0131m\u0131z, temel kavramlar\u0131 somutla\u015ft\u0131rmakt\u0131r.<\/p>\n
Kullan\u0131lacak Teknolojiler ve Ara\u00e7lar<\/h4>\n
PoC i\u00e7in Open Policy Agent (OPA) ve Rego dilini kullanmay\u0131 \u00f6neriyoruz. OPA, hafif, esnek ve y\u00fcksek performansl\u0131 bir politika motorudur. Uygulama taraf\u0131nda ise bir Python (Flask) veya Node.js (Express) servisi, OPA ile etkile\u015fimi sim\u00fcle edecektir.<\/p>\n
\n- Politika Motoru:<\/strong> Open Policy Agent (OPA)<\/li>\n
- Politika Dili:<\/strong> Rego<\/li>\n
- Uygulama:<\/strong> Python (Flask) veya Node.js (Express)<\/li>\n
- Veri Depolama (Basit):<\/strong> Bellek i\u00e7i veya basit JSON dosyalar\u0131<\/li>\n<\/ul>\n
Veri Modeli ve Politika Yap\u0131s\u0131<\/h4>\n
PoC'mizde, kullan\u0131c\u0131lar, kaynaklar ve eylemler gibi temel varl\u0131klar\u0131 ele alaca\u011f\u0131z. Bir yetkilendirme iste\u011fi, a\u015fa\u011f\u0131daki gibi bir JSON yap\u0131s\u0131nda olacakt\u0131r:<\/p>\n
{\n \"input\": {\n \"subject\": {\n \"user\": \"alice\",\n \"roles\": [\"editor\"]\n },\n \"action\": \"create\",\n \"resource\": {\n \"type\": \"document\",\n \"id\": \"doc-123\",\n \"owner\": \"alice\",\n \"status\": \"draft\"\n },\n \"context\": {\n \"ip_address\": \"192.168.1.1\",\n \"time_of_day\": \"morning\"\n }\n }\n}\n<\/pre>\n<\/code><\/p>\n
Politikalar, bu giri\u015f verilerini kullanarak bir karar verecek \u015fekilde Rego ile yaz\u0131lacakt\u0131r.<\/p>\n
Mimari Genel Bak\u0131\u015f<\/h4>\n
PoC mimarisi olduk\u00e7a basittir:<\/p>\n
\n- Kullan\u0131c\u0131 Uygulamas\u0131 (Client Application):<\/strong> Kullan\u0131c\u0131 aray\u00fcz\u00fc veya ba\u015fka bir servis olabilir.<\/li>\n
- API Servisi (Policy Enforcement Point - PEP):<\/strong> Flask\/Express tabanl\u0131 uygulama. Kullan\u0131c\u0131 iste\u011fini al\u0131r, kimlik do\u011frulamas\u0131 yapar ve yetkilendirme i\u00e7in OPA'ya dan\u0131\u015f\u0131r.<\/li>\n
- OPA Politika Motoru:<\/strong> Ayr\u0131 bir s\u00fcre\u00e7 olarak \u00e7al\u0131\u015fan OPA. API servisinden gelen yetkilendirme isteklerini de\u011ferlendirir ve karar d\u00f6nd\u00fcr\u00fcr.<\/li>\n<\/ol>\n
Bu mimari, OPA'n\u0131n bir yan ara\u00e7 (sidecar) olarak veya merkezi bir servis olarak nas\u0131l konu\u015fland\u0131r\u0131labilece\u011fini g\u00f6sterir.<\/p>\n
PoC Uygulamas\u0131: Ad\u0131m Ad\u0131m K\u0131lavuz<\/h3>\n
\u015eimdi, tasarlad\u0131\u011f\u0131m\u0131z PoC'yi nas\u0131l uygulayaca\u011f\u0131m\u0131za dair pratik ad\u0131mlara ge\u00e7elim.<\/p>\n
Politika Tan\u0131mlama \u00d6rne\u011fi (Rego)<\/h4>\n
A\u015fa\u011f\u0131da, bir kullan\u0131c\u0131n\u0131n \"document\" tipindeki bir kayna\u011f\u0131 \"create\" etmesine veya \"view\" etmesine izin veren basit bir Rego politikas\u0131 bulunmaktad\u0131r. Politika, kullan\u0131c\u0131n\u0131n rol\u00fcne ve belgenin durumuna g\u00f6re farkl\u0131 kurallar uygular.<\/p>\n
package app.authz\n\ndefault allow = false\n\n# Y\u00f6neticiler her \u015feyi yapabilir\nallow {\n input.subject.roles[_] == \"admin\"\n}\n\n# Edit\u00f6rler belge olu\u015fturabilir ve taslaklar\u0131 g\u00f6r\u00fcnt\u00fcleyebilir\nallow {\n input.subject.roles[_] == \"editor\"\n input.action == \"create\"\n input.resource.type == \"document\"\n}\n\nallow {\n input.subject.roles[_] == \"editor\"\n input.action == \"view\"\n input.resource.type == \"document\"\n input.resource.status == \"draft\"\n}\n\n# Yaln\u0131zca belge sahibi tasla\u011f\u0131 g\u00fcncelleyebilir\nallow {\n input.subject.user == input.resource.owner\n input.action == \"update\"\n input.resource.type == \"document\"\n input.resource.status == \"draft\"\n}\n<\/pre>\n<\/code><\/p>\n
Karar Noktas\u0131 Entegrasyonu (Uygulama Katman\u0131nda)<\/h4>\n
Bir Python Flask uygulamas\u0131 \u00fczerinden OPA ile nas\u0131l etkile\u015fim kurulaca\u011f\u0131n\u0131 g\u00f6steren bir \u00f6rnek:<\/p>\n
import requests\nfrom flask import Flask, request, jsonify\n\napp = Flask(__name__)\nOPA_URL = \"http:\/\/localhost:8181\/v1\/data\/app\/authz\" # OPA'n\u0131n \u00e7al\u0131\u015ft\u0131\u011f\u0131 adres ve politika yolu\n\n@app.route(\"\/documents\/\", methods=[\"GET\", \"POST\", \"PUT\", \"DELETE\"])\ndef manage_document(doc_id):\n user_id = request.headers.get(\"X-User-ID\")\n user_roles = request.headers.get(\"X-User-Roles\", \"\").split(\",\")\n \n # Basit bir \u00f6rnek i\u00e7in belge verisi (ger\u00e7ekte DB'den gelir)\n document_data = {\n \"id\": doc_id,\n \"type\": \"document\",\n \"owner\": \"alice\", # \u00d6rnek sahip\n \"status\": \"draft\" if doc_id == \"doc-123\" else \"published\"\n }\n\n input_data = {\n \"input\": {\n \"subject\": {\n \"user\": user_id,\n \"roles\": user_roles\n },\n \"action\": request.method.lower(),\n \"resource\": document_data,\n \"context\": {\n \"ip_address\": request.remote_addr\n }\n }\n }\n\n try:\n response = requests.post(OPA_URL, json=input_data)\n response.raise_for_status()\n opa_decision = response.json().get(\"result\", False)\n\n if opa_decision:\n return jsonify({\"message\": f\"Eri\u015fim \u0130zin Verildi: {user_id} {request.method} {doc_id}\"}), 200\n else:\n return jsonify({\"message\": f\"Eri\u015fim Reddedildi: {user_id} {request.method} {doc_id}\"}), 403\n except requests.exceptions.RequestException as e:\n return jsonify({\"error\": f\"OPA ile ileti\u015fim hatas\u0131: {e}\"}), 500\n\nif __name__ == \"__main__\":\n app.run(debug=True, port=5000)\n<\/pre>\n<\/code><\/p>\n
Yetkilendirme Ak\u0131\u015f\u0131 ve Test Senaryolar\u0131<\/h4>\n
Bu PoC'yi \u00e7al\u0131\u015ft\u0131rmak i\u00e7in \u00f6nce OPA'y\u0131 ba\u015flatman\u0131z gerekir (\u00f6rne\u011fin, opa run --server --watch<\/code> komutuyla). Ard\u0131ndan Flask uygulamas\u0131n\u0131 \u00e7al\u0131\u015ft\u0131r\u0131n. Farkl\u0131 HTTP istekleri g\u00f6ndererek yetkilendirme ak\u0131\u015f\u0131n\u0131 test edebilirsiniz:<\/p>\n\n- GET \/documents\/doc-123<\/strong> (X-User-ID: alice, X-User-Roles: editor) -> \u0130zin Verilmeli (kendi tasla\u011f\u0131n\u0131 g\u00f6r\u00fcnt\u00fcler)<\/li>\n
- GET \/documents\/doc-456<\/strong> (X-User-ID: alice, X-User-Roles: editor) -> Reddedilmeli (yay\u0131nlanm\u0131\u015f belge, edit\u00f6r sadece taslak g\u00f6r\u00fcnt\u00fcleyebilir)<\/li>\n
- POST \/documents\/<\/strong> (X-User-ID: bob, X-User-Roles: editor) -> \u0130zin Verilmeli (edit\u00f6r yeni belge olu\u015fturabilir)<\/li>\n
- PUT \/documents\/doc-123<\/strong> (X-User-ID: alice, X-User-Roles: editor) -> \u0130zin Verilmeli (belge sahibi tasla\u011f\u0131n\u0131 g\u00fcncelleyebilir)<\/li>\n
- PUT \/documents\/doc-123<\/strong> (X-User-ID: bob, X-User-Roles: editor) -> Reddedilmeli (ba\u015fka birinin tasla\u011f\u0131n\u0131 g\u00fcncelleyemez)<\/li>\n<\/ul>\n
Kar\u015f\u0131la\u015f\u0131labilecek Zorluklar ve \u00c7\u00f6z\u00fcm \u00d6nerileri<\/h3>\n
MCP tarz\u0131 yetkilendirme bir\u00e7ok avantaj sunsa da, baz\u0131 zorluklar\u0131 da beraberinde getirebilir.<\/p>\n
Performans ve Gecikme Sorunlar\u0131<\/h4>\n
Her yetkilendirme iste\u011fi i\u00e7in harici bir politika motoruna dan\u0131\u015fmak, ek bir a\u011f gecikmesi yaratabilir. Bu, \u00f6zellikle y\u00fcksek trafikli sistemlerde kritik olabilir. \u00c7\u00f6z\u00fcm olarak:<\/p>\n
\n- OPA'y\u0131 Yan Ara\u00e7 (Sidecar) Olarak Konu\u015fland\u0131rma:<\/strong> OPA'y\u0131 uygulaman\u0131zla ayn\u0131 pod\/makine \u00fczerinde \u00e7al\u0131\u015ft\u0131rmak, a\u011f gecikmesini minimuma indirir.<\/li>\n
- Politika \u00d6nbellekleme:<\/strong> OPA'n\u0131n kendisi, s\u0131k kullan\u0131lan politikalar\u0131 ve veri ba\u011flamlar\u0131n\u0131 \u00f6nbelle\u011fe alabilir.<\/li>\n
- K\u0131smi De\u011ferlendirme (Partial Evaluation):<\/strong> Baz\u0131 durumlarda, OPA iste\u011fi tamamen de\u011ferlendirmek yerine k\u0131smi bir politika d\u00f6nd\u00fcrebilir ve karar uygulama taraf\u0131nda tamamlanabilir.<\/li>\n<\/ul>\n
Politika Y\u00f6netimi ve S\u00fcrd\u00fcr\u00fclebilirlik<\/h4>\n
Politika say\u0131s\u0131 artt\u0131k\u00e7a, bunlar\u0131 y\u00f6netmek ve s\u00fcrd\u00fcrmek karma\u015f\u0131k hale gelebilir. \u00c7\u00f6z\u00fcmler:<\/p>\n
\n- S\u00fcr\u00fcm Kontrol\u00fc:<\/strong> Politikalar\u0131 Git gibi s\u00fcr\u00fcm kontrol sistemlerinde y\u00f6netmek.<\/li>\n
- Mod\u00fcler Politikalar:<\/strong> B\u00fcy\u00fck politikalar\u0131 daha k\u00fc\u00e7\u00fck, y\u00f6netilebilir mod\u00fcllere ay\u0131rmak.<\/li>\n
- Politika Y\u00f6netim Ara\u00e7lar\u0131:<\/strong> Styra DAS gibi ticari \u00e7\u00f6z\u00fcmler, politika ya\u015fam d\u00f6ng\u00fcs\u00fc y\u00f6netimini kolayla\u015ft\u0131r\u0131r.<\/li>\n<\/ul>\n
Hata Ay\u0131klama ve \u0130zlenebilirlik<\/h4>\n
Politika motorunun verdi\u011fi kararlar\u0131 anlamak ve hatalar\u0131 ay\u0131klamak bazen zor olabilir. \u00c7\u00f6z\u00fcmler:<\/p>\n
\n- Kapsaml\u0131 Loglama:<\/strong> OPA, her yetkilendirme iste\u011fi ve karar\u0131 hakk\u0131nda detayl\u0131 loglar \u00fcretebilir.<\/li>\n
- Politika Testleri:<\/strong> Rego'nun yerle\u015fik test \u00e7er\u00e7evesini kullanarak politikalar\u0131 birim testleriyle do\u011frulamak.<\/li>\n
- \u0130zleme Ara\u00e7lar\u0131:<\/strong> Politika motorunun performans\u0131n\u0131 ve karar ak\u0131\u015f\u0131n\u0131 izlemek i\u00e7in Prometheus, Grafana gibi ara\u00e7lar\u0131 kullanmak.<\/li>\n<\/ul>\n
En \u0130yi Uygulamalar ve Gelecek Y\u00f6nelimler<\/h3>\n
MCP tarz\u0131 yetkilendirmeyi sistemlerinize entegre ederken g\u00f6z \u00f6n\u00fcnde bulundurman\u0131z gereken baz\u0131 en iyi uygulamalar ve gelecekteki potansiyel geli\u015fmeler:<\/p>\n
Politika S\u00fcr\u00fcmleme ve Denetim<\/h4>\n
Politikalar\u0131n\u0131z\u0131 bir yaz\u0131l\u0131m kodu gibi ele al\u0131n. S\u00fcr\u00fcm kontrol sistemlerinde saklay\u0131n, de\u011fi\u015fiklikleri denetleyin ve her de\u011fi\u015fikli\u011fi g\u00f6zden ge\u00e7irin. Bu, hem g\u00fcvenlik hem de uyumluluk a\u00e7\u0131s\u0131ndan kritik \u00f6neme sahiptir. Politika de\u011fi\u015fikliklerinin etkisini anlamak i\u00e7in otomatik testler uygulay\u0131n.<\/p>\n
Otomatik Politika Testleri<\/h4>\n
T\u0131pk\u0131 uygulama kodunuz gibi, politikalar\u0131n\u0131z i\u00e7in de birim testleri ve entegrasyon testleri yaz\u0131n. Bu, politikalar\u0131n beklenen \u015fekilde \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olman\u0131z\u0131 sa\u011flar ve regresyonlar\u0131 \u00f6nler. Rego'nun yerle\u015fik test yetenekleri bu konuda olduk\u00e7a g\u00fc\u00e7l\u00fcd\u00fcr.<\/p>\n
package app.authz\n\nimport data.app.authz\n\ntest_admin_can_do_anything {\n authz.allow with input as {\"subject\": {\"roles\": [\"admin\"]}, \"action\": \"delete\", \"resource\": {\"type\": \"document\"}}\n}\n\ntest_editor_can_create_document {\n authz.allow with input as {\"subject\": {\"roles\": [\"editor\"]}, \"action\": \"create\", \"resource\": {\"type\": \"document\"}}\n}\n\ntest_editor_cannot_delete_document {\n not authz.allow with input as {\"subject\": {\"roles\": [\"editor\"]}, \"action\": \"delete\", \"resource\": {\"type\": \"document\"}}\n}\n<\/pre>\n<\/code><\/p>\n
Yapay Zeka Destekli Politika \u00dcretimi ve Optimizasyonu<\/h4>\n
Gelecekte, yapay zeka ve makine \u00f6\u011frenimi, karma\u015f\u0131k politika setlerini analiz ederek potansiyel g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 tespit etmeye, politika \u00f6nerileri sunmaya ve hatta belirli kullan\u0131m kal\u0131plar\u0131na g\u00f6re politikalar\u0131 optimize etmeye yard\u0131mc\u0131 olabilir. Bu, politika y\u00f6netiminin y\u00fck\u00fcn\u00fc hafifletecek ve g\u00fcvenlik duru\u015funu g\u00fc\u00e7lendirecektir.<\/p>\n
Sonu\u00e7<\/h3>\n
Merkezi Yetkilendirme Politikalar\u0131 (MCP) tarz\u0131 yetkilendirme, modern ve karma\u015f\u0131k yaz\u0131l\u0131m sistemleri i\u00e7in g\u00fc\u00e7l\u00fc, esnek ve \u00f6l\u00e7eklenebilir bir \u00e7\u00f6z\u00fcmd\u00fcr. Geleneksel y\u00f6ntemlerin s\u0131n\u0131rlamalar\u0131n\u0131 a\u015farak, dinamik ve ko\u015fullu eri\u015fim kontrol\u00fc sa\u011flar. Open Policy Agent (OPA) gibi ara\u00e7lar sayesinde, bu g\u00fc\u00e7l\u00fc paradigmalar\u0131 pratik bir \u015fekilde uygulamak m\u00fcmk\u00fcnd\u00fcr. Sundu\u011fumuz PoC ve k\u0131lavuz, geli\u015ftiricilere bu alana ad\u0131m atmalar\u0131 i\u00e7in bir ba\u015flang\u0131\u00e7 noktas\u0131 sa\u011flamay\u0131 ama\u00e7lamaktad\u0131r. MCP'nin benimsenmesi, g\u00fcvenlik duru\u015funuzu g\u00fc\u00e7lendirirken, i\u015f \u00e7evikli\u011finizi art\u0131racak ve yetkilendirme y\u00f6netimini basitle\u015ftirecektir.<\/p>\n
SSS (S\u0131k Sorulan Sorular)<\/h3>\n\n- MCP tarz\u0131 yetkilendirme nedir?<\/strong><\/dt>\n
- Yetkilendirme kararlar\u0131n\u0131n merkezi bir politika motoru taraf\u0131ndan, tan\u0131mlanm\u0131\u015f politikalar ve mevcut ba\u011flam bilgileri temel al\u0131narak verildi\u011fi bir g\u00fcvenlik modelidir. Yetkilendirme mant\u0131\u011f\u0131 uygulama kodundan ayr\u0131\u015ft\u0131r\u0131l\u0131r.<\/dd>\n
- Ne zaman MCP tarz\u0131 bir yakla\u015f\u0131m kullanmal\u0131y\u0131m?<\/strong><\/dt>\n
- Sisteminizde karma\u015f\u0131k, dinamik ve ko\u015fullu yetkilendirme kurallar\u0131 varsa, mikroservis mimarisi kullan\u0131yorsan\u0131z, g\u00fcvenlik ve uyumluluk denetimini kolayla\u015ft\u0131rmak istiyorsan\u0131z MCP idealdir.<\/dd>\n
- MCP uygulamak karma\u015f\u0131k m\u0131d\u0131r?<\/strong><\/dt>\n
- Ba\u015flang\u0131\u00e7ta \u00f6\u011frenme e\u011frisi olabilir, ancak OPA gibi ara\u00e7lar bu s\u00fcreci b\u00fcy\u00fck \u00f6l\u00e7\u00fcde basitle\u015ftirir. Politika mant\u0131\u011f\u0131n\u0131 koddan ay\u0131rmak, uzun vadede y\u00f6netimi kolayla\u015ft\u0131r\u0131r.<\/dd>\n
- OPA d\u0131\u015f\u0131nda ba\u015fka MCP ara\u00e7lar\u0131 var m\u0131?<\/strong><\/dt>\n
- Evet, XACML tabanl\u0131 \u00e7\u00f6z\u00fcmler (\u00f6rne\u011fin, Axiomatics) ve AWS IAM gibi bulut sa\u011flay\u0131c\u0131lar\u0131n\u0131n kendi yetkilendirme servisleri de benzer prensiplerle \u00e7al\u0131\u015f\u0131r.<\/dd>\n
- MCP'nin ba\u015fl\u0131ca faydalar\u0131 nelerdir?<\/strong><\/dt>\n
- \u00d6l\u00e7eklenebilirlik, esneklik, g\u00fcvenlik ve uyumluluk denetiminin kolayla\u015fmas\u0131, politika de\u011fi\u015fikliklerinin h\u0131zl\u0131 da\u011f\u0131t\u0131m\u0131 ve uygulama kodundan yetkilendirme mant\u0131\u011f\u0131n\u0131n ayr\u0131lmas\u0131 ba\u015fl\u0131ca faydalar\u0131d\u0131r.<\/dd>\n<\/dl>\n","protected":false},"excerpt":{"rendered":"Modern yaz\u0131l\u0131m sistemlerinde yetkilendirme, kritik bir g\u00fcvenlik katman\u0131d\u0131r. Geleneksel rol tabanl\u0131 veya kaynak tabanl\u0131 yakla\u015f\u0131mlar, dinamik ve karma…","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-36930","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\n
Pratik MCP Tarz\u0131 Yetkilendirme: Deneysel Bir PoC ve K\u0131lavuz - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Pratik MCP Tarz\u0131 Yetkilendirme: Deneysel Bir PoC ve K\u0131lavuz\" \/>\n<meta property=\"og:description\" content=\"Modern yaz\u0131l\u0131m sistemlerinde yetkilendirme, kritik bir g\u00fcvenlik katman\u0131d\u0131r. Geleneksel rol tabanl\u0131 veya kaynak tabanl\u0131 yakla\u015f\u0131mlar, dinamik ve karma...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-25T00:00:38+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"13 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Pratik MCP Tarz\u0131 Yetkilendirme: Deneysel Bir PoC ve K\u0131lavuz\",\"datePublished\":\"2025-12-25T00:00:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/\"},\"wordCount\":2264,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/\",\"name\":\"Pratik MCP Tarz\u0131 Yetkilendirme: Deneysel Bir PoC ve K\u0131lavuz - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-12-25T00:00:38+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Pratik MCP Tarz\u0131 Yetkilendirme: Deneysel Bir PoC ve K\u0131lavuz\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Pratik MCP Tarz\u0131 Yetkilendirme: Deneysel Bir PoC ve K\u0131lavuz - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/","og_locale":"tr_TR","og_type":"article","og_title":"Pratik MCP Tarz\u0131 Yetkilendirme: Deneysel Bir PoC ve K\u0131lavuz","og_description":"Modern yaz\u0131l\u0131m sistemlerinde yetkilendirme, kritik bir g\u00fcvenlik katman\u0131d\u0131r. Geleneksel rol tabanl\u0131 veya kaynak tabanl\u0131 yakla\u015f\u0131mlar, dinamik ve karma...","og_url":"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-12-25T00:00:38+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"13 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Pratik MCP Tarz\u0131 Yetkilendirme: Deneysel Bir PoC ve K\u0131lavuz","datePublished":"2025-12-25T00:00:38+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/"},"wordCount":2264,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/","url":"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/","name":"Pratik MCP Tarz\u0131 Yetkilendirme: Deneysel Bir PoC ve K\u0131lavuz - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-12-25T00:00:38+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/pratik-mcp-tarzi-yetkilendirme-deneysel-bir-poc-ve-kilavuz\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Pratik MCP Tarz\u0131 Yetkilendirme: Deneysel Bir PoC ve K\u0131lavuz"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/36930","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=36930"}],"version-history":[{"count":0,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/36930\/revisions"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=36930"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=36930"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=36930"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}