Modern web ve mobil uygulamalar, kullan\u0131c\u0131 verilerini korumak ve yetkisiz eri\u015fimi engellemek i\u00e7in sa\u011flam g\u00fcvenlik mekanizmalar\u0131na ihtiya\u00e7 duyar. Geleneksel oturum y\u00f6netimi y\u00f6ntemleri yerini, \u00f6zellikle da\u011f\u0131t\u0131k sistemlerde ve mikroservis mimarilerinde daha esnek ve \u00f6l\u00e7eklenebilir olan token tabanl\u0131 kimlik do\u011frulama sistemlerine b\u0131rakmaktad\u0131r. Bu makale, uygulaman\u0131z\u0131n g\u00fcvenli\u011fini art\u0131rmak i\u00e7in eri\u015fim (access) ve yenileme (refresh) tokenlar\u0131n\u0131n nas\u0131l kullan\u0131laca\u011f\u0131n\u0131, bunlar\u0131n arkas\u0131ndaki prensipleri ve en iyi uygulama y\u00f6ntemlerini pratik bir yakla\u015f\u0131mla ele alacakt\u0131r.<\/p>\n
Uygulama g\u00fcvenli\u011fi, kullan\u0131c\u0131 deneyimi kadar kritik bir \u00f6neme sahiptir. Kullan\u0131c\u0131lar\u0131n kimli\u011fini do\u011frulamak ve belirli kaynaklara eri\u015fim yetkilerini kontrol etmek, herhangi bir uygulaman\u0131n temel g\u00fcvenlik gereksinimleridir.<\/p>\n
Kimlik do\u011frulama (Authentication), bir kullan\u0131c\u0131n\u0131n veya sistemin iddia etti\u011fi ki\u015fi veya sistem oldu\u011funu kan\u0131tlama s\u00fcrecidir. Genellikle kullan\u0131c\u0131 ad\u0131 ve parola ile yap\u0131l\u0131r. Yetkilendirme (Authorization) ise, kimli\u011fi do\u011frulanm\u0131\u015f bir kullan\u0131c\u0131n\u0131n belirli bir kayna\u011fa veya i\u015fleme eri\u015fip eri\u015femeyece\u011fini belirleme s\u00fcrecidir. \u00d6rne\u011fin, bir kullan\u0131c\u0131n\u0131n sadece kendi profiline eri\u015febilmesi veya bir y\u00f6neticinin t\u00fcm kullan\u0131c\u0131lar\u0131n verilerini g\u00f6rebilmesi yetkilendirme kapsam\u0131ndad\u0131r.<\/p>\n
Geleneksel web uygulamalar\u0131nda, kullan\u0131c\u0131 kimlik do\u011fruland\u0131ktan sonra sunucu taraf\u0131nda bir oturum (session) olu\u015fturulur. Bu oturuma \u00f6zel bir oturum kimli\u011fi (session ID) kullan\u0131c\u0131ya bir \u00e7erez (cookie) arac\u0131l\u0131\u011f\u0131yla g\u00f6nderilir. Kullan\u0131c\u0131 her istek yapt\u0131\u011f\u0131nda bu oturum kimli\u011fi sunucuya g\u00f6nderilir ve sunucu, kullan\u0131c\u0131n\u0131n kimli\u011fini ve yetkilerini bu kimlik \u00fczerinden do\u011frular.<\/p>\n
Bu yakla\u015f\u0131m\u0131n baz\u0131 dezavantajlar\u0131 \u015funlard\u0131r:<\/p>\n
Token tabanl\u0131 kimlik do\u011frulama, sunucu taraf\u0131nda oturum durumu tutma ihtiyac\u0131n\u0131 ortadan kald\u0131r\u0131r. Kimlik do\u011fruland\u0131ktan sonra, kullan\u0131c\u0131ya bir “token” verilir ve bu token, kullan\u0131c\u0131n\u0131n kimli\u011fini ve yetkilerini i\u00e7erir. Kullan\u0131c\u0131 her istek yapt\u0131\u011f\u0131nda bu token\u0131 sunucuya g\u00f6nderir. Sunucu, token\u0131 do\u011frulayarak iste\u011fi i\u015fler. Bu yakla\u015f\u0131m, \u00f6zellikle mikroservis mimarileri ve API odakl\u0131 uygulamalar i\u00e7in idealdir.<\/p>\n
Eri\u015fim tokenlar\u0131, kullan\u0131c\u0131n\u0131n belirli bir s\u00fcre boyunca belirli kaynaklara eri\u015fim yetkisini temsil eden kimlik bilgileridir. Genellikle k\u0131sa \u00f6m\u00fcrl\u00fcd\u00fcrler ve do\u011frudan API \u00e7a\u011fr\u0131lar\u0131nda kullan\u0131l\u0131rlar.<\/p>\n
G\u00fcn\u00fcm\u00fczde en yayg\u0131n kullan\u0131lan eri\u015fim token\u0131 format\u0131 JSON Web Token (JWT)’d\u0131r. JWT’ler, \u00fc\u00e7 ana b\u00f6l\u00fcmden olu\u015fur: Ba\u015fl\u0131k (Header), Y\u00fck (Payload) ve \u0130mza (Signature). Bu b\u00f6l\u00fcmler noktalarla ayr\u0131l\u0131r ve Base64Url ile kodlan\u0131r.<\/p>\n
\nHEADER.PAYLOAD.SIGNATURE\n<\/pre>\n<\/code><\/p>\n
Ba\u015fl\u0131k (Header):<\/b> Token\u0131n tipini (genellikle JWT) ve kullan\u0131lan imzalama algoritmas\u0131n\u0131 (\u00f6rne\u011fin, HS256 veya RS256) belirtir.<\/p>\n\n{\n \"alg\": \"HS256\",\n \"typ\": \"JWT\"\n}\n<\/pre>\n<\/code><\/p>\n
Y\u00fck (Payload):<\/b> \"Claim\" ad\u0131 verilen ifadeleri i\u00e7erir. Bu ifadeler, kullan\u0131c\u0131 hakk\u0131nda bilgiler (\u00f6rne\u011fin, kullan\u0131c\u0131 ID, rol), token\u0131n ge\u00e7erlilik s\u00fcresi (exp), kim taraf\u0131ndan verildi\u011fi (iss) gibi verileri ta\u015f\u0131r.<\/p>\n\n{\n \"sub\": \"1234567890\",\n \"name\": \"John Doe\",\n \"iat\": 1516239022,\n \"exp\": 1516242622, \/\/ 1 saat sonra sona erer\n \"roles\": [\"admin\", \"user\"]\n}\n<\/pre>\n<\/code><\/p>\n
\u0130mza (Signature):<\/b> Ba\u015fl\u0131k ve y\u00fck\u00fcn Base64Url kodlanm\u0131\u015f hallerinin bir s\u0131r (secret) veya \u00f6zel anahtar ile \u015fifrelenmesiyle olu\u015fturulur. Bu imza, token\u0131n b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc ve kimli\u011fini do\u011frulamak i\u00e7in kullan\u0131l\u0131r. Token\u0131n i\u00e7eri\u011fi de\u011fi\u015ftirilirse imza ge\u00e7ersiz hale gelir.<\/p>\nEri\u015fim Tokenlar\u0131n\u0131n Ya\u015fam D\u00f6ng\u00fcs\u00fc<\/h4>\n
Eri\u015fim tokenlar\u0131 genellikle k\u0131sa \u00f6m\u00fcrl\u00fcd\u00fcr (\u00f6rne\u011fin, 5 dakika ila 1 saat). Kullan\u0131c\u0131 kimlik do\u011fruland\u0131\u011f\u0131nda bir eri\u015fim token\u0131 al\u0131r. Bu token, belirli bir s\u00fcre boyunca API isteklerinde kullan\u0131l\u0131r. S\u00fcresi doldu\u011funda, kullan\u0131c\u0131 yeni bir eri\u015fim token\u0131 almak zorundad\u0131r.<\/p>\n
Eri\u015fim Tokenlar\u0131n\u0131n Avantajlar\u0131 ve Riskleri<\/h4>\n
Avantajlar\u0131:<\/b><\/p>\n\n- Stateless:<\/b> Sunucu taraf\u0131nda oturum durumu tutmaya gerek yoktur, bu da \u00f6l\u00e7eklenebilirli\u011fi art\u0131r\u0131r.<\/li>\n
- H\u0131zl\u0131 Do\u011frulama:<\/b> Token\u0131n imzas\u0131 do\u011fruland\u0131ktan sonra, i\u00e7indeki bilgiler okunabilir ve h\u0131zl\u0131 bir \u015fekilde yetkilendirme yap\u0131labilir.<\/li>\n
- \u00c7apraz Alan Kullan\u0131m\u0131:<\/b> Farkl\u0131 alt alan adlar\u0131 veya servisler aras\u0131nda kolayca payla\u015f\u0131labilir.<\/li>\n<\/ul>\n
Riskleri:<\/b><\/p>\n\n- \u00c7al\u0131nma Riski:<\/b> E\u011fer bir eri\u015fim token\u0131 \u00e7al\u0131n\u0131rsa, s\u00fcresi dolana kadar yetkisiz eri\u015fim i\u00e7in kullan\u0131labilir. K\u0131sa \u00f6m\u00fcrl\u00fc olmalar\u0131 bu riski azalt\u0131r.<\/li>\n
- \u0130ptal Zorlu\u011fu:<\/b> Veritaban\u0131nda bir kay\u0131t tutulmad\u0131\u011f\u0131 i\u00e7in, s\u00fcresi dolmadan \u00f6nce bir eri\u015fim token\u0131n\u0131 iptal etmek zordur. Blacklist (kara liste) mekanizmalar\u0131 bu sorunu \u00e7\u00f6zebilir ancak sunucu taraf\u0131nda durum tutma ihtiyac\u0131n\u0131 geri getirir.<\/li>\n<\/ul>\n
Yenileme Tokenlar\u0131 (Refresh Tokens) Nedir?<\/h3>\n
Eri\u015fim tokenlar\u0131n\u0131n k\u0131sa \u00f6m\u00fcrl\u00fc olmas\u0131 g\u00fcvenlik a\u00e7\u0131s\u0131ndan avantajl\u0131 olsa da, kullan\u0131c\u0131 deneyimini olumsuz etkileyebilir. Her 5-10 dakikada bir yeniden kimlik do\u011frulamas\u0131 istemek yerine, yenileme tokenlar\u0131 devreye girer.<\/p>\n
Yenileme Tokenlar\u0131n\u0131n Amac\u0131 ve Yap\u0131s\u0131<\/h4>\n
Yenileme tokenlar\u0131, yeni eri\u015fim tokenlar\u0131 almak i\u00e7in kullan\u0131lan uzun \u00f6m\u00fcrl\u00fc tokenlard\u0131r. Kullan\u0131c\u0131 bir kez kimlik do\u011fruland\u0131ktan sonra, hem bir eri\u015fim token\u0131 hem de bir yenileme token\u0131 al\u0131r. Eri\u015fim token\u0131n\u0131n s\u00fcresi doldu\u011funda, uygulama yenileme token\u0131n\u0131 kullanarak sunucudan yeni bir eri\u015fim token\u0131 talep eder. Yenileme tokenlar\u0131 genellikle bir veritaban\u0131nda saklan\u0131r ve sunucu taraf\u0131ndan y\u00f6netilir. JWT format\u0131nda olabilirler ancak genellikle eri\u015fim tokenlar\u0131ndan daha az bilgi i\u00e7erirler.<\/p>\n
Yenileme Tokenlar\u0131n\u0131n G\u00fcvenli Saklanmas\u0131<\/h4>\n
Yenileme tokenlar\u0131 uzun \u00f6m\u00fcrl\u00fc olduklar\u0131 i\u00e7in, \u00e7al\u0131nmalar\u0131 durumunda b\u00fcy\u00fck g\u00fcvenlik riskleri olu\u015fturabilirler. Bu nedenle, istemci taraf\u0131nda (taray\u0131c\u0131 veya mobil uygulama) son derece g\u00fcvenli bir \u015fekilde saklanmalar\u0131 gerekir:<\/p>\n
\n- Web Uygulamalar\u0131 i\u00e7in:<\/b>
HttpOnly<\/code> ve Secure<\/code> niteliklerine sahip \u00e7erezlerde saklanmal\u0131d\u0131r. Bu, JavaScript'in \u00e7ereze eri\u015fmesini engeller (XSS sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma) ve sadece HTTPS \u00fczerinden g\u00f6nderilmesini sa\u011flar.<\/li>\n- Mobil Uygulamalar i\u00e7in:<\/b> Cihaz\u0131n g\u00fcvenli depolama alanlar\u0131nda (\u00f6rne\u011fin, iOS Keychain, Android Keystore) saklanmal\u0131d\u0131r.<\/li>\n<\/ul>\n
Yenileme Token\u0131 ile Yeni Eri\u015fim Token\u0131 Alma S\u00fcreci<\/h4>\n\n- Kullan\u0131c\u0131, uygulamaya eri\u015fim token\u0131 ile istek g\u00f6nderir.<\/li>\n
- Eri\u015fim token\u0131n\u0131n s\u00fcresi dolmu\u015fsa veya ge\u00e7ersizse, sunucu 401 Unauthorized hatas\u0131 d\u00f6nd\u00fcr\u00fcr.<\/li>\n
- \u0130stemci, sahip oldu\u011fu yenileme token\u0131n\u0131 kullanarak sunucuya (genellikle \u00f6zel bir
\/refresh<\/code> veya \/token<\/code> endpoint'ine) yeni bir eri\u015fim token\u0131 talep eder.<\/li>\n- Sunucu, yenileme token\u0131n\u0131 do\u011frular (ge\u00e7erli mi, s\u00fcresi doldu mu, iptal edildi mi?).<\/li>\n
- E\u011fer yenileme token\u0131 ge\u00e7erliyse, sunucu yeni bir eri\u015fim token\u0131 (ve iste\u011fe ba\u011fl\u0131 olarak yeni bir yenileme token\u0131) olu\u015fturup istemciye g\u00f6nderir.<\/li>\n
- \u0130stemci, yeni eri\u015fim token\u0131n\u0131 kullanarak orijinal iste\u011fi tekrar dener.<\/li>\n<\/ol>\n
Eri\u015fim ve Yenileme Tokenlar\u0131n\u0131n Birlikte \u00c7al\u0131\u015fmas\u0131<\/h3>\n
Bu iki token t\u00fcr\u00fc, g\u00fcvenli\u011fi ve kullan\u0131c\u0131 deneyimini dengelemek i\u00e7in birlikte tasarlanm\u0131\u015ft\u0131r.<\/p>\n
Kimlik Do\u011frulama Ak\u0131\u015f\u0131: \u0130lk Giri\u015f<\/h4>\n\n- Kullan\u0131c\u0131, kullan\u0131c\u0131 ad\u0131 ve parola ile kimlik do\u011frulama sunucusuna istek g\u00f6nderir.<\/li>\n
- Kimlik do\u011frulama ba\u015far\u0131l\u0131 olursa, sunucu bir eri\u015fim token\u0131 ve bir yenileme token\u0131 olu\u015fturur.<\/li>\n
- Bu tokenlar istemciye g\u00f6nderilir. Eri\u015fim token\u0131 genellikle bellekte veya
localStorage<\/code>'da (daha az g\u00fcvenli) saklan\u0131rken, yenileme token\u0131 HttpOnly<\/code> \u00e7erezinde veya g\u00fcvenli depolama alan\u0131nda saklan\u0131r.<\/li>\n- \u0130stemci, sonraki API isteklerinde eri\u015fim token\u0131n\u0131
Authorization<\/code> ba\u015fl\u0131\u011f\u0131nda (Bearer \u015femas\u0131yla) g\u00f6nderir.<\/li>\n<\/ol>\n\nGET \/api\/data\nAuthorization: Bearer [Eri\u015fim Token\u0131]\n<\/pre>\n<\/code><\/p>\n
Oturumun S\u00fcrd\u00fcr\u00fclmesi: Eri\u015fim Token\u0131 Yenileme<\/h4>\n
Eri\u015fim token\u0131n\u0131n s\u00fcresi doldu\u011funda:<\/p>\n
\n- \u0130stemci, ba\u015far\u0131s\u0131z olan API iste\u011fini yakalar (401 hatas\u0131).<\/li>\n
- Saklad\u0131\u011f\u0131 yenileme token\u0131n\u0131 kullanarak
\/refresh<\/code> endpoint'ine istek g\u00f6nderir.<\/li>\n- Sunucu, yenileme token\u0131n\u0131 do\u011frular ve yeni bir eri\u015fim token\u0131 (ve muhtemelen yeni bir yenileme token\u0131) d\u00f6nd\u00fcr\u00fcr.<\/li>\n
- \u0130stemci, yeni eri\u015fim token\u0131n\u0131 saklar ve orijinal iste\u011fi bu yeni token ile tekrar dener.<\/li>\n<\/ol>\n
Token \u0130ptali ve Oturum Sonland\u0131rma<\/h4>\n
Kullan\u0131c\u0131 \u00e7\u0131k\u0131\u015f yapt\u0131\u011f\u0131nda veya bir g\u00fcvenlik ihlali \u015f\u00fcphesi oldu\u011funda tokenlar\u0131n iptal edilmesi gerekir.<\/p>\n
\n- Eri\u015fim Token\u0131 \u0130ptali:<\/b> K\u0131sa \u00f6m\u00fcrl\u00fc olduklar\u0131 i\u00e7in, s\u00fcresi dolana kadar aktif kal\u0131rlar. Acil durumlarda, sunucu taraf\u0131nda bir \"blacklist\" (kara liste) mekanizmas\u0131 olu\u015fturularak belirli eri\u015fim tokenlar\u0131 ge\u00e7ersiz k\u0131l\u0131nabilir.<\/li>\n
- Yenileme Token\u0131 \u0130ptali:<\/b> Yenileme tokenlar\u0131 uzun \u00f6m\u00fcrl\u00fc oldu\u011fundan, kullan\u0131c\u0131 \u00e7\u0131k\u0131\u015f yapt\u0131\u011f\u0131nda sunucu taraf\u0131ndaki veritaban\u0131ndan silinerek veya ge\u00e7ersiz olarak i\u015faretlenerek derhal iptal edilmelidir. Bu, \u00e7al\u0131nan bir yenileme token\u0131n\u0131n yeni eri\u015fim tokenlar\u0131 almas\u0131n\u0131 engeller.<\/li>\n<\/ul>\n
G\u00fcvenlik En \u0130yi Pratikleri ve Dikkat Edilmesi Gerekenler<\/h3>\n
Token tabanl\u0131 kimlik do\u011frulama g\u00fc\u00e7l\u00fc olsa da, do\u011fru uygulanmad\u0131\u011f\u0131nda g\u00fcvenlik a\u00e7\u0131klar\u0131 olu\u015fturabilir.<\/p>\n
Token Saklama Stratejileri (Client-side)<\/h4>\n
Eri\u015fim Token\u0131:<\/b><\/p>\n\n- Bellekte (Memory):<\/b> En g\u00fcvenli y\u00f6ntemdir ancak sayfa yenilendi\u011finde veya kapat\u0131ld\u0131\u011f\u0131nda token kaybolur. SPA'lar i\u00e7in uygun olabilir.<\/li>\n
localStorage<\/code> veya sessionStorage<\/code>:<\/b> Kolay eri\u015filebilir ancak XSS sald\u0131r\u0131lar\u0131na kar\u015f\u0131 savunmas\u0131zd\u0131r. Genellikle \u00f6nerilmez.<\/li>\n<\/ul>\nYenileme Token\u0131:<\/b><\/p>\n\nHttpOnly<\/code> ve Secure<\/code> \u00c7erezleri:<\/b> Web uygulamalar\u0131 i\u00e7in en iyi y\u00f6ntemdir. JavaScript eri\u015femez, sadece HTTPS \u00fczerinden g\u00f6nderilir.<\/li>\n- Mobil Cihaz G\u00fcvenli Depolama:<\/b> Mobil uygulamalar i\u00e7in (Keychain, Keystore) en iyi y\u00f6ntemdir.<\/li>\n<\/ul>\n
CSRF ve XSS Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Koruma<\/h4>\n\n- XSS (Cross-Site Scripting):<\/b> E\u011fer eri\u015fim tokenlar\u0131
localStorage<\/code>'da saklan\u0131yorsa, XSS sald\u0131rganlar\u0131 bu tokenlara eri\u015febilir. HttpOnly<\/code> \u00e7erezleri XSS'e kar\u015f\u0131 koruma sa\u011flar. \u0130\u00e7erik G\u00fcvenlik Politikas\u0131 (CSP) uygulamak da XSS riskini azalt\u0131r.<\/li>\n- CSRF (Cross-Site Request Forgery):<\/b>
HttpOnly<\/code> \u00e7erezleri CSRF'ye kar\u015f\u0131 do\u011fal bir koruma sa\u011flamaz. CSRF tokenlar\u0131 veya SameSite<\/code> \u00e7erez niteli\u011fi kullan\u0131larak ek koruma sa\u011flanmal\u0131d\u0131r. API'ler i\u00e7in Origin<\/code> ve Referer<\/code> ba\u015fl\u0131klar\u0131n\u0131 kontrol etmek de faydal\u0131d\u0131r.<\/li>\n<\/ul>\nToken Ge\u00e7erlilik S\u00fcreleri ve Y\u00f6netimi<\/h4>\n\n- Eri\u015fim Token\u0131:<\/b> K\u0131sa \u00f6m\u00fcrl\u00fc olmal\u0131d\u0131r (\u00f6rn. 5-60 dakika). Bu, \u00e7al\u0131nan bir token\u0131n kullan\u0131m s\u00fcresini s\u0131n\u0131rlar.<\/li>\n
- Yenileme Token\u0131:<\/b> Daha uzun \u00f6m\u00fcrl\u00fc olabilir (\u00f6rn. 7 g\u00fcn - 3 ay), ancak yine de bir son kullanma tarihi olmal\u0131d\u0131r. S\u00fcresi doldu\u011funda kullan\u0131c\u0131n\u0131n tekrar giri\u015f yapmas\u0131 istenir.<\/li>\n
- Token \u0130ptali:<\/b> Kullan\u0131c\u0131 \u00e7\u0131k\u0131\u015f yapt\u0131\u011f\u0131nda veya \u015f\u00fcpheli bir etkinlik tespit edildi\u011finde yenileme tokenlar\u0131 sunucu taraf\u0131nda derhal iptal edilmelidir.<\/li>\n<\/ul>\n
Yenileme Token\u0131 Rotasyonu ve Tek Kullan\u0131ml\u0131k Tokenlar<\/h4>\n
Her yenileme token\u0131 kullan\u0131ld\u0131\u011f\u0131nda, sunucunun yeni bir yenileme token\u0131 d\u00f6nd\u00fcrmesi ve eski token\u0131 ge\u00e7ersiz k\u0131lmas\u0131 (tek kullan\u0131ml\u0131k yenileme tokenlar\u0131) g\u00fcvenli\u011fi art\u0131r\u0131r. Bu, \u00e7al\u0131nan bir yenileme token\u0131n\u0131n sadece bir kez kullan\u0131labilmesini sa\u011flar.<\/p>\n
Uygulama Senaryolar\u0131 ve Geli\u015ftirme \u0130pu\u00e7lar\u0131<\/h3>\n
Eri\u015fim ve yenileme tokenlar\u0131n\u0131n farkl\u0131 uygulama t\u00fcrlerinde nas\u0131l entegre edilebilece\u011fine dair baz\u0131 ipu\u00e7lar\u0131.<\/p>\n
SPA (Single Page Application) Entegrasyonu<\/h4>\n
SPA'lar genellikle eri\u015fim token\u0131n\u0131 bellekte tutar ve yenileme token\u0131n\u0131 HttpOnly<\/code> \u00e7erezinde saklar. Bir API iste\u011fi 401 d\u00f6nd\u00fcrd\u00fc\u011f\u00fcnde, bir ara katman (interceptor) yenileme ak\u0131\u015f\u0131n\u0131 tetikler.<\/p>\n\n\/\/ \u00d6rnek bir Axios interceptor (pseudo-code)\naxios.interceptors.response.use(\n response => response,\n async error => {\n const originalRequest = error.config;\n if (error.response.status === 401 && !originalRequest._retry) {\n originalRequest._retry = true;\n try {\n const { data } = await axios.post('\/refresh-token'); \/\/ Yenileme token\u0131 otomatik \u00e7erezden gider\n \/\/ Yeni eri\u015fim token\u0131n\u0131 belle\u011fe kaydet\n localStorage.setItem('accessToken', data.accessToken); \n originalRequest.headers['Authorization'] = 'Bearer ' + data.accessToken;\n return axios(originalRequest); \/\/ Orijinal iste\u011fi tekrar dene\n } catch (refreshError) {\n \/\/ Yenileme token\u0131 da ba\u015far\u0131s\u0131z oldu, kullan\u0131c\u0131y\u0131 \u00e7\u0131k\u0131\u015f yapmaya zorla\n window.location.href = '\/login';\n return Promise.reject(refreshError);\n }\n }\n return Promise.reject(error);\n }\n);\n<\/pre>\n<\/code><\/p>\n
Mobil Uygulama Entegrasyonu<\/h4>\n
Mobil uygulamalar, eri\u015fim token\u0131n\u0131 da yenileme token\u0131n\u0131 da cihaz\u0131n g\u00fcvenli depolama alanlar\u0131nda saklamal\u0131d\u0131r. API isteklerinde eri\u015fim token\u0131 Authorization<\/code> ba\u015fl\u0131\u011f\u0131nda g\u00f6nderilir. Yenileme ak\u0131\u015f\u0131, web'dekiyle benzer \u015fekilde bir hata yakalama mekanizmas\u0131 ile y\u00f6netilir.<\/p>\nSunucu Taraf\u0131 (Backend) Uygulamalar<\/h4>\n
E\u011fer backend uygulamalar\u0131 ba\u015fka bir servise token ile istek yap\u0131yorsa, bu tokenlar\u0131n da g\u00fcvenli bir \u015fekilde saklanmas\u0131 ve yenilenmesi gerekir. Genellikle bu t\u00fcr senaryolarda OAuth 2.0 Client Credentials Grant tipi kullan\u0131l\u0131r veya servisler aras\u0131 token de\u011fi\u015fimi yap\u0131l\u0131r.<\/p>\n
\u00d6rnek Kod Par\u00e7ac\u0131klar\u0131 (Pseudo-code)<\/h4>\n
Token Alma (Backend):<\/b><\/p>\n\n\/\/ Kullan\u0131c\u0131 giri\u015fi sonras\u0131\nPOST \/login\n{ \"username\": \"user\", \"password\": \"password\" }\n\n\/\/ Yan\u0131t:\n{\n \"accessToken\": \"eyJ...\", \/\/ K\u0131sa \u00f6m\u00fcrl\u00fc\n \"refreshToken\": \"xyz...\", \/\/ Uzun \u00f6m\u00fcrl\u00fc\n \"expiresIn\": 3600 \/\/ saniye\n}\n\n\/\/ Yenileme Token\u0131 ile Yeni Eri\u015fim Token\u0131 Alma (Backend):\nPOST \/refresh-token\n\/\/ refresh token HttpOnly \u00e7erezinden gelir veya body'de g\u00f6nderilir\n\n\/\/ Yan\u0131t:\n{\n \"accessToken\": \"eyJ...\", \/\/ Yeni eri\u015fim token\u0131\n \"expiresIn\": 3600\n}\n<\/pre>\n<\/code><\/p>\n
Sonu\u00e7<\/h3>\n
Eri\u015fim ve yenileme tokenlar\u0131, modern uygulama g\u00fcvenli\u011finde g\u00fc\u00e7l\u00fc ve esnek bir \u00e7\u00f6z\u00fcm sunar. K\u0131sa \u00f6m\u00fcrl\u00fc eri\u015fim tokenlar\u0131 ile anl\u0131k API eri\u015fimini g\u00fcvence alt\u0131na al\u0131rken, uzun \u00f6m\u00fcrl\u00fc ve g\u00fcvenli bir \u015fekilde saklanan yenileme tokenlar\u0131 ile kullan\u0131c\u0131 oturumlar\u0131n\u0131 kesintisiz ve g\u00fcvenli bir \u015fekilde s\u00fcrd\u00fcrmek m\u00fcmk\u00fcnd\u00fcr. Do\u011fru saklama stratejileri, uygun ge\u00e7erlilik s\u00fcreleri ve token iptali mekanizmalar\u0131 ile uygulaman\u0131z\u0131n g\u00fcvenlik duru\u015funu \u00f6nemli \u00f6l\u00e7\u00fcde g\u00fc\u00e7lendirebilirsiniz. Unutmay\u0131n, hi\u00e7bir g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fc mutlak de\u011fildir; s\u00fcrekli g\u00fcncel kalmak ve en iyi pratikleri uygulamak hayati \u00f6nem ta\u015f\u0131r.<\/p>\n
SSS (S\u0131k Sorulan Sorular)<\/h3>\n1. Eri\u015fim token\u0131 ve yenileme token\u0131 aras\u0131ndaki temel fark nedir?<\/h4>\n
Eri\u015fim token\u0131, belirli bir s\u00fcre boyunca kaynaklara do\u011frudan eri\u015fim yetkisi verir ve genellikle k\u0131sa \u00f6m\u00fcrl\u00fcd\u00fcr. Yenileme token\u0131 ise, eri\u015fim token\u0131n\u0131n s\u00fcresi doldu\u011funda yeni bir eri\u015fim token\u0131 almak i\u00e7in kullan\u0131l\u0131r ve daha uzun \u00f6m\u00fcrl\u00fcd\u00fcr.<\/p>\n
2. Neden eri\u015fim tokenlar\u0131 k\u0131sa \u00f6m\u00fcrl\u00fc olmal\u0131d\u0131r?<\/h4>\n
Eri\u015fim tokenlar\u0131 k\u0131sa \u00f6m\u00fcrl\u00fc olmal\u0131d\u0131r \u00e7\u00fcnk\u00fc \u00e7al\u0131nmalar\u0131 durumunda yetkisiz eri\u015fim s\u00fcresini k\u0131s\u0131tlar. E\u011fer bir token \u00e7al\u0131n\u0131rsa, k\u0131sa s\u00fcre i\u00e7inde ge\u00e7ersiz hale gelece\u011fi i\u00e7in sald\u0131rgan\u0131n faydalanma s\u00fcresi azal\u0131r.<\/p>\n
3. Yenileme tokenlar\u0131 nerede saklanmal\u0131d\u0131r?<\/h4>\n
Web uygulamalar\u0131 i\u00e7in HttpOnly<\/code> ve Secure<\/code> niteliklerine sahip \u00e7erezlerde saklanmal\u0131d\u0131r. Mobil uygulamalar i\u00e7in ise cihaz\u0131n g\u00fcvenli depolama alanlar\u0131 (iOS Keychain, Android Keystore) tercih edilmelidir. Bu y\u00f6ntemler, JavaScript eri\u015fimini k\u0131s\u0131tlayarak XSS sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma sa\u011flar.<\/p>\n4. JWT kullanmak her zaman g\u00fcvenli midir?<\/h4>\n
JWT'ler, token\u0131n b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc imza ile garanti alt\u0131na al\u0131r ancak i\u00e7erdi\u011fi verileri \u015fifrelemez. Hassas bilgiler do\u011frudan JWT i\u00e7inde saklanmamal\u0131d\u0131r. Ayr\u0131ca, JWT'nin imzalanmas\u0131nda kullan\u0131lan s\u0131r anahtar\u0131n (secret key) g\u00fcvenli\u011fi kritik \u00f6neme sahiptir. E\u011fer s\u0131r anahtar a\u00e7\u0131\u011fa \u00e7\u0131karsa, sald\u0131rgan ge\u00e7erli JWT'ler olu\u015fturabilir.<\/p>\n
5. Kullan\u0131c\u0131 \u00e7\u0131k\u0131\u015f yapt\u0131\u011f\u0131nda tokenlar nas\u0131l iptal edilir?<\/h4>\n
Kullan\u0131c\u0131 \u00e7\u0131k\u0131\u015f yapt\u0131\u011f\u0131nda, istemcinin sahip oldu\u011fu eri\u015fim token\u0131 (bellekten veya localStorage<\/code>'dan) ve yenileme token\u0131 (\u00e7erezden veya g\u00fcvenli depolama alan\u0131ndan) silinmelidir. Ayr\u0131ca, yenileme token\u0131 sunucu taraf\u0131nda da ge\u00e7ersiz olarak i\u015faretlenmeli veya veritaban\u0131ndan silinmelidir. Eri\u015fim tokenlar\u0131 k\u0131sa \u00f6m\u00fcrl\u00fc olduklar\u0131 i\u00e7in genellikle s\u00fcresinin dolmas\u0131 beklenir veya acil durumlarda bir \"blacklist\" mekanizmas\u0131 kullan\u0131labilir.<\/p>\n","protected":false},"excerpt":{"rendered":"Bu yakla\u015f\u0131m\u0131n baz\u0131 dezavantajlar\u0131 \u015funlard\u0131r:","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-39348","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nUygulaman\u0131z\u0131 Eri\u015fim ve Yenileme Tokenlar\u0131 ile G\u00fcvenceye Almak: Pratik Bir Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Uygulaman\u0131z\u0131 Eri\u015fim ve Yenileme Tokenlar\u0131 ile G\u00fcvenceye Almak: Pratik Bir Rehber\" \/>\n<meta property=\"og:description\" content=\"Bu yakla\u015f\u0131m\u0131n baz\u0131 dezavantajlar\u0131 \u015funlard\u0131r:\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-19T09:30:35+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"14 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Uygulaman\u0131z\u0131 Eri\u015fim ve Yenileme Tokenlar\u0131 ile G\u00fcvenceye Almak: Pratik Bir Rehber\",\"datePublished\":\"2026-02-19T09:30:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/\"},\"wordCount\":2561,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/\",\"name\":\"Uygulaman\u0131z\u0131 Eri\u015fim ve Yenileme Tokenlar\u0131 ile G\u00fcvenceye Almak: Pratik Bir Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-02-19T09:30:35+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Uygulaman\u0131z\u0131 Eri\u015fim ve Yenileme Tokenlar\u0131 ile G\u00fcvenceye Almak: Pratik Bir Rehber\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Uygulaman\u0131z\u0131 Eri\u015fim ve Yenileme Tokenlar\u0131 ile G\u00fcvenceye Almak: Pratik Bir Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/","og_locale":"tr_TR","og_type":"article","og_title":"Uygulaman\u0131z\u0131 Eri\u015fim ve Yenileme Tokenlar\u0131 ile G\u00fcvenceye Almak: Pratik Bir Rehber","og_description":"Bu yakla\u015f\u0131m\u0131n baz\u0131 dezavantajlar\u0131 \u015funlard\u0131r:","og_url":"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-02-19T09:30:35+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"14 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Uygulaman\u0131z\u0131 Eri\u015fim ve Yenileme Tokenlar\u0131 ile G\u00fcvenceye Almak: Pratik Bir Rehber","datePublished":"2026-02-19T09:30:35+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/"},"wordCount":2561,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/","url":"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/","name":"Uygulaman\u0131z\u0131 Eri\u015fim ve Yenileme Tokenlar\u0131 ile G\u00fcvenceye Almak: Pratik Bir Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-02-19T09:30:35+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/uygulamanizi-erisim-ve-yenileme-tokenlari-ile-guvenceye-almak-pratik-bir-rehber\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Uygulaman\u0131z\u0131 Eri\u015fim ve Yenileme Tokenlar\u0131 ile G\u00fcvenceye Almak: Pratik Bir Rehber"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/39348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=39348"}],"version-history":[{"count":0,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/39348\/revisions"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=39348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=39348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=39348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}