Glossary¶
- authentication policy
- authentication policies
An authentication method enabled in configuration
- Kinto-Core HTTP API
A system of rules that explains the way to interact with the HTTP API endpoints (utilities, synchronization, headers etc.), and how data is organized (JSON responses etc.).
- CRUD
Acronym for Create, Read, Update, Delete
- endpoint
- endpoints
An endpoint handles a particular HTTP verb at a particular URL.
- extensible
«Extensible» means that the component behaviour can be overriden via lines of code. It differs from «pluggable».
- Firefox Accounts
Identity Provider run by Mozilla (https://accounts.firefox.com).
- Identity Provider
An identity provider (abbreviated IdP) is a service in charge of managing identity information, and providing authentication endpoints (login forms, tokens manipulation etc.)
- HTTP API
Multiple publicly exposed endpoints that accept HTTP requests and respond with the requested data, in the form of JSON.
- KISS
«Keep it simple, stupid» is a design priciple which states that most systems work best if they are kept simple rather than made complicated.
- pluggable
«Pluggable» means that the component can be replaced via configuration. It differs from «extensible».
- resource
A resource is a collection of records. A resource has two URLs, one for the collection and one for individual records.
- user id
- user identifier
- user identifiers
A string that identifies a user. It is prefixed with the authentication policy name (eg.
account:alice,ldap:bob,google:me@gmail.com, …). These identifiers are used to refer to users in permissions or groups.- object
- objects
Also refered as «records», objects are stored by Kinto-Core resources.
- tombstone
- tombstones
When a record is deleted in a resource, a tombstone is created to keep track of the deletion when polling for changes. A tombstone only contains the
idandlast_modifiedfields, everything else is really deleted.- principal
- principals
An entity that can be authenticated. Principals can be individual people, computers, services, or any group of such things.
- permission
- permissions
An action that can be authorized or denied. read, write, create are permissions.
- Semantic Versioning
A standard MAJOR.MINOR.PATCH versioning scheme. See http://semver.org/.
- ACE
- ACEs
- Access Control Entity
An association of a principal, an object and a permission. For instance, (Alexis, article, write).
- ACL
- ACLs
- Access Control List
A list of Access Control Entities (ACE).