## 技術細節 { #technical-details }

FastAPI 內建實作了一些 SSE 的最佳實務。

- 當 15 秒內沒有任何訊息時，傳送一次**「保活」`ping` 註解**，以避免某些代理伺服器關閉連線；此作法源自於[HTML 規範：Server-Sent Events](https://html.spec.whatwg.org/multipage/server-sent-events.html#authoring-notes)中的建議。
- 設定 `Cache-Control: no-cache` 標頭，以**防止快取**串流內容。
- 設定特殊標頭 `X-Accel-Buffering: no`，以**避免**在像 Nginx 這類代理中被**緩衝**。

     * <p>
     * This method will attempt
     * to resolve SIDs using a cache and cache the results of any SIDs that
     * required resolving with the authority. SID cache entries are currently not
     * expired because under normal circumstances SID information never changes.
     *

FastAPI는 일부 SSE 모범 사례를 기본으로 구현합니다.

- 메시지가 없을 때는 15초마다 **"keep alive" `ping` 주석**을 보내 일부 프록시가 연결을 종료하지 않도록 합니다. [HTML 사양: Server-Sent Events](https://html.spec.whatwg.org/multipage/server-sent-events.html#authoring-notes)에서 권장합니다.
- 스트림이 **캐시되지 않도록** `Cache-Control: no-cache` 헤더를 설정합니다.
- Nginx 같은 일부 프록시에서 **버퍼링을 방지**하기 위해 특수 헤더 `X-Accel-Buffering: no`를 설정합니다.

```json
{
    "detail": [
        {
            "type": "extra_forbidden",
            "loc": ["cookie", "santa_tracker"],
            "msg": "Extra inputs are not permitted",

        )
      }

      // Authority.
      var hasUsername = false
      var hasPassword = false
      val slashCount = input.slashCount(pos, limit)
      if (slashCount >= 2 || base == null || base.scheme != this.scheme) {
        // Read an authority if either:
        //  * The input starts with 2 or more slashes. These follow the scheme if it exists.

- Встановити заголовок `Cache-Control: no-cache`, щоб **запобігти кешуванню** потоку.
- Встановити спеціальний заголовок `X-Accel-Buffering: no`, щоб **запобігти буферизації** у деяких проксі, наприклад Nginx.

- Définir l’en-tête `Cache-Control: no-cache` pour **empêcher la mise en cache** du flux.
- Définir un en-tête spécial `X-Accel-Buffering: no` pour **empêcher le buffering** dans certains proxys comme Nginx.

******@****.***
hmac-sha2-256
hmac-sha2-512
hmac-sha1
hmac-sha1-96
```

### Certificate-based authentication

`--sftp=trusted-user-ca-key=...` specifies a file containing public key of certificate authority that is trusted
to sign user certificates for authentication.

Implementation is identical with "TrustedUserCAKeys" setting in OpenSSH server with exception that only one CA
key can be defined.

    assertThat(connect.headers["Host"]).isEqualTo("[::1]:$port")
    assertThat(connect.headers[":authority"]).isNull()
    val get = server.takeRequest()
    assertThat(get.requestLine).isEqualTo("GET / HTTP/1.1")
    assertThat(get.headers["Host"]).isEqualTo("[::1]:$port")
    assertThat(get.headers[":authority"]).isNull()
    assertThat(get.url).isEqualTo(url)
  }

  @Test

            fessConfig.setSystemProperty("entraid.client.secret", form.entraidClientSecret);
        }
        fessConfig.setSystemProperty("entraid.tenant", form.entraidTenant);
        fessConfig.setSystemProperty("entraid.authority", form.entraidAuthority);
        fessConfig.setSystemProperty("entraid.reply.url", form.entraidReplyUrl);
        fessConfig.setSystemProperty("entraid.state.ttl", form.entraidStateTtl);