{"id":2217,"date":"2017-05-02T09:00:59","date_gmt":"2017-05-02T09:00:59","guid":{"rendered":"https:\/\/nextcloud.com\/?p=2217"},"modified":"2017-05-02T09:00:59","modified_gmt":"2017-05-02T09:00:59","slug":"security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers","status":"publish","type":"post","link":"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/","title":{"rendered":"Security in Nextcloud 12: Bruteforce Protection and Rate Limiting for developers"},"content":{"rendered":"
\"\"<\/a>

Image Credit: Garrett LeSage
https:\/\/flic.kr\/p\/iYxHLh<\/p><\/div>\n

Security is the biggest strength of Nextcloud and the new release continues our track record of introducing new, innovative technologies to protect Nextcloud servers. In Nextcloud 12, a number of improvements for Bruteforce Protection were made and we introduced Rate Limiting as an option for app developers to make it harder to spam users on Nextcloud servers. This article will explain these new protections and help developers who work on Nextcloud apps to support them in their applications.<\/p>\n

What’s new and improved<\/h2>\n

Nextcloud 11 introduced better password handling, CSP 3.0 and Same-site Cookies support improvements and expanded brute force protection.<\/a> In Nextcloud 12, Bruteforce Protection can now be used by application developers to improve the protection of their application.<\/p>\n

New in Nextcloud 12 is Rate Limiting. Rate Limiting can help protect servers from getting overloaded by broken apps and from users downloading too much data too quickly.<\/p>\n

Improved: Brute Force Protection for apps<\/h3>\n

Brute Force Protection is meant to protect Nextcloud servers from attempts to guess user passwords in various ways. Besides the obvious \u00ab\u00a0let’s try a big list of commonly used passwords<\/em>\u00a0\u00bb attack, it also makes it harder to use slightly more sophisticated attacks via the reset password form or trying to find app password tokens.<\/p>\n

If triggered, brute force protection makes requests coming from an IP on a bruteforce protected controller with the same action slower and slower for a 24 hour period. The slow-down is up to 1 minute, slowly ramping up with increasing numbers of retries. One minute might not be much but slowing down retries from hundreds of times per second to 60 per hour effectively negates the danger of most brute force attempts. Triggers to the Brute Force Protection mechanism are stored in the database and result in a log entry so the admin can keep an eye on attempts at break in through brute force attacks.<\/p>\n

Bruteforce protection can now be used by controllers of any app in a very easy way by adding an Annotation<\/em> on a controller.
\n@BruteForceProtection(action=string)<\/code><\/p>\n

string<\/code> is the name of the action. Such as login<\/code> or reset<\/code>. Brute-force attempts are on a per-action basis; this means if a violation for the login<\/code> action is triggered, other actions such as reset<\/code> or foobar<\/code> are not affected.<\/p>\n

The throttle()<\/strong> method has to be called on the response in case of a violation. Doing so will increase the throttle counter and make following requests slower.<\/p>\n

Find more details and an example controller method in the documentation.<\/a><\/p>\n

New: Rate Limiting<\/h3>\n

Rate Limiting is a new security capability in Nextcloud 12. It allows a developer to specify how often an IP range or a user may send a request in a specific time period. This can be useful for expensive API calls, to prevent users from accessing too much data in a smaller attempt of time or harden bruteforce stuff further.<\/p>\n

Rate limiting is currently only enabled if a memory cache is configured because every request is logged, requiring a potentially very large amount of database writes. Fallback to database may be added in the future, however the load on the database would be significant.<\/p>\n

Like with Brute Force Protection, Rate Limiting can be enabled by adding Annotations<\/em> to the controller:
\n@UserRateThrottle(limit=int, period=int)<\/code> The rate limiting that is applied to logged-in users. If not specified Nextcloud will fallback to AnonUserRateThrottle.
\n@AnonRateThrottle(limit=int, period=int)<\/code> The rate limiting that is applied to guests.<\/p>\n

Rate limiting is only applied to the current controller method. So if the rate limit for one method is reached only the controller method will deliver a 429 status code.<\/p>\n

More details and example code can be found in the documentation.<\/a><\/p>\n

On Github, see a real life example on how rate limiting can be easily applied: Nextcloud Server pull request 4434.<\/a><\/p>\n

Conclusion<\/h2>\n

As the above pull request shows, Rate Limiting and Brute Force Protection have been applied in the core Nextcloud code. We call on app developers to follow that example and implement these extra protections in their applications, making it even harder for adversaries to break the security of Nextcloud systems!<\/p>\n","protected":false},"excerpt":{"rendered":"

Security is the biggest strength of Nextcloud and the new release continues our track record of introducing new, innovative technologies to protect Nextcloud servers. In Nextcloud 12, a number of improvements for Bruteforce Protection were made and we introduced Rate Limiting as an option for app developers to make it harder to spam users on […]<\/p>\n","protected":false},"author":2,"featured_media":1423,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"publish_to_discourse":"1","publish_post_category":"22","wpdc_auto_publish_overridden":"","wpdc_topic_tags":"","wpdc_pin_topic":"","wpdc_pin_until":"","discourse_post_id":"43456","discourse_permalink":"https:\/\/help.nextcloud.com\/t\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/12613","wpdc_publishing_response":"","wpdc_publishing_error":"","footnotes":""},"categories":[11,7,14,13],"tags":[],"class_list":["post-2217","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-news","category-release","category-security"],"acf":[],"yoast_head":"\nSecurity in Nextcloud 12: Bruteforce Protection and Rate Limiting for developers - Nextcloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security in Nextcloud 12: Bruteforce Protection and Rate Limiting for developers - Nextcloud\" \/>\n<meta property=\"og:description\" content=\"Security is the biggest strength of Nextcloud and the new release continues our track record of introducing new, innovative technologies to protect Nextcloud servers. In Nextcloud 12, a number of improvements for Bruteforce Protection were made and we introduced Rate Limiting as an option for app developers to make it harder to spam users on […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/\" \/>\n<meta property=\"og:site_name\" content=\"Nextcloud\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Nextclouders\/\" \/>\n<meta property=\"article:published_time\" content=\"2017-05-02T09:00:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nextcloud.com\/wp-content\/uploads\/2022\/03\/jos.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"1000\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jos Poortvliet\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@nextclouders\" \/>\n<meta name=\"twitter:site\" content=\"@nextclouders\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jos Poortvliet\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/\"},\"author\":{\"name\":\"Jos Poortvliet\",\"@id\":\"https:\/\/nextcloud.com\/fr\/#\/schema\/person\/c3c1a52fbc1c6a2be2f1df8818daa8c2\"},\"headline\":\"Security in Nextcloud 12: Bruteforce Protection and Rate Limiting for developers\",\"datePublished\":\"2017-05-02T09:00:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/\"},\"wordCount\":684,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/#organization\"},\"image\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg\",\"articleSection\":[\"Blog\",\"News\",\"Release\",\"Security\"],\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/\",\"url\":\"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/\",\"name\":\"Security in Nextcloud 12: Bruteforce Protection and Rate Limiting for developers - Nextcloud\",\"isPartOf\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg\",\"datePublished\":\"2017-05-02T09:00:59+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/#primaryimage\",\"url\":\"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg\",\"contentUrl\":\"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg\",\"width\":1000,\"height\":1000,\"caption\":\"Jos Poortvliet\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/nextcloud.com\/fr\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security in Nextcloud 12: Bruteforce Protection and Rate Limiting for developers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/nextcloud.com\/fr\/#website\",\"url\":\"https:\/\/nextcloud.com\/fr\/\",\"name\":\"Nextcloud\",\"description\":\"Regain control over your data\",\"publisher\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/nextcloud.com\/fr\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/nextcloud.com\/fr\/#organization\",\"name\":\"Nextcloud\",\"url\":\"https:\/\/nextcloud.com\/fr\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/nextcloud.com\/fr\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg\",\"contentUrl\":\"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"Nextcloud\"},\"image\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/Nextclouders\/\",\"https:\/\/x.com\/nextclouders\",\"https:\/\/www.linkedin.com\/company\/10827569\/\",\"https:\/\/youtube.com\/nextcloud\",\"https:\/\/www.instagram.com\/nextclouders\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/nextcloud.com\/fr\/#\/schema\/person\/c3c1a52fbc1c6a2be2f1df8818daa8c2\",\"name\":\"Jos Poortvliet\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/nextcloud.com\/fr\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1c6de64891ee8c4902e1ac198f26ea5fb202d8bbaa7bce35b6a184610bbe4a3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1c6de64891ee8c4902e1ac198f26ea5fb202d8bbaa7bce35b6a184610bbe4a3d?s=96&d=mm&r=g\",\"caption\":\"Jos Poortvliet\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security in Nextcloud 12: Bruteforce Protection and Rate Limiting for developers - Nextcloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/","og_locale":"fr_FR","og_type":"article","og_title":"Security in Nextcloud 12: Bruteforce Protection and Rate Limiting for developers - Nextcloud","og_description":"Security is the biggest strength of Nextcloud and the new release continues our track record of introducing new, innovative technologies to protect Nextcloud servers. In Nextcloud 12, a number of improvements for Bruteforce Protection were made and we introduced Rate Limiting as an option for app developers to make it harder to spam users on […]","og_url":"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/","og_site_name":"Nextcloud","article_publisher":"https:\/\/www.facebook.com\/Nextclouders\/","article_published_time":"2017-05-02T09:00:59+00:00","og_image":[{"width":1000,"height":1000,"url":"https:\/\/nextcloud.com\/wp-content\/uploads\/2022\/03\/jos.jpg","type":"image\/jpeg"}],"author":"Jos Poortvliet","twitter_card":"summary_large_image","twitter_creator":"@nextclouders","twitter_site":"@nextclouders","twitter_misc":{"\u00c9crit par":"Jos Poortvliet","Dur\u00e9e de lecture estim\u00e9e":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/#article","isPartOf":{"@id":"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/"},"author":{"name":"Jos Poortvliet","@id":"https:\/\/nextcloud.com\/fr\/#\/schema\/person\/c3c1a52fbc1c6a2be2f1df8818daa8c2"},"headline":"Security in Nextcloud 12: Bruteforce Protection and Rate Limiting for developers","datePublished":"2017-05-02T09:00:59+00:00","mainEntityOfPage":{"@id":"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/"},"wordCount":684,"commentCount":0,"publisher":{"@id":"https:\/\/nextcloud.com\/fr\/#organization"},"image":{"@id":"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/#primaryimage"},"thumbnailUrl":"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg","articleSection":["Blog","News","Release","Security"],"inLanguage":"fr-FR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/","url":"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/","name":"Security in Nextcloud 12: Bruteforce Protection and Rate Limiting for developers - Nextcloud","isPartOf":{"@id":"https:\/\/nextcloud.com\/fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/#primaryimage"},"image":{"@id":"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/#primaryimage"},"thumbnailUrl":"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg","datePublished":"2017-05-02T09:00:59+00:00","breadcrumb":{"@id":"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/#primaryimage","url":"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg","contentUrl":"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg","width":1000,"height":1000,"caption":"Jos Poortvliet"},{"@type":"BreadcrumbList","@id":"https:\/\/nextcloud.com\/fr\/blog\/security-in-nextcloud-12-bruteforce-protection-and-rate-limiting-for-developers\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nextcloud.com\/fr\/"},{"@type":"ListItem","position":2,"name":"Security in Nextcloud 12: Bruteforce Protection and Rate Limiting for developers"}]},{"@type":"WebSite","@id":"https:\/\/nextcloud.com\/fr\/#website","url":"https:\/\/nextcloud.com\/fr\/","name":"Nextcloud","description":"Regain control over your data","publisher":{"@id":"https:\/\/nextcloud.com\/fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nextcloud.com\/fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/nextcloud.com\/fr\/#organization","name":"Nextcloud","url":"https:\/\/nextcloud.com\/fr\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/nextcloud.com\/fr\/#\/schema\/logo\/image\/","url":"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg","contentUrl":"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg","width":"1024","height":"1024","caption":"Nextcloud"},"image":{"@id":"https:\/\/nextcloud.com\/fr\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Nextclouders\/","https:\/\/x.com\/nextclouders","https:\/\/www.linkedin.com\/company\/10827569\/","https:\/\/youtube.com\/nextcloud","https:\/\/www.instagram.com\/nextclouders\/"]},{"@type":"Person","@id":"https:\/\/nextcloud.com\/fr\/#\/schema\/person\/c3c1a52fbc1c6a2be2f1df8818daa8c2","name":"Jos Poortvliet","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/nextcloud.com\/fr\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1c6de64891ee8c4902e1ac198f26ea5fb202d8bbaa7bce35b6a184610bbe4a3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1c6de64891ee8c4902e1ac198f26ea5fb202d8bbaa7bce35b6a184610bbe4a3d?s=96&d=mm&r=g","caption":"Jos Poortvliet"}}]}},"featured_media_url":"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg","_links":{"self":[{"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/posts\/2217","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/comments?post=2217"}],"version-history":[{"count":0,"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/posts\/2217\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/media\/1423"}],"wp:attachment":[{"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/media?parent=2217"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/categories?post=2217"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/tags?post=2217"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}