[B! OAuth] TokyoIncidentsã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

TokyoIncidents id:TokyoIncidents

OAuthã«é–¢ã™ã‚‹TokyoIncidentsã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (70)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Site Maintenance
Weâ€™ll be back soon! We're very sorry for the inconvenience but weâ€™re performing maintenance. Please check back soon... â€” The Medium Team
TokyoIncidents 2018/10/03
Google

cloud

OAuth
ãƒªãƒ³ã‚¯
JSON Web Token (JWT) - OAuth.jp
@novã§ã™ã€‚ å€‹äººçš„ã«æœ€è¿‘OAuth 2.0ã‚ˆã‚ŠJWT (ã¨ã„ã†ã‹JWS) ã‚’åˆ©ç”¨ã™ã‚‹ã‚·ãƒ¼ãƒ³ãŒå¤šãã€æ¯Žå›žåŒã˜èª¬æ˜Žã™ã‚‹ã®ã‚‚ã‚ã‚“ã©ãã•ã„ã®ã§ãƒ–ãƒã‚°ã«ã¾ã¨ã‚ã‚‹ã‹ã¨æ€ã„ã€ã©ã†ã›ãªã‚‰OAuth.jpã«æ›¸ãã‹ã¨ã„ã†ã“ã¨ã§ã€ã“ã‚“ãªè¨˜äº‹ã‚’æ›¸ã„ã¦ãŠã‚Šã¾ã™ã€‚ ï¼ˆãã‚ãã‚JWTã¨JWSã¯ã€OpenID Foundation Japanã®ç¿»è¨³WGã§ç¿»è¨³ã™ã‚‹ã¹ãï¼Ÿï¼‰ JSON Web Token (JWT) ã¨ã¯ã€JSONã‚’ãƒˆãƒ¼ã‚¯ãƒ³åŒ–ã™ã‚‹ä»•çµ„ã¿ã€‚ å…ƒã€…ã¯JSONãƒ‡ãƒ¼ã‚¿ã«Signatureã‚’ã¤ã‘ãŸã‚ŠEncryptionã™ã‚‹ä»•çµ„ã¿ã¨ã—ã¦è€ƒãˆã‚‰ã‚ŒãŸã‚‚ã®ã®ã€Signatureéƒ¨åˆ†ãŒJSON Web Signatue (JWS)ã€Encryptionéƒ¨åˆ†ãŒJSON Web Encryption (JWE) ã¨ã„ã†ä»•æ§˜ã«åˆ†å‰²ã•ã‚ŒãŸã€‚ ãã‚Œãžã‚Œ2012å¹´10æœˆ26æ—¥ç¾åœ¨ã®æœ€æ–°ä»•æ§˜ã¯ã“ã¡ã‚‰ã€‚ ï¼ˆJWTã¨JWSã¯æ—¢ã«ã ã„ã¶ä»•æ§˜ãŒå›º
TokyoIncidents 2017/05/12
OAuth

JSON
ãƒªãƒ³ã‚¯
OAuth 2.0 å…¨ãƒ•ãƒãƒ¼ã®å›³è§£ã¨å‹•ç”» - Qiita
RFC 6749 (The OAuth 2.0 Authorization Framework) ã§å®šç¾©ã•ã‚Œã¦ã„ã‚‹ 4 ã¤ã®èªå¯ãƒ•ãƒãƒ¼ã€ãŠã‚ˆã³ã€ãƒªãƒ•ãƒ¬ãƒƒã‚·ãƒ¥ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ç”¨ã„ã¦ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®å†ç™ºè¡Œã‚’å—ã‘ã‚‹ãƒ•ãƒãƒ¼ã®å›³è§£åŠã³å‹•ç”»ã§ã™ã€‚å‹•ç”»ã¯ YouTube ã¸ã®ãƒªãƒ³ã‚¯ã¨ãªã£ã¦ã„ã¾ã™ã€‚ English version: Diagrams And Movies Of All The OAuth 2.0 Flows è¿½è¨˜ (2019-07-02) èªå¯æ±ºå®šã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆã‹ã‚‰ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«èªå¯ã‚³ãƒ¼ãƒ‰ã‚„ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã‚’æ¸¡ã™æ–¹æ³•ã«ã¤ã„ã¦ã¯ã€åˆ¥è¨˜äº‹ã€ŽOAuth 2.0 ã®èªå¯ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã¨ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã«é–¢ã™ã‚‹èª¬æ˜Žã€ã§è§£èª¬ã—ã¦ã„ã¾ã™ã®ã§ã€ã”å‚ç…§ãã ã•ã„ã€‚ è¿½è¨˜ï¼ˆ2020-03-20ï¼‰ ã“ã®è¨˜äº‹ã®å†…å®¹ã‚’å«ã‚€ã€ç†è€…æœ¬äººã«ã‚ˆã‚‹ã€ŽOAuth & OIDC å…¥é–€ç·¨ã€è§£èª¬å‹•ç”»ã‚’å…¬é–‹ã—ã¾ã—ãŸï¼ 1. èªå¯ã‚³ãƒ¼ãƒ‰ãƒ•ãƒãƒ¼ RF
TokyoIncidents 2017/05/08
OAuth

RFC
ãƒªãƒ³ã‚¯
JWS å®Ÿè£…æ™‚ã«ä½œã‚ŠãŒã¡ãªè„†å¼±æ€§ãƒ‘ã‚¿ãƒ¼ãƒ³ - OAuth.jp
JOSE (Javascript Object Signing and Encryption) æ„›ã§æº€ã¡æº¢ã‚Œã‚‹ ID åŽ¨ç•Œéšˆã«ãŠã„ã¦ã€ç‡¦ã€…ã¨è¼ã JWS (JSON Web Signature)ã€ç¾Žã—ã„ã§ã™ã‚ˆãï¼ JWT ãŒã‚¸ãƒ£ãƒ‹ãƒ¼ã‚ºãªã‚‰ã€JWE ã¯ EXILEã€JWS ã¯çŸ³åŽŸã•ã¨ã¿ã¨è¨€ã£ãŸã¨ã“ã‚ã§ã—ã‚‡ã†ã‹ï¼Ÿ ã¨ã€å†—è«‡ã¯ã•ã¦ãŠãã€JWT ã‚’ãŠä½¿ã„ã®çš†ã•ã‚“ã¯ã€å½“ç„¶ç½²åä»˜ã‘ã¦ã¾ã™ã‚ˆãï¼Ÿç½²åæ¤œè¨¼ã—ã¾ã™ã‚ˆãï¼Ÿ ãã‚“ãªã‚ãªãŸã«ä¸€è¨€ã„ã„ãŸã„ï¼ ã¾ã HMAC ã§æ¶ˆè€—ã—ã¦ã‚‹ã®ï¼Ÿ ã„ã‚„ã€æ±ºã—ã¦ HMAC ã‚ªãƒ¯ã‚³ãƒ³ã¨ã‹ã¯è¨€ã£ã¦ãªã„ã§ã™ã‚ˆï¼Ÿã‚¹ãƒžãƒ›ã‚¢ãƒ—ãƒªã§ã®ç½²åæ¤œè¨¼ã®ãŸã‚ã«ã€ã‚¢ãƒ—ãƒªã«å…±é€šéµåŸ‹ã‚è¾¼ã‚€ã®ã¯ãƒŠãƒ³ã‚»ãƒ³ã‚¹ã£ã¦ã ã‘ã§ã€‚ ã¨ã„ã†ã“ã¨ã§ã€ä»Šæ—¥ã¯ JWS ã‚’ãŠä½¿ã„ã®ã¿ãªã•ã‚“ã«ã€å®Ÿè£…æ™‚ã«ä½œã‚ŠãŒã¡ãªè„†å¼±æ€§ãƒ‘ã‚¿ãƒ¼ãƒ³ã‚’2ã¤ã”ç´¹ä»‹ã—ã¾ã™ã€‚ ä»Šæ—¥ç´¹ä»‹ã™ã‚‹è„†å¼±æ€§ã®2ã¤ã®ã†ã¡ã€1ã¤ã‚ã¯ HMAC, RSA, ECDSA ã®ã©ã‚Œã‚’
TokyoIncidents 2017/02/20
OAuth

security
ãƒªãƒ³ã‚¯
Big Sky :: ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã‚¢ãƒ—ãƒªã§ OAuth2 èªè¨¼ã‚’ä½¿ã†éš›ã«ä½¿ãˆã‚‹ãƒ†ã‚¯ãƒ‹ãƒƒã‚¯
OAuth2 ã§ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚¿ã‚¤ãƒ—ãŒã‚³ãƒ¼ãƒ‰ã‚‚ã—ãã¯ãƒˆãƒ¼ã‚¯ãƒ³ã®å ´åˆã€ãƒ–ãƒ©ã‚¦ã‚¶ã§èªè¨¼ã‚’è¡Œã£ã¦ã‚³ãƒ¼ãƒ‰ã‚„ãƒˆãƒ¼ã‚¯ãƒ³ã‚’è‡ªå‰ã‚µãƒ¼ãƒã§å—ã‘å–ã‚‹äº‹ã«ãªã‚‹ã€‚ãƒ¢ãƒã‚¤ãƒ«ã‚¢ãƒ—ãƒªã ã¨çµ„ã¿è¾¼ã¿ãƒ–ãƒ©ã‚¦ã‚¶ãŒå‰æã«ãªã£ã¦ãŠã‚Šãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã®æœ€çµ‚ URL ã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹ã‚³ãƒ¼ãƒ‰ã‚„ãƒˆãƒ¼ã‚¯ãƒ³ã‚’å¾—ã‚‹ã€‚ãŸã ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã‚¢ãƒ—ãƒªã®å ´åˆã€èªè¨¼ã®ç‚ºã«èµ·å‹•ã—ãŸãƒ–ãƒ©ã‚¦ã‚¶ã®æœ€çµ‚ URL ã‚’å¾—ã‚‹æ–¹æ³•ã¯ãªã„ã€‚ã¾ãŸ1ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ç‚ºã«ãƒ‰ãƒ¡ã‚¤ãƒ³ä»˜ãã®ã‚³ãƒ¼ãƒ«ãƒãƒƒã‚¯ã‚µãƒ¼ãƒã‚’ç”¨æ„ã™ã‚‹ã®ã‚‚é¢å€’ã ã—ã€ä½œã£ãŸã‚µãƒ¼ãƒã‚’ãƒ¦ãƒ¼ã‚¶ã«ä¿¡ç”¨ã—ã¦è²°ã†å¿…è¦ãŒã‚ã‚‹ã€‚ã‚ã¨ãã‚‚ãã‚‚å¤–éƒ¨ã®ã‚µãƒ¼ãƒã§å—ã‘å–ã£ãŸãƒˆãƒ¼ã‚¯ãƒ³ã‚’ã©ã†ã‚„ã£ã¦ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã‚¢ãƒ—ãƒªã«æ¸¡ã™ã‹ã¨ã„ã†å•é¡ŒãŒã‚ã‚‹ã€‚ ãã“ã§ä½¿ã†ã®ãŒãƒãƒ¼ã‚«ãƒ«ã‚µãƒ¼ãƒã‚’ç«‹ã¦ã‚‹æ–¹æ³•ã€‚èªè¨¼å¾Œã®ã‚³ãƒ¼ãƒ«ãƒãƒƒã‚¯å…ˆã‚’ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã‚¢ãƒ—ãƒªã‹ã‚‰èµ·å‹•ã—ãŸãƒãƒ¼ã‚«ãƒ«ã‚µãƒ¼ãƒã«ã—ã€ãã“ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•ã›ã¦ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã‚’è²°ã„ä¿å˜ã™ã‚‹ã€‚ ä»Šæ—¥ã¯ã“ã‚ŒãŒä¼ã‚ã‚Šæ˜“ã„ç”¨ã« Mic
TokyoIncidents 2016/12/31
golang

OAuth
ãƒªãƒ³ã‚¯
HTTPS ã§ã‚‚ Full URL ãŒæ¼ã‚Œã‚‹ï¼ŸOAuth ã® code ã‚‚æ¼ã‚Œã‚‹ã‚“ã˜ã‚ƒãï¼Ÿï¼Ÿ - OAuth.jp
ãªã‚“ã§ã™ã‹ã“ã‚Œã¯ï¼ New attack bypasses HTTPS protection on Macs, Windows, and Linux DHCP ã«ã¤ãªãã¨ PAC ãƒ•ã‚¡ã‚¤ãƒ«ãŒãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã•ã‚Œã¦ HTTPS ã§ã‚ã‚ã†ã¨ã‚¢ã‚¯ã‚»ã‚¹å…ˆã® Full URL ã¯æ¼ã‚Œã‚‹ã§ã™ã£ã¦ï¼Ÿ Web Proxy Autodiscovery ã§ã™ã£ã¦ï¼Ÿ ãƒãƒ§ãƒƒãƒˆãƒ‹ãƒ›ãƒ³ã‚´ãƒ‡ã‚ªãƒã‚¬ã‚¤ã‚·ãƒžã‚¹ ã£ã¦ã“ã¨ã§ã€ã¾ãã“ã‚ŒãŒå®Ÿéš›ã©ã‚Œãã‚‰ã„ç°¡å˜ã«å®Ÿç¾ã§ãã‚‹æ”»æ’ƒãƒ‘ã‚¿ãƒ¼ãƒ³ãªã®ã‹ã¯ä»–ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ¥ç•Œã®æ–¹ã€…ã«å¾Œã§èžãã¨ã—ã¦ã€ã“ã®è¨˜äº‹ã§ã‚‚è§¦ã‚Œã‚‰ã‚Œã¦ã‚‹ OpenID Connect ã¨ã‹ OAuth2 ã¸ã®å½±éŸ¿ã«ã¤ã„ã¦ã€ã¡ã‚‡ã£ã¨ã¾ã¨ã‚ã¦ãŠãã¾ã—ã‚‡ã†ã‹ã€‚ Authorization Request & Response ãŒæ¼ã‚Œã‚‹ response_mode=form_post ãªã‚“ã¦ã„ã†ã®ã‚‚ä¸€éƒ¨ã‚ã‚Šã¾ã™ãŒã€åŸºæœ¬ OAuth2 /
TokyoIncidents 2016/07/28
OAuth

security
ãƒªãƒ³ã‚¯
ãƒˆãƒ¼ã‚¯ãƒ³ã‚’åˆ©ç”¨ã—ãŸèªè¨¼ãƒ»èªå¯ API ã‚’å®Ÿè£…ã™ã‚‹ã¨ã Authorization: Bearer ãƒ˜ãƒƒãƒ€ã‚’ä½¿ã£ã¦ã„ã„ã®ã‹èª¿ã¹ãŸ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article? TL;DR HTTP ã§ãƒˆãƒ¼ã‚¯ãƒ³ã‚’åˆ©ç”¨ã—ãŸèªè¨¼ãƒ»èªå¯ã‚’ã™ã‚‹æ‰‹æ³•ã¨ã—ã¦ RFC 6750 ãŒã‚ã‚‹ OAuth ã«é™ã‚‰ãšã€ãƒˆãƒ¼ã‚¯ãƒ³ã‚’åˆ©ç”¨ã—ã¦èªè¨¼ãƒ»èªå¯ã™ã‚‹æ©Ÿæ§‹ã®ä¸€éƒ¨ã¨ã—ã¦ Authorization: Bearer ãƒ˜ãƒƒãƒ€ã‚’ä½¿ã†ã“ã¨ãŒã§ãã‚‹ ä½¿ã„æ–¹ã«ã¤ã„ã¦è©³ã—ãã¯ã“ã®è¨˜äº‹ã®ä¸‹ã®ã»ã†ã«æ›¸ã„ãŸ è¦æ±‚ ãƒˆãƒ¼ã‚¯ãƒ³ã‚’åˆ©ç”¨ã—ãŸèªè¨¼ãƒ»èªå¯æ©Ÿæ§‹ã‚’æŒã¤ API ã‚’ä½œã‚ŠãŸã„ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒãƒˆãƒ¼ã‚¯ãƒ³ã‚’ HTTP ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å«ã‚ã¦é€ä¿¡ã—ã€ã‚µãƒ¼ãƒã¯ãƒˆãƒ¼ã‚¯ãƒ³ã‚’æ¤œè¨¼ã—ã¦ãƒªã‚½ãƒ¼ã‚¹ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’è¨±å¯ã—ãŸã„ Authorization: Bearer ãƒˆãƒ¼ã‚¯ãƒ³ ãƒ˜ãƒƒãƒ€ã§ãƒˆãƒ¼
TokyoIncidents 2016/07/27
OAuth

API

authentication
ãƒªãƒ³ã‚¯
OAuth / Connect ã«ãŠã‘ã‚‹ CSRF Attack ã®æ–°ãƒ‘ã‚¿ãƒ¼ãƒ³ - OAuth.jp
æ˜¨æ—¥ã“ã‚“ãªã®ãŒ OAuth ML ã«æµã‚Œã¦ã¾ã—ãŸã€‚ [OAUTH-WG] Another CSRF attack å‰ææ¡ä»¶ RP (Relying Party a.k.a. OAuth Client) ãŒ2ã¤ä»¥ä¸Šã® IdP (Identity Provider a.k.a. OAuth Server) ã¨é€£æºã—ã¦ã„ã‚‹çŠ¶æ³ã§ã€ç‰‡æ–¹ã® IdP ã«æ‚ªæ„ãŒã‚ã‚‹ã€‚ æ‚ªæ„ã‚ã‚‹ IdP = AIdP (A ã¯ Attacker ã®ç•¥) ãã®ä»–ã® IdP = HIdP (H ã¯ Honest ã®ç•¥) æ”»æ’ƒãƒ•ãƒãƒ¼ Victim ãŒ AIdP ã‚’ä½¿ã£ã¦ RP ã¸ã®ãƒã‚°ã‚¤ãƒ³ã‚’è©¦ã¿ã‚‹ã€‚ RP ã¯ Authorization Request ã‚’ AIdP ã«é€ã‚‹ã€‚ AuthZ Req ã«ã¯ Browser Session ã¨ç´ä»˜ã„ãŸ state ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã‚’ã¤ã‘ã¦ã„ã‚‹ã€‚ AIdP ã¯ Victim ã‚’èªè¨¼ã—ã€å¿…è¦ã«
TokyoIncidents 2016/07/15
OAuth

security
ãƒªãƒ³ã‚¯
NIST 800-63C ã‚’ç¿»è¨³ã—ã¾ã—ãŸ - OAuth.jp
å…ˆæ—¥ã“ã®ãƒ–ãƒã‚°ã§ã‚‚ç´¹ä»‹ã—ãŸ OAuth Revocation, JWK JWK Thumbprint ä»•æ§˜ã®ç¿»è¨³ç‰ˆ ã«å¼•ãç¶šãã€OpenID Foundation Japan ç¿»è¨³ãƒ»æ•™è‚² WG ãƒªãƒ¼ãƒ€ãƒ¼ã¨ã—ã¦ã® Nov ã§ã™ã€‚ å…ˆæ—¥ ç¿»è¨³ WG ã® Facebook Page ã§ã‚‚å‘ŠçŸ¥ã—ãŸã‚ˆã†ã«ã€ç¾åœ¨ NIST SP 800-63-3 â€“ Digital Authentication Guideline ã®ç¿»è¨³ã‚’é–‹å§‹ã—ã¦ã„ã¾ã™ã€‚ ä»Šæ—¥ã¯ãã®ä¸ã‹ã‚‰ã€ã™ã§ã«ç¿»è¨³ãŒå®Œäº†ã—ã¦ã„ã‚‹ NIST SP 800-63C â€“ Federation and Assertions ã®ã”ç´¹ä»‹ã§ã™ã€‚ Level of Assurance ãƒ—ãƒãƒ•ã‚§ãƒƒã‚·ãƒ§ãƒŠãƒ«ãªã¿ãªã•ã¾ã®ã“ã¨ã§ã™ã€ã™ã§ã« Level of Assurance ã¨ã‹ LoA ã¨ã‹ã„ã†å˜èªžã‚’è€³ã«ã—ãŸã“ã¨ã‚‚ãŠã‚ã‚Šã§ã—ã‚‡ã†ã€‚ NIST SP 800-63 ã¯ã€
TokyoIncidents 2016/07/15
OAuth
ãƒªãƒ³ã‚¯
OAuth2 ã®ãƒ•ãƒãƒ¼ã‚’ Alloy Analyzer ã§ãƒ¢ãƒ‡ãƒªãƒ³ã‚°ã™ã‚‹ - è©©ã¨å‰µä½œãƒ»æ€ç´¢ã®ã²ã‚ã°
è¶£å‘³ã§ã‚¦ã‚§ãƒ–ã®èªè¨¼ API ã‚’åœ°åŠ›ã§è¨è¨ˆã—ã‚ˆã†ã¨ã—ã¦ã„ãŸã¨ãã«ã€èªè¨¼ãƒ•ãƒãƒ¼ã®ä»•æ§˜ã‚’é ‘å¼µã£ã¦ã“ã—ã‚‰ãˆãŸã¨ã—ã¦ã€ãã®æ£ã—ã•ã‚’ã©ã†ã‚„ã£ã¦ä¿è¨¼ã™ã‚‹ã‚“ã ã‚ã†ï¼Ÿ ã¨ç–‘å•ã«æ€ã„ã€èª¿ã¹ã¦ã„ãŸã¨ã“ã‚ã€ã€Œå½¢å¼æ‰‹æ³•ã€ã¨ã„ã†ã®ã«è¡Œãå½“ãŸã£ãŸã€‚ å½¢å¼æ‰‹æ³•ã¨ã„ã†ã®ã¯ã‚·ã‚¹ãƒ†ãƒ ã®æ£ã—ã•ã‚’ä¸Šæµå·¥ç¨‹ã‹ã‚‰æ¤œè¨¼ã™ã‚‹ãŸã‚ã®æ–¹æ³•ã§ã€æ•°ç†è«–ç†ã‚„ãƒã‚¸ãƒƒã‚¯ã«åŸºã¥ã„ã¦ã„ã‚‹ã€‚ãã®ä¸ã§ã‚‚åŽ³å¯†ãªä»•æ§˜å®šç¾©ã‚’æ±‚ã‚ã‚‹æ–¹å‘ã¨è‡ªå‹•æ¤œè¨¼ã‚’æ±‚ã‚ã‚‹æ–¹å‘ã¨ã‚ã‚‹ã‚‰ã—ã„ãŒã€Alloy ã¯ãã®å¾Œè€…ã«ä½ç½®ã¥ã‘ã‚‰ã‚Œã€è»½é‡å½¢å¼æ‰‹æ³•ã¨å‘¼ã°ã‚Œã‚‹ã‚‚ã®ã®ã²ã¨ã¤ã ã¨ã„ã†ã“ã¨ã‚‰ã—ã„ã€‚Alloy ã¯ãƒ¢ãƒ‡ãƒªãƒ³ã‚°ã®ãŸã‚ã®è¨€èªžãŠã‚ˆã³å®Ÿè¡Œç’°å¢ƒã§ã€ä»¥ä¸‹ã®ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã‹ã‚‰å…¥æ‰‹ã§ãã‚‹ã€‚ http://alloy.mit.edu/alloy/ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã«ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«ã‚„ãƒžãƒ‹ãƒ¥ã‚¢ãƒ«ã‚‚ã‚ã‚‹ãŒã€ä½œè€…ã«ã‚ˆã‚‹æ•™ç§‘æ›¸ã®é‚¦è¨³ãŒå‡ºã¦ã„ã¦ã€ã“ã‚Œã§å‹‰å¼·ã—ã¦ã¿ãŸã€‚ æŠ½è±¡ã«ã‚ˆã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢è¨è¨ˆâˆ’Alloyã§ã¯ã˜ã‚ã‚‹å½¢å¼æ‰‹
TokyoIncidents 2016/07/01
OAuth

API
ãƒªãƒ³ã‚¯
OAuth 2.0 + OpenID Connect ã®ãƒ•ãƒ«ã‚¹ã‚¯ãƒ©ãƒƒãƒå®Ÿè£…è€…ãŒçŸ¥è¦‹ã‚’èªžã‚‹
ã¯ã˜ã‚ã« ã“ã®æ–‡æ›¸ã§ã¯ã€OAuth 2.0 + OpenID Connect ã‚µãƒ¼ãƒãƒ¼ã‚’ã‚¼ãƒã‹ã‚‰ä¸€äººã§å®Ÿè£…ã—ãŸé–‹ç™ºè€…ï¼ˆç§ï¼‰ãŒã€å¾—ã‚‰ã‚ŒãŸçŸ¥è¦‹ã«ã¤ã„ã¦æ›¸ã„ã¦ã„ãã¾ã™ã€‚åŸºæœ¬çš„ã«ã¯ã€Œå®Ÿè£…æ™‚ã«è€ƒæ…®ã™ã¹ãç‚¹ã€ã‚’å»¶ã€…ã¨è¿°ã¹ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ ãã®ãŸã‚ã€ã“ã®æ–‡æ›¸ã¯ã€ã€Œç´ æ—©ã OAuth 2.0 + OpenID Connect ã‚µãƒ¼ãƒãƒ¼ã‚’ç«‹ã¦ã‚‹æ–¹æ³•ã€ã‚’æŽ¢ã—ã¦ã„ã‚‹æ–¹ãŒèªã‚€é¡žã®ã‚‚ã®ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ãã®ã‚ˆã†ãªæƒ…å ±ã‚’ãŠæ±‚ã‚ã®æ–¹ã¯ã€ã€ŒAuthlete ã‚’ä½¿ã£ã¦è¶…é«˜é€Ÿã§ OAuth 2.0 & Web API ã‚µãƒ¼ãƒãƒ¼ã‚’ç«‹ã¦ã‚‹ã€ã‚’å‚ç…§ã—ã¦ãã ã•ã„ã€‚ãã¡ã‚‰ã«ã¯ã€ã€Œä½•ã‚‚ãªã„çŠ¶æ…‹ã‹ã‚‰èªå¯ã‚µãƒ¼ãƒãƒ¼ã¨ãƒªã‚½ãƒ¼ã‚¹ã‚µãƒ¼ãƒãƒ¼ã‚’ç«‹ã¦ã€ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®ç™ºè¡Œã‚’å—ã‘ã¦ Web API ã‚’ãŸãŸã„ã¦çµæžœã‚’å¾—ã‚‹ã€ã¨ã„ã†ä½œæ¥ã‚’ã€æ‰€è¦æ™‚é–“ 5 ï½ž 10 åˆ†ã§ãŠã“ãªã†æ–¹æ³•ãŒç´¹ä»‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ æ–‡æ›¸ã®ãƒã‚¤ã‚¢ã‚¹ã«ã¤ã„ã¦ ç§ã¯ã€OAuth 2.0 + Ope
TokyoIncidents 2016/02/24
OAuth
ãƒªãƒ³ã‚¯
Authlete ã‚’ä½¿ã£ã¦è¶…é«˜é€Ÿã§ OAuth 2.0 ã‚µãƒ¼ãƒãƒ¼ & API ã‚µãƒ¼ãƒãƒ¼ã‚’ç«‹ã¦ã‚‹ - Qiita
Authlete ã‚’åˆ©ç”¨ã—ã¦, è¶…é«˜é€Ÿã§ OAuth 2.0 ã‚µãƒ¼ãƒãƒ¼ & API ã‚µãƒ¼ãƒãƒ¼ã‚’ç«‹ã¦ã‚‹æ–¹æ³•ã‚’è§£èª¬ã™ã‚‹. å¯¾è±¡èªè€… OAuth 2.0 ã®åŸºæœ¬çš„ãªæ¦‚å¿µ (ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³, èªå¯ã‚³ãƒ¼ãƒ‰ãƒ•ãƒãƒ¼, èªå¯ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆ, ãƒˆãƒ¼ã‚¯ãƒ³ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆç‰) ã‚’å¤§ä½“æŠŠæ¡ã—ã¦ã„ã‚‹äºº (ã‚‚ã—ã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚ºã—ãŸã„ãªã‚‰) Java å±‹ã•ã‚“ æ‰€è¦æ™‚é–“ 5~10 åˆ† ã‚·ã‚¹ãƒ†ãƒ æ§‹æˆ æ§‹æˆã¯ä¸‹å›³ã®é€šã‚Š. ã¾ãŸ, ä»Šå›žã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ãƒ€ãƒŸãƒ¼æƒ…å ±ã‚’ç”¨ã„ã‚‹ã“ã¨ã«æ³¨æ„. ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ± â†’ èªå¯ã‚µãƒ¼ãƒãƒ¼å†…ã«å®šç¾©ã•ã‚ŒãŸãƒ€ãƒŸãƒ¼æƒ…å ± ãƒªã‚½ãƒ¼ã‚¹ â†’ ãƒªã‚½ãƒ¼ã‚¹ã‚µãƒ¼ãƒãƒ¼å†…ã«å®šç¾©ã•ã‚ŒãŸãƒ€ãƒŸãƒ¼æƒ…å ± æ‰‹é † æ‰‹é †ã¯ä»¥ä¸‹ã®é€šã‚Š. Authlete ã«ã‚µã‚¤ãƒ³ã‚¢ãƒƒãƒ— èªå¯ã‚µãƒ¼ãƒãƒ¼ã®ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ— ãƒªã‚½ãƒ¼ã‚¹ã‚µãƒ¼ãƒãƒ¼ã®ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ— å‹•ä½œç¢ºèª 1. Authlete ã«ã‚µã‚¤ãƒ³ã‚¢ãƒƒãƒ— 1.1. ã‚µã‚¤ãƒ³ã‚¢ãƒƒãƒ— ã“ã¡ã‚‰ã‹ã‚‰, Authlete ã«ã‚µã‚¤ãƒ³ã‚¢ãƒƒ
TokyoIncidents 2016/02/24
OAuth

API
ãƒªãƒ³ã‚¯
GitHub - dexidp/dex: OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
TokyoIncidents 2015/12/06
OAuth
ãƒªãƒ³ã‚¯
Goè¨€èªžã®ç·´ç¿’ç”¨ã«Twitterã®OAuthèªè¨¼ã‚’ãƒ•ãƒ«ã‚¹ã‚¯ãƒ©ãƒƒãƒã—ã¦ã¿ãŸ - Qiita
/** * GO is GOD */ package goisgod import ( "fmt" "time" "sort" "strings" "crypto/hmac" "crypto/rand" "crypto/sha1" "encoding/base64" "encoding/json" "net/http" "net/url" "io/ioutil" ) /** * ã‚¯ãƒ¬ãƒ‡ãƒ³ã‚·ãƒ£ãƒ«ã‚’ä¿æŒã™ã‚‹æ§‹é€ ä½“ */ type OAuth struct { ConsumerKey string ConsumerSecret string OAuthToken string OAuthTokenSecret string } /** * ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã®ãƒ¡ã‚¿æƒ…å ± */ type ResponseStatus struct { IsError bool StatusCode int ErrorCod
TokyoIncidents 2015/09/29
golang

OAuth
ãƒªãƒ³ã‚¯
ãƒ¢ãƒã‚¤ãƒ«ã‚¢ãƒ—ãƒªã®ãƒ¦ãƒ¼ã‚¶èªè¨¼æ–¹æ³•ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - Qiita
è¿½è¨˜ (2018-10-08) 4å¹´ä»¥ä¸Šå‰ã«æ›¸ã„ãŸè¨˜äº‹ã§ã™ãŒã€Access Token ã¨ã—ã¦ JWT ã‚’åˆ©ç”¨ã™ã‚‹ã“ã¨ã¯éžæŽ¨å¥¨ãªã‚ˆã†ãªã®ã§ã€ãŠè©«ã³ã—ã¦ä¿®æ£è‡´ã—ã¾ã™ã€‚ å‚è€ƒ: ã©ã†ã—ã¦ãƒªã‚¹ã‚¯ã‚¢ã‚»ã‚¹ãƒ¡ãƒ³ãƒˆã›ãšã« JWT ã‚’ã‚»ãƒƒã‚·ãƒ§ãƒ³ã«ä½¿ã£ã¡ã‚ƒã†ã‚ã‘ï¼Ÿ æ¦‚è¦ ã¿ã‚“ãªã‚„ã£ã¦ã‚‹ã¯ãšãªã‚“ã ã‘ã©ã€ã‚ã¾ã‚Šã¾ã¨ã¾ã£ãŸæƒ…å ±ãŒãªã‹ã£ãŸã®ã§æ›¸ã„ã¦ã¿ã¾ã™ã€‚èªè¨¼å‘¨ã‚Šã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’æ°—ã«ã—ã¦ã€ã¿ã‚“ãªæ›¸ããŸãŒã‚‰ãªã„ã®ã‹ãªï¼Ÿãã‚Œã¨ã‚‚ç§ã®èª¿ã¹æ–¹ãŒæ‚ªã‹ã£ãŸã ã‘ï¼Ÿãƒžã‚µã‚«ãƒªãŠå¾…ã¡ã—ã¦ã¾ã™ã€‚ èªè¨¼ã®åŸºæœ¬æ–¹é‡ +--------+ +--------+ | | | | | |----(1) Credential ------------>| | | | | | | |<---(2) Access Token -----------| | | | | | | Client | | Server | | | | | | |----(3)
TokyoIncidents 2015/06/18
API

OAuth
ãƒªãƒ³ã‚¯
gateã‚’ä½¿ã£ã¦æ‰‹è»½ã«èªè¨¼ã‚’å°Žå…¥ã™ã‚‹ - pixiv inside [archive]
ISUCON4 ã§æº–å„ªå‹ã—ãŸ @catatsuy ã§ã™ã€‚ è³žé‡‘ã®ä½¿ã„é“ã¯ã¾ã è€ƒãˆã¦ã„ã¾ã›ã‚“ã€‚ ã¨ã“ã‚ã§ãƒ”ã‚¯ã‚·ãƒ–æ ªå¼ä¼šç¤¾ã§ã¯å†¬ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ³ã‚’ã‚„ã‚Šã¾ã™ï¼ ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢å‘ã‘ã€€pixivé–‹ç™ºã®bugãƒªã‚¹ãƒˆã‹ã‚‰ã®è„±å‡ºï¼ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢è·ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ³ - ãƒ”ã‚¯ã‚·ãƒ–æ ªå¼ä¼šç¤¾ æŽ¡ç”¨ã‚µã‚¤ãƒˆ ISUCON4 ã®äºˆé¸å•é¡Œã‚’è§£ãã ã‘ã§ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ³ã«å‚åŠ ã§ãã‚‹ãƒãƒ£ãƒ³ã‚¹ãªã®ã§ãœã²æŒ‘æˆ¦ã—ã¦ã¿ã¦ãã ã•ã„ï¼ï¼1 pixiv/intern2014w ã“ã®è¨˜äº‹ã¯å½“åˆã¯ã‚¢ãƒ‰ãƒ™ãƒ³ãƒˆã‚«ãƒ¬ãƒ³ãƒ€ãƒ¼ã®è¨˜äº‹ã«ã™ã‚‹äºˆå®šã§ã—ãŸãŒï¼Œä»ŠãŒæ—¬ã ã¨åœ§åŠ›ã‚’ã‹ã‘ã‚‰ã‚ŒãŸã®ã§ä»Šå…¬é–‹ã—ã¾ã™ã€‚ ãªãŠã“ã®è¨˜äº‹ã¯ ãƒ”ã‚¯ã‚·ãƒ–æ ªå¼ä¼šç¤¾ Advent Calendar 2014 - Qiita ã® -17 æ—¥ç›®ã®è¨˜äº‹ã§ã™ã€‚ ä»Šã¾ã§ã®ç¤¾å†…ãƒ„ãƒ¼ãƒ«ã®èªè¨¼ã¯å„ã‚µãƒ¼ãƒãƒ¼ã«è¨å®šã•ã‚Œã¦ã„ãŸãŸã‚ã«é€€è·è€…ãªã©ã®å¯¾å¿œãŒéžå¸¸ã«å¤§å¤‰ã§ã—ãŸã€‚ãã“ã§æœ€è¿‘ã®ãƒ”ã‚¯ã‚·ãƒ–æ ªå¼ä¼šç¤¾ã§ã¯ typester/gate ã‚’å°Žå…¥ã™ã‚‹
TokyoIncidents 2015/04/24
golang

OAuth

proxy

Google

pixiv
ãƒªãƒ³ã‚¯
GitHub - movableink/doorman: HTTP Proxy + OAuth
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
TokyoIncidents 2015/04/24
Google

OAuth

proxy
ãƒªãƒ³ã‚¯
GitHub - bitly/oauth2_proxy: A reverse proxy that provides authentication with Google, Github or other provider
A reverse proxy and static file server that provides authentication using Providers (Google, GitHub, and others) to validate accounts by em ail, domain or group. NOTICE: This project was officially archived by Bitly at the end of September 2018. Bitly will no longer be accepting PRs or helping on issues. There has been a discussion to find a new home for the project which has led to the following n
TokyoIncidents 2015/04/24
golang

proxy

OAuth

Google
ãƒªãƒ³ã‚¯
èªè¨¼æ©Ÿèƒ½ã®ãªã„ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§OAuth2èªè¨¼ã‚’æä¾›ã™ã‚‹ - å¼¥ç”Ÿé–‹ç™ºè€…ãƒ–ãƒã‚°
ã“ã‚“ã«ã¡ã¯ã€@Dominion525 ã§ã™ã€‚ å¥½ããªãƒ¢ãƒ“ãƒ«ã‚¹ãƒ¼ãƒ„ã¯MS-06R-1é«˜æ©Ÿå‹•åž‹ã‚¶ã‚¯IIã§ã™ã€‚ ã¡ã‚‡ã£ã¨ã—ãŸãƒ€ãƒƒã‚·ãƒ¥ãƒœãƒ¼ãƒ‰ã¨ã‹æ°—ã®åˆ©ã„ãŸOSSã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãªã©ã‚’å‹•ã‹ã™ã¨ãã«ã€æ°—ã«ãªã‚‹ã®ã¯èªè¨¼å‘¨ã‚Šã§ã™ã€‚ éƒ½åº¦ã€é–¢ä¿‚è€…åˆ†ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ç®¡ç†ã—ãŸã‚Šã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å€‹åˆ¥ã«å¤‰æ›´ã—ãŸã‚Šã™ã‚‹ã®ã¯å¤§å¤‰ã«é¢å€’ã§ã™ã€‚ ã“ã†ã„ã†ã®ã¯ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³æœ¬ä½“ã§ã¯ãªããƒ•ãƒãƒ³ãƒˆã®ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã§åˆ¶é™ã™ã‚‹ã¨ä¾¿åˆ©ã§ã™ã€‚ ãŸã ã—ã€åŸºæœ¬èªè¨¼ãªã©ã§ã¯å¿ƒã‚‚ã¨ãªã„ã®ã§ã‚‚ã†å°‘ã—å·¥å¤«ã‚’ã—ã¦ã¿ã¾ã™ã€‚ (ã‚‚ã¡ã‚ã‚“ã€å¯¾è±¡ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¯ localhost ã‹ã‚‰ã—ã‹ã‚¢ã‚¯ã‚»ã‚¹å‡ºæ¥ãªã„ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ã‚‚ã®ã¨ã—ã¾ã™ã€‚) mod_auth_openidc ãã“ã§ã€OAuth2èªè¨¼ã‚’æä¾›ã—ã¦ãã‚Œã‚‹ç´ æ•µApacheãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«*1ãŒ mod_auth_openidc ã§ã™ã€‚*2 å¼Šç¤¾ã§ã¯ Google Apps ã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ã®ã§ã€ãƒ¡
TokyoIncidents 2015/04/07
OAuth
ãƒªãƒ³ã‚¯
Passport - Node.jsã®ãŸã‚ã®ã€ã‚·ãƒ³ãƒ—ãƒ«ã§ä½¿ã„ã©ã“ã‚ã‚’é¸ã°ãªã„èªè¨¼ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«
Passportã¨ã¯ï¼Ÿ Passportã¨ã¯Node.jsã®ãŸã‚ã®èªè¨¼æ©Ÿèƒ½ã‚’æä¾›ã™ã‚‹ãƒŸãƒ‰ãƒ«ã‚¦ã‚§ã‚¢ã§ã™ã€‚ Expressãƒ™ãƒ¼ã‚¹ã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ç°¡å˜ã‹ã¤æŸ”è»Ÿã«åˆ©ç”¨ã§ãã€ä½¿ã„ã©ã“ã‚ã‚’é¸ã³ã¾ã›ã‚“ã€‚ Facebookã‚„twitterã€ã¾ãŸã¯é€šå¸¸ã®ãƒ¦ãƒ¼ã‚¶ID/ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰èªè¨¼ãªã©ã€å¤šå½©ãªã‚µãƒ¼ãƒ“ã‚¹ã®èªè¨¼ã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚ èª¬æ˜Žã‚’èªã‚€ Â» æ©Ÿèƒ½ 140ã‚’è¶Šãˆã‚‹èªè¨¼ã‚¹ãƒˆãƒ©ãƒ†ã‚¸ãƒ¼ OpenIDã‚„OAuthã‚’ä½¿ã£ãŸã‚·ãƒ³ã‚°ãƒ«ã‚µã‚¤ãƒ³ã‚ªãƒ³ å˜ç´”åŒ–ã•ã‚ŒãŸèªè¨¼æˆåŠŸãƒ»å¤±æ•—æ™‚å‡¦ç† ç¶™ç¶šã™ã‚‹ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®ã‚µãƒãƒ¼ãƒˆ å‹•çš„ãªã‚¹ã‚³ãƒ¼ãƒ—ãŠã‚ˆã³æ¨©é™ç®¡ç† èªè¨¼ã‚¹ãƒˆãƒ©ãƒ†ã‚¸ãƒ¼ã‚’é¸ã¶ã ã‘ã§å‹•ä½œå¯èƒ½ èªè¨¼ã‚¹ãƒˆãƒ©ãƒ†ã‚¸ãƒ¼ã®æ‹¡å¼µãƒ»ç‹¬è‡ªå®Ÿè£…ãŒå¯èƒ½ ç°¡å˜ã«å§‹ã‚ã‚‰ã‚Œã‚‹ è»½é‡ãªå®Ÿè£…ã‚³ãƒ¼ãƒ‰ $ npm install passport
TokyoIncidents 2014/08/27
node.js

twitter

Facebook

OAuth
ãƒªãƒ³ã‚¯
1 2 3 4 æ¬¡ã®ãƒšãƒ¼ã‚¸