[B! oAuth] mapk0yã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

mapk0y id:mapk0y

oAuthã«é–¢ã™ã‚‹mapk0yã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (16)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

GitHub Apps, GITHUB_TOKEN, OAuth Apps, PATã®ä½¿ã„åˆ†ã‘ãƒ•ãƒãƒ¼ãƒãƒ£ãƒ¼ãƒˆ - Carpe Diem
èƒŒæ™¯ æ´å²çš„çµŒç·¯ã‚‚ã‚ã‚Šã€GitHubã§ã¯æ§˜ã€…ãªç¨®é¡žã®ãƒˆãƒ¼ã‚¯ãƒ³ãŒã‚ã‚Šã¾ã™ã€‚ GitHub Apps ã«ã‚ˆã‚‹ãƒˆãƒ¼ã‚¯ãƒ³ Github Actions ã§ä½¿ãˆã‚‹ GITHUB_TOKEN OAuth Apps ã«ã‚ˆã‚‹ãƒˆãƒ¼ã‚¯ãƒ³ PAT (Personal Access Token) ãã‚Œãžã‚Œã®ç‰¹å¾´ã€ä½¿ã„åˆ†ã‘ãŒåˆ†ã‹ã‚Šã«ãã‹ã£ãŸã®ã§ã€ãƒ•ãƒãƒ¼ãƒãƒ£ãƒ¼ãƒˆã§ã¾ã¨ã‚ã¾ã—ãŸã€‚ ãƒ•ãƒãƒ¼ãƒãƒ£ãƒ¼ãƒˆå›³ ãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ã«å¿œã˜ãŸãƒ•ãƒãƒ¼ãƒãƒ£ãƒ¼ãƒˆã¯ã“ã¡ã‚‰ã§ã™ã€‚ å…·ä½“ä¾‹ ä¸Šè¨˜ãƒ•ãƒãƒ¼ã«åŸºã¥ãã¨ã€ä¾‹ãˆã°æ¬¡ã®ã‚ˆã†ãªå½¢ã§ç”¨æ„ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ CI/CD (è‡ªãƒªãƒ) â†’ GITHUB_TOKEN CI/CD (ã‚¯ãƒã‚¹ãƒªãƒ) â†’ GitHub Apps Bot / è‡ªå‹•åŒ– â†’ GitHub Apps ãƒ¦ãƒ¼ã‚¶ãƒ¼ä»£ç†æ“ä½œ â†’ GitHub Apps (user-to-server token) å€‹äººã‚¹ã‚¯ãƒªãƒ—ãƒˆ â†’ Fine-grained PAT
mapk0y 2026/05/03
GitHub

oAuth
ãƒªãƒ³ã‚¯
ã€å®Ÿé¨“ã€‘ Google OAuth2 ä»˜ãMCPã‚µãƒ¼ãƒãƒ¼ã‚’ä½œã£ã¦ã€Claude Desktopã‹ã‚‰å‘¼ã‚“ã§ã¿ã‚‹ï¼ˆCloudflareï¼‰
ã¯ã˜ã‚ã« LLMã¨å¤–éƒ¨ãƒ‡ãƒ¼ã‚¿ã‚½ãƒ¼ã‚¹ã‚’çµ±åˆã™ã‚‹éš›ã€ãƒ„ãƒ¼ãƒ«ã®èªè¨¼ã‚’ã©ã†ã™ã‚‹ã®ã‹æ‚©ã¿ã¾ã™ã€‚ãŸã¨ãˆã°ã€MyGPTsã®Actionsã§ã¯OAuth 2.0ã«ã‚ˆã‚‹èªè¨¼[1]ãŒå®Ÿè£…ã•ã‚Œã¦ã„ã¾ã™ã€‚ MyGPTsã§ã¯ã“ã®ã‚ˆã†ã«OAuthè¨å®šãŒå¯èƒ½ ã“ã‚Œã¯çµæ§‹ä¾¿åˆ©ã§ã€Google Apps Scriptã‚’ä½œã‚Šã€çµ„ç¹”å†…ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ã‚¢ã‚¯ã‚»ã‚¹ã‚’é™å®šã—ãŸå½¢ã§ãƒ‡ãƒ—ãƒã‚¤ã™ã‚Œã°ã€ã‚¹ãƒ—ãƒ¬ãƒƒãƒ‰ã‚·ãƒ¼ãƒˆã‚„Gmailã¨ã®ã‚»ã‚ãƒ¥ã‚¢ãªé€£æºãŒã€èªè¨¼ãƒ•ãƒãƒ¼å«ã‚ã¦MyGPTsä¸Šã§å®Œçµã—ã¾ã™ã€‚ Apps Scriptã¯å‘¼ã³å‡ºã—å…ƒã‚’åˆ¶é™ã§ãã‚‹ã€‚å‘¼ã³å‡ºã—ã«ã¯OAuth2ãŒå¿…è¦ã€‚ ä¸€æ–¹ã§Claude Desktopã‚‚ä½¿ãˆã‚‹Google Workspaceé€£æºMCPã‚µãƒ¼ãƒãƒ¼ã®ä½œä¾‹ã‚’è¦‹ã‚‹ã¨ã€APIã‚ãƒ¼èªè¨¼ã®ã‚‚ã®ã‹ã€æ‰‹å…ƒã§èªè¨¼ãƒ•ãƒãƒ¼ã‚’èµ°ã‚‰ã›ã‚‹ã‚‚ã®ã§ã€Claude Desktopä¸Šã§èªè¨¼ãƒ»èªå¯ã§ãã‚‹ã‚‚ã®ã¯ç®¡è¦‹ã®é™ã‚Šã‚ã‚Šã¾ã›ã‚“ã€‚ ã“ã®è¨˜äº‹ã¯ã€Claude Des
mapk0y 2025/04/09
oAuth
ãƒªãƒ³ã‚¯
GitHub - m-barthelemy/vpn-webauth: Use additional OAuth2 authentication and MFA with a Strongswan VPN
This is quick (and dirty) web application allowing to add a second round of authentication to a Strongswan VPN using OAuth2. It doesn't replace, and in fact requires, the normal Strongswan authentication process using passwords or certificates. This project uses the ext-auth Strongswan plugin to hook itself into the authentication flow and provide an additional layer of authentication using OAuth2
mapk0y 2024/06/03
Strongwan ã®æ‹¡å¼µã¨ã—ã¦æ©Ÿèƒ½ã—ã€Google Workspace ãªã©ã‚’èªè¨¼ã¨ã—ã¦åˆ©ç”¨ã§ãã‚‹ã€‚Web ç”»é¢ãŒç”¨æ„ã•ã‚Œã¦ãŠã‚Šã€ãã‚Œã‚’çµŒç”±ã—ã¦èªè¨¼ã—ãŸ IP ã‚¢ãƒ‰ãƒ¬ã‚¹æƒ…å ±ãªã©ã§è¨±å¯ã™ã‚‹ã€‚Strongswan ã® client ã‚¢ãƒ—ãƒªãŒå¿…è¦ã‹ã‚‚

oAuth

vpn
ãƒªãƒ³ã‚¯
Behind GitHub's new authentication token formats
AI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities and be
mapk0y 2021/04/06
ã‚ã¨ã§èªã‚€

GitHub

oAuth

authentication
ãƒªãƒ³ã‚¯
OAuthèªè¨¼ã¨ã¯ä½•ã‹?ãªãœãƒ€ãƒ¡ãªã®ã‹ - 2020å†¬ - r-weblife
ã“ã‚“ã°ã‚“ã¯ã€‚ritouã§ã™ã€‚ Digital IdentityæŠ€è¡“å‹‰å¼·ä¼š #iddance Advent Calendar 2020 1æ—¥ã‚ã®è¨˜äº‹ã§ã™ã€‚ qiita.com åˆæ—¥ãªã®ã§ã‚†ã‚‹ãµã‚ãªè©±ã‚’ã—ã¾ã—ã‚‡ã†ã€‚ ä½•ã®è©±ã‹ ã‚‚ã†ã ã„ã¶å‰ã§ã™ãã€‚9æœˆã®ãŠè©±ã§ã™ã€‚ã“ã‚“ãªTweetã‚’è¦‹ã‹ã‘ã¾ã—ãŸã€‚ ç¤¾å†…Slackã«ã„ã‚‹ã€ŒOAuthèªè¨¼ã€ã¨æ›¸ãã¨è¨‚æ£ã—ã¦ãã‚Œã‚‹botãŒä¸å¯§ãªè§£èª¬ã‚’ã™ã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ãŸ èªè¨¼(Authentication)ã¨èªå¯(Authorization)ã¯é–“é•ãˆã‚„ã™ã„ã‚ã‚Šã«ãƒŸã‚¹ã‚‹ã¨ç”šå¤§ãªè¢«å®³ã‚’ã‚‚ãŸã‚‰ã—ãŒã¡ãªã®ã§ã€å¸¸æ—¥é ƒã‹ã‚‰æ„è˜ã‚’é«˜ã‚ã¦ã„ããŸã„ã§ã™ã pic.twitter.com/oVQxBgZcHSâ€” greenspa (@greenspa) 2020å¹´9æœˆ28æ—¥ ã“ã®botã«å¯¾ã™ã‚‹æ€ã†ã¨ã“ã‚ã¯ã‚‚ã†è‰¯ã„ã§ã™ã€‚ ä»Šå›žã¯ã€ã€ŒOAuthã®ä»•æ§˜ã«æ²¿ã£ã¦IDé€£æºã‚’å®Ÿè£…ã™ã‚‹ã„ã‚ã‚†ã‚‹"OAut
mapk0y 2020/12/02
oAuth
ãƒªãƒ³ã‚¯
ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“ã‚¹ã§ã®èªè¨¼èªå¯ - Qiita
è¤‡æ•°ã®ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“ã‚¹ã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ï¼ˆãƒžãƒ«ãƒã‚¯ãƒ©ã‚¦ãƒ‰ï¼‰ãªã©ã€å˜ç´”ã«ã¯é–‰åŸŸç¶²ã‚’æ§‹ç¯‰ã§ããªã„ç’°å¢ƒã§ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“ã‚¹ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã‚’æŽ¡ç”¨ã™ã‚‹å ´åˆã«ã¯ã€ã‚µãƒ¼ãƒ“ã‚¹é–“ã®èªè¨¼èªå¯ãŒå¿…è¦ã¨ãªã‚‹ã€‚ã“ã®å ´åˆã®ã‚µãƒ¼ãƒ“ã‚¹é–“ã®èªè¨¼èªå¯æ–¹å¼ã‚’æ±ºã‚ã‚‹å‚è€ƒã¨ãªã‚‹ã€OSSã‚„SaaSã€Webã‚µãƒ¼ãƒ“ã‚¹ã§æŽ¡ç”¨æ–¹å¼ã¤ã„ã¦æ•´ç†ã—ãŸã€‚ Istio ã‚µãƒ¼ãƒ“ã‚¹ãƒ¡ãƒƒã‚·ãƒ¥ã®å®Ÿè£…ã¨ã—ã¦æœ‰åãªIstioã§ã¯ã‚µãƒ¼ãƒ“ã‚¹é–“é€šä¿¡ã‚’ä»¥ä¸‹ã®ã‚ˆã†ã«åˆ¶å¾¡ã§ãã‚‹ã€‚ Istioã®èªè¨¼èªå¯ã§ã¯èªè¨¼ä¸»ä½“ãŒService Identityã¨ã„ã†ãƒ¢ãƒ‡ãƒ«ã§æŠ½è±¡åŒ–ã•ã‚Œã€Kubernatesã‚„Istioã§å®šç¾©ã™ã‚‹Service Accountã«åŠ ãˆã¦ã€GCP/AWSã®IAMã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚„ã‚ªãƒ³ãƒ—ãƒ¬ãƒŸã‚¹ã®æ—¢å˜IDãªã©ã‚’Service Identityã¨ã—ã¦æ‰±ã†ã“ã¨ãŒã§ãã‚‹ã€‚ ã‚µãƒ¼ãƒ“ã‚¹é–“ã®èªè¨¼ (Peer Authentication) ã¯ã€å„ã‚µãƒ¼ãƒ“ã‚¹ (Pod) ã«è¨ç½®ã™ã‚‹Sideca
mapk0y 2020/07/24
oAuth
ãƒªãƒ³ã‚¯
Google OAuth2 ãƒˆãƒ¼ã‚¯ãƒ³ã‚’å–å¾—ã™ã‚‹ with Go - utahta >> log
GAE/Go ã‚’ã¡ã‚‡ã„ã¡ã‚‡ã„è§¦ã£ã¦ã„ã‚‹ã€‚ ãã®ä¸ã® Pull queue ã‚’è©¦ãã†ã¨ã—ãŸã¨ãã€OAuth2 ã®ãƒˆãƒ¼ã‚¯ãƒ³ãŒå¿…è¦ã«ãªã£ãŸã®ã§å–å¾—ã—ãŸãƒ¡ãƒ¢ã€‚ æ‰‹é † Google Could Platform ã® API Manager ã‹ã‚‰èªè¨¼æƒ…å ±ï¼ˆClientID, Secretï¼‰ã‚’ã¤ãã‚‹ ä¸‹è¨˜ã‚³ãƒžãƒ³ãƒ‰ã‚’å©ãã€‚ [utahta@mbp google-oauth2]% go run oauth2_token.go Input ClientID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.apps.googleusercontent.com Input Secret: XXXX-XXXXXXXXXXXXXXXXXXXXXX Input Scopes: https://www.google apis.com/auth/taskqueue,https://www.goo
mapk0y 2018/10/22
golang

oAuth
ãƒªãƒ³ã‚¯
authentication-howto
Send feedback Programmatic authentication Stay organized with collections Save and categorize content based on your preferences. This document describes how to authenticate to an IAP-secured resource from a user account or a service account. Programmatic access refers to calling IAP-secured applications from non-browser clients, such as command-line tools, service-to-service calls, and mobile appl
mapk0y 2018/10/22
google

oAuth
ãƒªãƒ³ã‚¯
Goè¨€èªžã§oauth2ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚’ä½¿ã† | kido
oauth2ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ Goè¨€èªžã§oauth2ã‚’æ‰±ã†ã®ã«ä¾¿åˆ©ãªoauth2ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ãŒã‚ã‚Šã¾ã™ã€‚ ä»Šå›žã¯ã€ã“ã‚Œã‚’ä½¿ã£ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ä¾‹ã¨ã—ã¦ã€Googleãƒ•ã‚©ãƒˆ(Picasa)ã®APIã‚’æ‰±ã„ã¾ã™ã€‚ ã‚½ãƒ¼ã‚¹ã¯ä¸‹è¨˜ã‚’å‚ç…§ã€‚ import ( "bufio" "fmt" "io/ioutil" "log" "os" "golang.org/x/oauth2" "golang.org/x/oauth2/google" ) func main() { //ClientIDã‚„ClientSecretã¯Google API Console ã‹ã‚‰ã‚³ãƒ”ãƒ¼ã—ã¦ãã¾ã™ã€‚ //Endpointã¯googleã€githubã€facebookãªã©ãŒoauth2é…ä¸‹ã®ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã«ç”¨æ„ã•ã‚Œã¦ã„ã¾ã™ã€‚ config := oauth2.Config{ ClientID: "xxxxxxxxxxx", ClientSe
mapk0y 2018/10/18
oAuth

golang
ãƒªãƒ³ã‚¯
Amazon Cognitoãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ—ãƒ¼ãƒ«Lambdaãƒˆãƒªã‚¬ãƒ¼ã§ALBèªè¨¼ã®ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’åˆ¶é™ã™ã‚‹ | DevelopersIO
ã©ã‚‚ã€å¤§ç€§ã§ã™ã€‚ å…ˆæ—¥ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸALBã®èªè¨¼æ©Ÿèƒ½ã€ãƒ–ãƒã‚°ã§ã¯Googleèªè¨¼ã¨é€£æºã™ã‚‹æ§˜åã‚’ã”ç´¹ä»‹ã—ã¾ã—ãŸã€‚ ãŸã ã“ã®æ§‹æˆã¯ä»»æ„ã®Googleã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®èªè¨¼ã‚’é€šã—ã¦ã—ã¾ã†ã®ã§ã€Google Appsã®è‡ªçµ„ç¹”ã®ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã®ã¿è¨±å¯ã—ãŸã„ã¨ã„ã†ã‚ˆã†ãªæ¥å‹™å‘ã‘ã®ãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ã ã¨ã‚¿ãƒ¼ã‚²ãƒƒãƒˆå´ã§èªå¯æ©Ÿèƒ½ã‚’å®Ÿè£…ã—ãªãã¦ã¯ãªã‚‰ãšã€ç‰‡æ‰‹è½ã¡æ„ŸãŒã‚ã‚Šã¾ã—ãŸã€‚ ãã“ã§æœ¬è¨˜äº‹ã§ã¯ã€èªè¨¼å…ˆã«Cognitoãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ—ãƒ¼ãƒ«ã‚’è¨å®šã—ã€Lambdaãƒˆãƒªã‚¬ãƒ¼ã§ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’åˆ¶é™ã™ã‚‹æ§‹æˆã‚’ã”ç´¹ä»‹ã—ã¾ã™ã€‚ æ§‹æˆã®ç›®çš„ã¨æ¦‚è¦ ALBã®èªè¨¼æ©Ÿèƒ½ã‚’ç”¨ã„ã¦ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’åˆ¶é™ã—ã¾ã™ã€‚å‰å›žã®è¨˜äº‹ã§æŒ‡å®šã—ãŸOpenID Connectã«ã‚ˆã‚‹Googleèªè¨¼ã®ä»£ã‚ã‚Šã«Amazon Cognitoã‚’æŒ‡å®šã—ã€ãã®Cognitoãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ—ãƒ¼ãƒ«ã®å¤–éƒ¨IDãƒ—ãƒãƒã‚¤ãƒ€ã¨ã—ã¦Googleèªè¨¼ã‚’é€£æºã•ã›ã¾ã™ã€‚ ã‚ã–ã‚ã–Cog
mapk0y 2018/07/03
oAuth

AWS

ALB
ãƒªãƒ³ã‚¯
æ‰‹ã£å–ã‚Šæ—©ãã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«OAuth2èªè¨¼ã‚’å°Žå…¥ã™ã‚‹ - ãã®æ‰‹ã®å¹³ã¯å°»ã‚‚ã¤ã‹ã‚ã‚‹ã•
bitly/oauth2_proxyã‚’ç”¨ã„ã¦ï¼Œã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«æ‰‹ã£å–ã‚Šæ—©ãOAuth2èªè¨¼ã‚’å°Žå…¥ã™ã‚‹ã¨ã„ã†è©±ã§ã™ï¼Ž oauth2_proxyã¯è‰¯ã„æ„Ÿã˜ã§OAuth2ã«ã‚ˆã‚‹èªè¨¼ã‚’è‚©ä»£ã‚ã‚Šã—ã¦ãã‚Œã‚‹å›ã§ï¼Œä½•ã‚‰ã‹ã®ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã®èªè¨¼æ©Ÿæ§‹ã¨çµ„ã¿åˆã‚ã›ã¦åˆ©ç”¨ã™ã‚‹ã¨ç°¡å˜ã«OAuth2ãƒã‚°ã‚¤ãƒ³ã‚’å®Ÿç¾ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ï¼Ž ä»Šå›žã¯ä¾‹ã¨ã—ã¦Kibanaã«Googleã®OAuth2ãƒã‚°ã‚¤ãƒ³ã‚’å°Žå…¥ã—ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ï¼Ž æ§‹æˆ Kibana bitly/oauth2_proxy nginx +------+ +-------+ +--------------+ +--------+ | | | | ----auth----> | | | | | user | --request--> | nginx | | oauth2_proxy | <--auth--> | Google | | | | | <--
mapk0y 2017/12/15
nginx

oAuth
ãƒªãƒ³ã‚¯
OAuth 2.0 ã‚’ã‹ã¿ãã ã
Sponsored Â· Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. â†’
mapk0y 2017/06/05
oAuth

security
ãƒªãƒ³ã‚¯
Big Sky :: ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã‚¢ãƒ—ãƒªã§ OAuth2 èªè¨¼ã‚’ä½¿ã†éš›ã«ä½¿ãˆã‚‹ãƒ†ã‚¯ãƒ‹ãƒƒã‚¯
OAuth2 ã§ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚¿ã‚¤ãƒ—ãŒã‚³ãƒ¼ãƒ‰ã‚‚ã—ãã¯ãƒˆãƒ¼ã‚¯ãƒ³ã®å ´åˆã€ãƒ–ãƒ©ã‚¦ã‚¶ã§èªè¨¼ã‚’è¡Œã£ã¦ã‚³ãƒ¼ãƒ‰ã‚„ãƒˆãƒ¼ã‚¯ãƒ³ã‚’è‡ªå‰ã‚µãƒ¼ãƒã§å—ã‘å–ã‚‹äº‹ã«ãªã‚‹ã€‚ãƒ¢ãƒã‚¤ãƒ«ã‚¢ãƒ—ãƒªã ã¨çµ„ã¿è¾¼ã¿ãƒ–ãƒ©ã‚¦ã‚¶ãŒå‰æã«ãªã£ã¦ãŠã‚Šãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã®æœ€çµ‚ URL ã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹ã‚³ãƒ¼ãƒ‰ã‚„ãƒˆãƒ¼ã‚¯ãƒ³ã‚’å¾—ã‚‹ã€‚ãŸã ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã‚¢ãƒ—ãƒªã®å ´åˆã€èªè¨¼ã®ç‚ºã«èµ·å‹•ã—ãŸãƒ–ãƒ©ã‚¦ã‚¶ã®æœ€çµ‚ URL ã‚’å¾—ã‚‹æ–¹æ³•ã¯ãªã„ã€‚ã¾ãŸ1ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ç‚ºã«ãƒ‰ãƒ¡ã‚¤ãƒ³ä»˜ãã®ã‚³ãƒ¼ãƒ«ãƒãƒƒã‚¯ã‚µãƒ¼ãƒã‚’ç”¨æ„ã™ã‚‹ã®ã‚‚é¢å€’ã ã—ã€ä½œã£ãŸã‚µãƒ¼ãƒã‚’ãƒ¦ãƒ¼ã‚¶ã«ä¿¡ç”¨ã—ã¦è²°ã†å¿…è¦ãŒã‚ã‚‹ã€‚ã‚ã¨ãã‚‚ãã‚‚å¤–éƒ¨ã®ã‚µãƒ¼ãƒã§å—ã‘å–ã£ãŸãƒˆãƒ¼ã‚¯ãƒ³ã‚’ã©ã†ã‚„ã£ã¦ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã‚¢ãƒ—ãƒªã«æ¸¡ã™ã‹ã¨ã„ã†å•é¡ŒãŒã‚ã‚‹ã€‚ ãã“ã§ä½¿ã†ã®ãŒãƒãƒ¼ã‚«ãƒ«ã‚µãƒ¼ãƒã‚’ç«‹ã¦ã‚‹æ–¹æ³•ã€‚èªè¨¼å¾Œã®ã‚³ãƒ¼ãƒ«ãƒãƒƒã‚¯å…ˆã‚’ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã‚¢ãƒ—ãƒªã‹ã‚‰èµ·å‹•ã—ãŸãƒãƒ¼ã‚«ãƒ«ã‚µãƒ¼ãƒã«ã—ã€ãã“ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•ã›ã¦ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã‚’è²°ã„ä¿å˜ã™ã‚‹ã€‚ ä»Šæ—¥ã¯ã“ã‚ŒãŒä¼ã‚ã‚Šæ˜“ã„ç”¨ã« Mic
mapk0y 2017/01/01
oAuth

golang
ãƒªãƒ³ã‚¯
HTTPS ã§ã‚‚ Full URL ãŒæ¼ã‚Œã‚‹ï¼ŸOAuth ã® code ã‚‚æ¼ã‚Œã‚‹ã‚“ã˜ã‚ƒãï¼Ÿï¼Ÿ - OAuth.jp
ãªã‚“ã§ã™ã‹ã“ã‚Œã¯ï¼ New attack bypasses HTTPS protection on Macs, Windows, and Linux DHCP ã«ã¤ãªãã¨ PAC ãƒ•ã‚¡ã‚¤ãƒ«ãŒãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã•ã‚Œã¦ HTTPS ã§ã‚ã‚ã†ã¨ã‚¢ã‚¯ã‚»ã‚¹å…ˆã® Full URL ã¯æ¼ã‚Œã‚‹ã§ã™ã£ã¦ï¼Ÿ Web Proxy Autodiscovery ã§ã™ã£ã¦ï¼Ÿ ãƒãƒ§ãƒƒãƒˆãƒ‹ãƒ›ãƒ³ã‚´ãƒ‡ã‚ªãƒã‚¬ã‚¤ã‚·ãƒžã‚¹ ã£ã¦ã“ã¨ã§ã€ã¾ãã“ã‚ŒãŒå®Ÿéš›ã©ã‚Œãã‚‰ã„ç°¡å˜ã«å®Ÿç¾ã§ãã‚‹æ”»æ’ƒãƒ‘ã‚¿ãƒ¼ãƒ³ãªã®ã‹ã¯ä»–ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ¥ç•Œã®æ–¹ã€…ã«å¾Œã§èžãã¨ã—ã¦ã€ã“ã®è¨˜äº‹ã§ã‚‚è§¦ã‚Œã‚‰ã‚Œã¦ã‚‹ OpenID Connect ã¨ã‹ OAuth2 ã¸ã®å½±éŸ¿ã«ã¤ã„ã¦ã€ã¡ã‚‡ã£ã¨ã¾ã¨ã‚ã¦ãŠãã¾ã—ã‚‡ã†ã‹ã€‚ Authorization Request & Response ãŒæ¼ã‚Œã‚‹ response_mode=form_post ãªã‚“ã¦ã„ã†ã®ã‚‚ä¸€éƒ¨ã‚ã‚Šã¾ã™ãŒã€åŸºæœ¬ OAuth2 /
mapk0y 2016/07/28
security

oAuth
ãƒªãƒ³ã‚¯
pam-openidã¨ã‹oauth-pamã‚’ä½¿ã†ã¨Chromebookã‚‚ã©ãã®èªè¨¼ã§ãã‚‹ã‹ãª?
ã“ã®è¨˜äº‹ã¯1å¹´ä»¥ä¸Šå‰ã®å¤ã„è¨˜äº‹ã§ã™ã€‚ç¾çŠ¶ã«å³ã—ã¦ã„ãªã„è¨˜è¿°ã®å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ã‚ã‚‰ã‹ã˜ã‚ã”äº†æ‰¿ãã ã•ã„ã€‚ _ ChromebookãŒä¼æ¥ãƒ»æ•™è‚²æ©Ÿé–¢å‘ã‘ã«å›½å†…ç™ºå£²ã ãã†ã§ã™ã€‚ Google Enterprise Japan å…¬å¼ãƒ–ãƒã‚°: ä¼æ¥ã‚„æ•™è‚²æ©Ÿé–¢ã§ Chromebook ã‚’ã”åˆ©ç”¨ã„ãŸã ã‘ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚: http://googleenterprise-ja.blogspot.jp/2014/07/chromebook.html ä¸€èˆ¬äººãŒã€Gentooãƒ—ãƒªã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ãƒžã‚·ãƒ³ã‚’ä½¿ã†ä¸–ç•ŒãŒæ¥ãŸã¨è€ƒãˆã‚‹ã¨èƒ¸ãŒç†±ããªã‚Šã¾ã™ãã€‚ ã¨ã„ã†ã“ã¨ã§ã€Debianã§ã‚‚ChromeOSã‚‚ã©ãä½œã‚Œã‚‹ã‹ãªã¨å¦„æƒ³ã—ãŸã¨ã“ã‚ã€ChromeBookã®ã„ã„ã¨ã“ã‚ã¯èªè¨¼ãŒGoogleã‚¢ã‚«ã‚¦ãƒ³ãƒˆã§ã§ãã‚‹ã˜ã‚ƒãªã„ã‹ã¨æ€ã£ãŸã§ã™ã‚ˆã€‚ã§ã€ãã‚Œã‚’å®Ÿç¾ã™ã‚‹ãªã‚‰OpenIDã‹OAuthã˜ã‚ƒãªã„ã‹ã¨æ€ã£ã¦ã‚°ã‚°ã£ãŸã‚‰ã€ä½œã£ã¦ãŸäººã„ãŸã‚ˆ!
mapk0y 2014/07/27
oAuth
ãƒªãƒ³ã‚¯
ç‰¹å®šæ¡ä»¶ä¸‹ã«ãŠã‘ã‚‹OAuth 2.0ã®èªå¯å¿œç”ã‚’å¥ªå–ã•ã‚Œã‚‹ãƒªã‚¹ã‚¯ã¨ãã®å¯¾ç–ã«ã¤ã„ã¦ - r-weblife
ã“ã‚“ã«ã¡ã¯ã€ritouã§ã™ã€‚ ã‚„ã£ã¨â€ãªã‚“ã¡ã‚ƒã‚‰Advent Calendarâ€ãŒãŠã•ã¾ã‚Šã€ã“ã‚Œã‹ã‚‰ã¯â€ä¸€å¹´ã‚’æŒ¯ã‚Šè¿”ã£ã¦(é ã„ç›®â€ã¿ãŸã„ãªè¨˜äº‹ãŒå¢—ãˆã‚‹ã“ã¨ã§ã—ã‚‡ã†ã€‚ãã®é–“ã®ã‚¿ã‚¤ãƒŸãƒ³ã‚°ã‚’ç‹™ã„ã¾ã™ã€‚ ä½•ã®è©±ã‹ mixi PlatformãŒå°Žå…¥ã—ãŸã£ã¦ã„ã†OAuth 2.0ã®CSRFå¯¾ç–æ‹¡å¼µã‚’ä½¿ã£ã¦ã¿ãŸ - r-weblife ã®æœ€å¾Œã«ã¡ã‚‡ã£ã¨æ›¸ã„ãŸã‚“ã§ã™ã‘ã©ã€ãƒ¢ãƒã‚¤ãƒ«ã‚¢ãƒ—ãƒªã§OAuth 2.0ã‚’ä½¿ã†éš›ã«ã‚„ã£ã‹ã„ãªå•é¡ŒãŒæ®‹ã£ã¦ã¾ã—ãŸã€‚ ä»Šå›žã¯ã€ã€Œãƒã‚¤ãƒ†ã‚£ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‹ã‚‰OAuth 2.0ã‚’ä½¿ã†ã¨ãã€ç‰¹å®šã®æ¡ä»¶ä¸‹ã«ãŠã„ã¦ã€æ£è¦ã®Clientã§ã¯ãªã„æ‚ªæ„ã®ã‚ã‚‹ç¬¬3è€…ã«èªå¯å¿œç”ã‚’æŒã£ã¦è¡Œã‹ã‚Œã¦ã€ãã®çµæžœAccess Tokenã‚’å–å¾—ã§ãã¡ã‚ƒã†ãƒªã‚¹ã‚¯ãŒã‚ã‚‹ã‚ˆãã€‚ã©ã†ã—ã‚ˆã†ã‹ã€‚ã€ã£ã¦ã„ã†è©±ã§ã™ã€‚ æ¡ä»¶ã£ã¦ã„ã†ã®ã¯ã€ OAuth 2.0ã®Clientã¯ãƒã‚¤ãƒ†ã‚£ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã‚ã‚Šã€Client C
mapk0y 2013/12/27
oAuth

security
ãƒªãƒ³ã‚¯
1