[B! security][oauth] yuichiro0526ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yuichiro0526 id:yuichiro0526

securityã¨oauthã«é–¢ã™ã‚‹yuichiro0526ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ãªã‚“ã¨ãªãOAuthæ€–ã„ã£ã¦æ€ã£ã¦ã‚‹ã‚„ã¤ã¡ã‚‡ã£ã¨æ¥ã„ - r-weblife
ã“ã‚“ã°ã‚“ã¯ã€ritouã§ã™ã€‚ Twitterã®å•é¡ŒãŒç™ºè¦šã—ãŸéš›ã€ã“ã‚“ãªgistã‚‚æ›¸ãã¾ã—ãŸã€‚ gist:5053810 Â· GitHub ä»Šæœã€ã“ã‚“ãªTweetã—ã¾ã—ãŸã€‚ https://twitter.com/ritou/status/317429458657222657:twitter:detail:left gistã«æ›¸ã„ãŸé€šã‚Šã€ç§ã®è€ƒãˆã‚‹ä»Šå›žã®å•é¡Œã®æœ¬è³ªã¯oauth_callbackã®ç®¡ç†ã€ãã®ä¸€è¨€ã«å°½ãã¾ã™ã€‚ä»–ã«2legged OAuthãŒå…¥ã‚‹ã¨ã”ã¡ã‚ƒã”ã¡ã‚ƒã™ã‚‹ã®ã§ã€OAuth 1.0ã®å®Ÿè£…ã®ãƒã‚¤ãƒ³ãƒˆã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ ãªã‚“ã¨ãªãOAuthæ€–ã„ã£ã¦æ€ã£ã¦ã‚‹ã‚„ã¤ã¡ã‚‡ã£ã¨æ¥ã„ from Ryo Ito ã‚‚ã¡ã‚ã‚“ã“ã‚Œã ã‘ã§ã¯ã‚ã‘ãŒã‚ã‹ã‚‰ãªã„ã¨æ€ã†ã®ã§ã€èª¬æ˜ŽãŒèžããŸã‘ã‚Œã°ã©ã“ã‹ã§è©±ã—ã¦ã‚‚ã„ã„ã§ã™ã€‚ãœã²å£°ã‚’ã‹ã‘ã¦ãã ã•ã„ã€‚ æ™®æ®µã¯ç§‹ç”°ã«ã„ã¾ã™ãŒã€å”¯ä¸€ã“ã®å‹‰å¼·ä¼šã«ã¯ã‚ˆãå‚åŠ ã—ã¦ã„ã‚‹ã®
yuichiro0526 2013/04/03
oauth

security

twitter

slide
ãƒªãƒ³ã‚¯
ã€Œã¡ã‚‡ã£ã¨ã“ã‚Œã¿ã¦ãã‚Œãªã„ã€ã¨urlã‚’é€ã‚‹ã‚¹ãƒ‘ãƒ DMã®è§£æžã¨è§£èª¬
ã‚ã®ã€ã¡ã‚‡ã£ã¨åŽ„ä»‹ãªã“ã¨ãŒã‚ã‚Šã¾ã—ã¦ã€‚ ã„ã¤ã‚‚ã©ãŠã‚Šã®ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ã‚µã‚¤ãƒˆã ã¨æ€ã£ã¦ãŸã‚“ã§ã™ã‚ˆã€‚ ...ã¨æ€ã£ã¦ãŸã‚‰é•ã£ãŸã®ã§ã¾ã¨ã‚ã¾ã—ãŸã€‚ ã‚¹ã‚¯ãƒªãƒ¼ãƒ³ã‚·ãƒ§ãƒƒãƒˆãªã©ã‚ã‚Šã¾ã™ãŒã€ãã®ä¸ã®URLã«ã¯çµ¶å¯¾ã«ã‚¢ã‚¯ã‚»ã‚¹ã—ãªã„ã§ãã ã•ã„ã€‚ ã¾ãšè¢«å®³ã«éã‚ãªã„ãŸã‚ã«å¿…è¦ãªã“ã¨ã¨è¢«å®³ã«éã£ãŸã‚‰å¿…è¦ãªã“ã¨ã€‚ ã„ã‚ã„ã‚ãªãƒšãƒ¼ã‚¸ã‚’è¦‹ã¦ã¿ãŸã¨ã“ã‚ã€ã™ã“ã—é•ã†ç‚¹ãŒã‚ã£ãŸã®ã§ã¾ã¨ã‚ã•ã›ã¦ã„ãŸã ãã¾ã—ãŸã€‚ k5342 @k5342 ã‚¹ãƒ‘ãƒ DMã®å¯¾ç– ãƒ»èˆˆå‘³æœ¬ä½ã«URLã‚’é–‹ã‹ãªã„ã“ã¨ ãƒ»ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰å¤‰ãˆã‚‹ã¨ã‹çµæžœç„¡æ„å‘³ã€ã‚¢ãƒ—ãƒªé€£æºã‚’è§£é™¤ã™ã‚‹ã“ã¨ ãƒ»ãã‚Œã‚¹ãƒ‘ãƒ ã˜ã‚ƒãªã„ï¼Ÿã£ã¦èžã„ã¦ã‚ã’ã‚‹ã®ã‚‚åŠ¹æžœã‚¢ãƒª(ãã®ã¨ãã«è§£èª¬ã‚µã‚¤ãƒˆã®URLã‚’è²¼ã‚‰ãªã„ã‚ˆã†ã«) 2013-03-01 18:56:04
yuichiro0526 2013/03/01
twitter

security

oauth
ãƒªãƒ³ã‚¯
OAuthã®èªè¨¼ã«WebViewã‚’ä½¿ã†ã®ã¯ã‚„ã‚ã‚ˆã†
Androidã‹ã‚‰Twitterã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ãŸã‚ã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã¨ã—ã¦ï¼ŒTwitter4JãŒæœ‰åã§ã™ï¼Ž ã“ã‚Œã‚’ä½¿ã£ã¦ã¿ã‚ˆã†ã¨ï¼Œã€ŒAndroid Twitter4Jã€ã¨æ¤œç´¢ã™ã‚‹ã¨ èªè¨¼ã«WebViewã‚’ä½¿ã£ãŸä¾‹ãŒãŸãã•ã‚“å‡ºã¦ãã¾ã™ï¼Ž ãƒ»ãƒ»ãƒ»ã„ã‚„ï¼Œã¡ã‚‡ã£ã¨ã¾ã¦ï¼Ž ãã‚Œã¯ã¡ã‚‡ã£ã¨ã¾ãšã„ã ã‚ã†ï¼Ž ãã†ã„ã†ã‚ã‘ã§ã‚‚ã†ã¡ã‚‡ã£ã¨è³¢ã„æ–¹æ³•ã‚’æŽ¢ã—ã¦ã¿ã¾ã—ãŸï¼Ž ä½•ãŒã¾ãšã„ã®ã• ã€ŒAndroid Twitter4Jã€ã¨æ¤œç´¢ã™ã‚‹ã¨ï¼Œä¸Šä½ã«ã“ã‚“ãªãƒšãƒ¼ã‚¸ãŒå‡ºã¦ãã¾ã™ï¼Ž Twitter4jã‚’ä½¿ã£ã¦OAuthèªè¨¼ã‚’ã‚¢ãƒ—ãƒªå†…ã§è¡Œã†æ–¹æ³• Twitter4j-2.2.xã‚’ä½¿ã£ãŸOAuthèªè¨¼ã®ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ä¾‹ twitter4jã§ãƒ„ã‚¤ãƒ¼ãƒˆã™ã‚‹ Android+Twitter4Jã§OAuthã™ã‚‹ãŸã‚ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ ä¸Šã®ã‚µã‚¤ãƒˆã§ã¯æ¬¡ã®æ§˜ã¯æ–¹æ³•ã‚’ã¨ã£ã¦ã„ã¾ã™ï¼Ž ã‚¢ãƒ—ãƒªå†…ã«WebViewã‚’è²¼ã‚Šä»˜ã‘ WebViewã§Twitterã®èªè¨¼ç”»é¢
yuichiro0526 2012/11/29
OAuth

webview

security

authentication

think

dev
ãƒªãƒ³ã‚¯
å˜ãªã‚‹ OAuth 2.0 ã‚’èªè¨¼ã«ä½¿ã†ã¨ã€è»ŠãŒé€šã‚Œã‚‹ã»ã©ã®ã©ã§ã‹ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ãƒ»ãƒ›ãƒ¼ãƒ«ãŒã§ãã‚‹
In some of the feedback I have gotten on the openID Connect spec, the statement is made that Connect is too complicated. That OAuth 2.0 is all you need to do authentication. Many point to Identity Proâ€¦ è‹±èªžèªã¿ãŸããªã„ã¨ã„ã†äººã®ãŸã‚ã«ç°¡å˜ã«è§£èª¬ã™ã‚‹ã¨â€¦ OAuth 2.0 ã® implicit flow ã‚’ä½¿ã£ã¦ã€Œèªè¨¼ã€ã‚’ã—ã‚ˆã†ã¨ã™ã‚‹ã¨ã€ã¨ã£ã¦ã‚‚å¤§ããªç©´ãŒé–‹ãã¾ã™ã€‚ ã‚«ãƒƒãƒˆï¼†ãƒšãƒ¼ã‚¹ãƒˆã‚¢ã‚¿ãƒƒã‚¯ãŒå¯èƒ½ã ã‹ã‚‰ã§ã™ã€‚ OAuth èªè¨¼ï¼Ÿã¯ã€å›³ï¼‘ã®ã‚ˆã†ãªæµã‚Œã«ãªã‚Šã¾ã™ã€‚ å›³ï¼‘ OAuth èªè¨¼ï¼Ÿã®æµã‚Œ ä¸€è¦‹ã€å•é¡Œãªã•ãã†ã«è¦‹ãˆã¾ã™ã€‚ã—ã‹ã—ã€ãã‚Œã¯ã™ã¹ã¦ã®ã‚µã‚¤ãƒˆãŒã€Œè‰¯ã„ã‚µã‚¤ãƒˆã€ãªã‚‰ã°ã§ã™ã€‚ Site_A
yuichiro0526 2012/02/06
OAuth

security

openid

atode
ãƒªãƒ³ã‚¯
http://www.machu.jp/posts/20110722/p01/
yuichiro0526 2011/07/25
BrowserID

authentication

security

oauth
ãƒªãƒ³ã‚¯
ã®ã£ã¨ã£ãŸãƒ¼
ã®ã£ã¨ã£ãŸãƒ¼ã¯ï¼Œæ–°æ™‚ä»£ã®ä¹—ã£å–ã‚Šã‚µãƒ¼ãƒ“ã‚¹ã§ã™ï¼Ž ã®ã£ã¨ã£ãŸãƒ¼ã‚’åˆ©ç”¨ã—ã¦ï¼Œå‹é”ã®Twitterã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä¹—ã£å–ã£ãŸã‚Šï¼ŒçŸ¥ã‚‰ãªã„äººã«ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä¹—ã£å–ã‚‰ã‚ŒãŸã‚Šã—ã¾ã—ã‚‡ã†ï¼Ž ä½¿ã„æ–¹ OAuthèªè¨¼ã—ã¾ã™ ä¹—ã£å–ã‚ŠãŸã„ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’ä¸€è¦§ã‹ã‚‰é¸æŠžã—ã¾ã™ 5åˆ†é–“ãã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ãªã‚Šã™ã¾ã—ã¦ã‚¿ã‚¤ãƒ ãƒ©ã‚¤ãƒ³ã®é–²è¦§ã‚„ãƒ„ã‚¤ãƒ¼ãƒˆãŒã§ãã¾ã™ ã‚ˆãã‚ã‚‹è³ªå• ã©ã†ã„ã†ä»•çµ„ã¿ã§ä¹—ã£å–ã£ã¦ã„ã‚‹ã‚“ã§ã™ã‹? OAuthèªè¨¼ã®ä»•çµ„ã¿ã‚’ä½¿ã£ã¦å®‰å…¨ã«ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä¹—ã£å–ã‚Œã¾ã™ èª°ãŒèª°ã‚’ä¹—ã£å–ã‚‹ã“ã¨ãŒã§ãã‚‹ã®? ã®ã£ã¨ã£ãŸãƒ¼ã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼åŒå£«ãŒï¼ŒãŠäº’ã„ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä¹—ã£å–ã‚‹ã“ã¨ãŒã§ãã¾ã™ï¼Žèª°ãŒèª°ã‚’ã®ã£ã¨ã£ãŸã‹åˆ†ã‹ã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã®ã§ï¼ŒåŒ¿åã§ãªã«ã‹æ›¸ã‹ã‚Œã‚‹ï¼Œã¨ã„ã£ãŸå¿ƒé…ã¯ã‚ã‚Šã¾ã›ã‚“ï¼Žä»¥ä¸‹ã®ãƒªãƒ³ã‚¯ã‹ã‚‰ï¼ŒéŽåŽ»ã®ã®ã£ã¨ã‚Šã‚’ã”è¦§ã«ãªã‚Œã¾ã™ï¼Ž éŽåŽ»ã®ã®ã£ã¨ã‚Š éžå…¬é–‹(ãƒ—ãƒãƒ†ã‚¯ãƒˆ)ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’ãƒ•ã‚©ãƒãƒ¼ã—ã¦ã„ã‚‹ã‘ã©å¤§ä¸ˆå¤«? éžå…¬é–‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ„ã‚¤ãƒ¼
yuichiro0526 2011/03/22
WebService

OAuth

twitter

oauth

Security
ãƒªãƒ³ã‚¯
MobsterWorldã®Twitterä¸Šã§ã®å®£ä¼ã«è¦‹ã‚‹OAuthã®èª²é¡Œ - Nothing ventured, nothing gained.
æ˜¨å¤œã‹ã‚‰ä»Šæœã«ã‹ã‘ã¦ã€Twitterã§MobsterWorldã¨ã„ã†ã‚²ãƒ¼ãƒ ã®æ‹›å¾…ãŒDMã§é€ã‚‰ã‚Œã¦ããŸã€‚ã‚ã¾ã‚Šæ™®æ®µDMã§ã‚„ã‚Šã¨ã‚Šã‚’ã™ã‚‹ã‚ˆã†ãªäººã‹ã‚‰ã§ã¯ãªã‹ã£ãŸã®ã§ã€ã»ã†ã£ã¦ãŠã„ãŸã®ã ãŒã€æ‹›å¾…ã«å¿œã˜ã‚‹ã¨ã€è‡ªåˆ†ã®Twitterã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä½¿ã£ã¦ã€DMã‚’é€ã‚‹ã‚ˆã†ãªã‚‚ã®ã ã£ãŸã‚‰ã—ã„ã€‚è©³ã—ãã¯ä»¥ä¸‹ã®ITmediaã®è¨˜äº‹ã‚’å‚ç…§ã€‚ Twitterã§ã‚¹ãƒ‘ãƒ DMãŒå‡ºå›žã£ã¦ã„ã‚‹ã€‚DMã«æ›¸ã‹ã‚ŒãŸURLã®ãƒšãƒ¼ã‚¸ã§ãƒœã‚¿ãƒ³ã‚’ã‚¯ãƒªãƒƒã‚¯ã™ã‚‹ã¨ã€åŒã˜DMã‚’ãƒ•ã‚©ãƒãƒ¯ãƒ¼ã«é€ã‚Šä»˜ã‘ã‚‹ã¨ã„ã†ä»•çµ„ã¿ã€‚ ITmedia: Twitterã§ã‚¹ãƒ‘ãƒ DMå‡ºå›žã‚‹ãƒ•ã‚©ãƒãƒ¯ãƒ¼ã«è‡ªå‹•ã§DMé€ã‚Šã¤ã‘ ã“ã‚Œã¯ã€OAuthã‚’åˆ©ç”¨ã—ã¦ã€æ£è¦ã®æ‰‹ç¶šãã‚’çµŒã¦ã€Twitterã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ã‚‚ã®ã ã€‚è©³ã—ãã¯ã€ä»¥ä¸‹ã®ã¾ã¡ã‚…ãƒ€ã‚¤ã‚¢ãƒªãƒ¼ã‚’å‚ç…§ã€‚ ã“ã‚Œã¯ã‚¦ã‚¤ãƒ«ã‚¹ã‚„è„†å¼±æ€§ã˜ã‚ƒãªãã¦ã€OAuthã¨ã„ã†ä»•çµ„ã¿ã‚’è¦‹äº‹ã«æ‚ªç”¨ã—ã¦ã„ã‚‹ã€‚ OAuthè©æ¬ºã¨ã§ã‚‚è¨€ãˆã°ã„ã„ã®ã‹ã€‚
yuichiro0526 2010/05/29
twitter

OAuth

security
ãƒªãƒ³ã‚¯
1