[B! OAuth] HHRã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

HHR id:HHR

OAuthã«é–¢ã™ã‚‹HHRã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (13)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

OAuth/OIDCã®JWTã¾ã¨ã‚ - Qiita
ã¯ã˜ã‚ã« Wikipedia ã® JWT (JSON Web Token) ã«é–¢ã™ã‚‹è¨˜äº‹ãŒèª¤ã£ã¦ã„ãŸã®ã§ã€2020 å¹´ 5 æœˆ 9 æ—¥ã€è‹±èªžç‰ˆã€æ—¥æœ¬èªžç‰ˆã¨ã‚‚ã«ä¿®æ£ã‚’è¡Œã„ã¾ã—ãŸã€‚ ä¿®æ£å‰ã®è¨˜äº‹ã§ã¯ã€JWT ã®ã“ã¨ã‚’ã€ŒJSON ã‚’ãƒ™ãƒ¼ã‚¹ã¨ã—ãŸã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®ãŸã‚ã®ã‚ªãƒ¼ãƒ—ãƒ³æ¨™æº–ã§ã‚ã‚‹ã€ã¨èª¬æ˜Žã—ã¦ã„ã¾ã—ãŸã€‚ã—ã‹ã— JWT ã¯ç”¨é€”ã‚’é™å®šã—ãªã„æ±Žç”¨çš„ãªãƒ‡ãƒ¼ã‚¿ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã§ã™ã€‚ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã¨ã—ã¦ JWT ã‚’æŽ¡ç”¨ã™ã‚‹ã“ã¨ã¯ã€JWT ã®å¿œç”¨äº‹ä¾‹ã®ä¸€ã¤ã«éŽãŽã¾ã›ã‚“ã€‚ãªãŠã€ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã¯å¿…ãšã—ã‚‚ JWT ã¨ã¯é™ã‚Šã¾ã›ã‚“ã€‚â†’ å‚è€ƒ:ã€Žå›³è§£ JWS/JWE/JWT/IDãƒˆãƒ¼ã‚¯ãƒ³/ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®åŒ…å«é–¢ä¿‚ã€ JWT ã‚’çŸ¥ã‚‰ãªã„çŠ¶æ…‹ã§ OAuth ã¨ OpenID Connect ã®å¦ç¿’ã‚’å§‹ã‚ã‚‹ã¨ã€ã€ŒJWT ã¯ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®ãŸã‚ã®æŠ€è¡“ã§ã‚ã‚‹ã€ã€ã€ŒJWT ã¯ãƒ¦ãƒ¼ã‚¶èªè¨¼ã®ãŸã‚ã®æŠ€
HHR 2024/12/03
OAuth
ãƒªãƒ³ã‚¯
ä»•æ§˜ãŒèªã‚ã‚‹ã‚ˆã†ã«ãªã‚‹OAuth2.0ã€OpenID Connect å…¥é–€
2023/10/05 Offersã•ã‚“ã®ã‚¤ãƒ™ãƒ³ãƒˆã§ã®è³‡æ–™ã§ã™ã€‚ https://offers.connpass.com/event/295782/ ã‚¤ãƒ™ãƒ³ãƒˆå¾Œã®æº€è¶³åº¦ã‚¢ãƒ³ã‚±ãƒ¼ãƒˆï¼ˆ5ç‚¹æº€ç‚¹ï¼‰ã®çµæžœã¯ä»¥ä¸‹ã«ãªã‚Šã¾ã™ã€‚ 5ç‚¹: 49% 4ç‚¹: 39% 3ç‚¹: 8% 2ç‚¹: 4% ã“ã¡ã‚‰ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã®å†…å®¹ã¯ä»¥ä¸‹ã®æœ¬ã®æŠœç²‹ã«ãªã‚Šã¾ã™ã€‚ãƒ‡ãƒ¢ã®å†…å®¹ã€ã“ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã§ã¯è§¦ã‚Œã¦ã„ãªã„ã“ã¨ã«ã¤ã„ã¦ã”èˆˆå‘³ã‚ã‚‹å ´åˆã¯ä»¥ä¸‹ã®æœ¬ã‚’ã”å‚ç…§ãã ã•ã„ã€‚ https://authya.booth.pm/it ems/1296585 https://authya.booth.pm/it ems/1550861 æœ¬ç™ºè¡¨ã§æ‰±ã£ã¦ã„ãªã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã—ã¦ã¯ä»¥ä¸‹ã®æœ¬ãŒãŠã™ã™ã‚ã§ã™ã€‚ https://authya.booth.pm/it ems/1877818 æœ¬ã®è©•åˆ¤ https://togetter.com/li/1477483
HHR 2024/07/28
OAuth
ãƒªãƒ³ã‚¯
OAuthèªè¨¼ã¨ã¯ä½•ã‹?ãªãœãƒ€ãƒ¡ãªã®ã‹ - 2020å†¬ - r-weblife
ã“ã‚“ã°ã‚“ã¯ã€‚ritouã§ã™ã€‚ Digital IdentityæŠ€è¡“å‹‰å¼·ä¼š #iddance Advent Calendar 2020 1æ—¥ã‚ã®è¨˜äº‹ã§ã™ã€‚ qiita.com åˆæ—¥ãªã®ã§ã‚†ã‚‹ãµã‚ãªè©±ã‚’ã—ã¾ã—ã‚‡ã†ã€‚ ä½•ã®è©±ã‹ ã‚‚ã†ã ã„ã¶å‰ã§ã™ãã€‚9æœˆã®ãŠè©±ã§ã™ã€‚ã“ã‚“ãªTweetã‚’è¦‹ã‹ã‘ã¾ã—ãŸã€‚ ç¤¾å†…Slackã«ã„ã‚‹ã€ŒOAuthèªè¨¼ã€ã¨æ›¸ãã¨è¨‚æ£ã—ã¦ãã‚Œã‚‹botãŒä¸å¯§ãªè§£èª¬ã‚’ã™ã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ãŸ èªè¨¼(Authentication)ã¨èªå¯(Authorization)ã¯é–“é•ãˆã‚„ã™ã„ã‚ã‚Šã«ãƒŸã‚¹ã‚‹ã¨ç”šå¤§ãªè¢«å®³ã‚’ã‚‚ãŸã‚‰ã—ãŒã¡ãªã®ã§ã€å¸¸æ—¥é ƒã‹ã‚‰æ„è˜ã‚’é«˜ã‚ã¦ã„ããŸã„ã§ã™ã pic.twitter.com/oVQxBgZcHSâ€” greenspa (@greenspa) 2020å¹´9æœˆ28æ—¥ ã“ã®botã«å¯¾ã™ã‚‹æ€ã†ã¨ã“ã‚ã¯ã‚‚ã†è‰¯ã„ã§ã™ã€‚ ä»Šå›žã¯ã€ã€ŒOAuthã®ä»•æ§˜ã«æ²¿ã£ã¦IDé€£æºã‚’å®Ÿè£…ã™ã‚‹ã„ã‚ã‚†ã‚‹"OAut
HHR 2024/07/28
OAuth
ãƒªãƒ³ã‚¯
OAuth 2.0 Implicit Flowã‚’ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ã«åˆ©ç”¨ã™ã‚‹éš›ã®ãƒªã‚¹ã‚¯ã¨å¯¾ç–æ–¹æ³•ã«ã¤ã„ã¦ #idcon - r-weblife
ãŠã¯ã‚ˆã†ã”ã–ã„ã¾ã™ã€ritouã§ã™ã€‚ ä»Šå›žã¯ã€ä¸€éƒ¨ã§å…ˆé€±è©±é¡Œãªã‚Šã¾ã—ãŸOAuth 2.0ã®Implicit Flowã«ã¤ã„ã¦ã®ã‚¨ãƒ³ãƒˆãƒªã«ãªã‚Šã¾ã™ã€‚ (2012/2/7 ã„ã‚ã„ã‚ã¨ä¿®æ£ã—ã¾ã—ãŸã€‚) å˜ãªã‚‹ OAuth 2.0 ã‚’èªè¨¼ã«ä½¿ã†ã¨ã€è»ŠãŒé€šã‚Œã‚‹ã»ã©ã®ã©ã§ã‹ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ãƒ»ãƒ›ãƒ¼ãƒ«ãŒã§ãã‚‹ | @_Nat Zone Thread Safe: The probl em with OAuth for Authentication. ä»Šå›žã¯ä»¥ä¸‹ã®å†…å®¹ã«ã¤ã„ã¦æ•´ç†ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ OAuth 2.0ã®ã©ã®æ©Ÿèƒ½ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ãŒã‚ã‚‹ã®ã‹ èª°ãŒæ”»æ’ƒè€…ã«ãªã‚Œã‚‹ã®ã‹ å¯¾ç– OAuth 2.0 Implicit Flowã¨ã¯ OAuth 2.0ã§ã¯ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ãƒ¼ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒä¿è·ãƒªã‚½ãƒ¼ã‚¹ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©é™ã‚’å¾—ã‚‹ãŸã‚ã®ã„ãã¤ã‹ã®ãƒ•ãƒãƒ¼ãŒå®šç¾©ã•ã‚Œã¦ã„ã¾ã™ã€‚ (ä»•æ§˜ä¸ã§ã¯Flowã‚„Grant Type
HHR 2020/01/10
OAuth

security
ãƒªãƒ³ã‚¯
æ‰‹ã£å–ã‚Šæ—©ãã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«OAuth2èªè¨¼ã‚’å°Žå…¥ã™ã‚‹ - ãã®æ‰‹ã®å¹³ã¯å°»ã‚‚ã¤ã‹ã‚ã‚‹ã•
bitly/oauth2_proxyã‚’ç”¨ã„ã¦ï¼Œã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«æ‰‹ã£å–ã‚Šæ—©ãOAuth2èªè¨¼ã‚’å°Žå…¥ã™ã‚‹ã¨ã„ã†è©±ã§ã™ï¼Ž oauth2_proxyã¯è‰¯ã„æ„Ÿã˜ã§OAuth2ã«ã‚ˆã‚‹èªè¨¼ã‚’è‚©ä»£ã‚ã‚Šã—ã¦ãã‚Œã‚‹å›ã§ï¼Œä½•ã‚‰ã‹ã®ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã®èªè¨¼æ©Ÿæ§‹ã¨çµ„ã¿åˆã‚ã›ã¦åˆ©ç”¨ã™ã‚‹ã¨ç°¡å˜ã«OAuth2ãƒã‚°ã‚¤ãƒ³ã‚’å®Ÿç¾ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ï¼Ž ä»Šå›žã¯ä¾‹ã¨ã—ã¦Kibanaã«Googleã®OAuth2ãƒã‚°ã‚¤ãƒ³ã‚’å°Žå…¥ã—ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ï¼Ž æ§‹æˆ Kibana bitly/oauth2_proxy nginx +------+ +-------+ +--------------+ +--------+ | | | | ----auth----> | | | | | user | --request--> | nginx | | oauth2_proxy | <--auth--> | Google | | | | | <--
HHR 2017/12/15
OAuth
ãƒªãƒ³ã‚¯
JSON Web Tokenï¼ˆJWTï¼‰ã®ç´¹ä»‹ã¨Yahoo! JAPANã«ãŠã‘ã‚‹JWTã®æ´»ç”¨
ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã¯ã€2023å¹´10æœˆ1æ—¥ã«LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã«ãªã‚Šã¾ã—ãŸã€‚LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã®æ–°ã—ã„ãƒ–ãƒã‚°ã¯ã“ã¡ã‚‰ã§ã™ã€‚LINEãƒ¤ãƒ•ãƒ¼ Tech Blog ã“ã‚“ã«ã¡ã¯ã€‚ IDã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³æœ¬éƒ¨ã®éƒ½ç‘ã§ã™ã€‚ æ–°å’2å¹´ç›®ã§æ™®æ®µã¯Yahoo! IDé€£æºã®ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ã€iOSã®SDKã®é–‹ç™ºãªã©ã‚’æ‹…å½“ã—ã¦ã„ã¾ã™ã€‚ ä»Šå›žã¯æœ€è¿‘ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚„ãƒ‡ãƒã‚¤ã‚¹ã®èªè¨¼ã§ç”¨ã„ã‚‰ã‚Œã‚‹â€JSON Web Tokenï¼ˆJWTï¼‰â€ã«ã¤ã„ã¦ã®è§£èª¬ã¨ã€Yahoo! JAPANã¨ä»–ç¤¾ã®æ´»ç”¨äº‹ä¾‹ã‚’ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ JWTã¨ã¯ï¼Ÿ JWTã¨ã¯JSON Web Tokenã®ç•¥ç§°ã§ã‚ã‚Šã€å±žæ€§æƒ…å ±ï¼ˆClaimï¼‰ã‚’JSONãƒ‡ãƒ¼ã‚¿æ§‹é€ ã§è¡¨ç¾ã—ãŸãƒˆãƒ¼ã‚¯ãƒ³ã®ä»•æ§˜ã§ã™ã€‚ ä»•æ§˜ã¯RFC7519ï¼ˆå¤–éƒ¨ã‚µã‚¤ãƒˆï¼‰ã§å®šã‚ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ ç‰¹å¾´ã¨ã—ã¦ã€ç½²åã€æš—å·åŒ–ãŒã§ãã€URL-safeã§ã‚ã‚‹ã“ã¨ãªã©ãŒæŒ™ã’ã‚‰ã‚Œã¾ã™ã€‚ç™ºéŸ³ã¯"ã‚¸ãƒ§ãƒƒãƒˆ"ã§ã™ã€‚ JWTã¨é–¢é€£ã™
HHR 2017/12/04
OAuth

Yahoo
ãƒªãƒ³ã‚¯
OAuth 2.0 ã‚’ã‹ã¿ãã ã
æ—¥çµŒé›»åç‰ˆã«ãŠã‘ã‚‹ãƒªã‚¢ãƒ«ã‚¿ã‚¤ãƒ ãƒ¬ã‚³ãƒ¡ãƒ³ãƒ‰ã‚·ã‚¹ãƒ†ãƒ é–‹ç™ºã®äº‹ä¾‹ç´¹ä»‹/nikkei-realtime-recommender-system
HHR 2017/06/04
OAuth
ãƒªãƒ³ã‚¯
Big Sky :: ãƒã‚°ã‚¤ãƒ³èªè¨¼ã‚’ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“ã‚¹åŒ–ã™ã‚‹ã€Œloginsrvã€
èªè¨¼ã‚’æŒãŸãªã„ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ã„ã–èªè¨¼ã«å¯¾å¿œã•ã›ã‚ˆã†ã¨æ€ã†ã¨æ¡ˆå¤–é¢å€’ã§ãƒ¢ãƒãƒ™ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ç„¡ãã—ã¦ã—ã¾ã†ãªã‚“ã¦äº‹ã‚‚ã‚ˆãèµ·ãã†ã‚‹è©±ã§ã™ã€‚ç‰¹ã«ç¤¾å†…å‘ã‘ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ä½œã£ã¦ã„ãŸã‚‰æœ¬ç•ªã§ä½¿ã†äº‹ã«ãªã£ã¦ã—ã¾ã£ã¦ã€ãªã‚“ã¦è©±ã¯è‰¯ãã‚ã‚‹è©±ã§ã™ã€‚é–‹ç™ºã§æœ¬ç•ª DB ã‚’è¦‹ã‚‹ã®ã¯ã¡ã‚‡ã£ã¨...ã€‚ã§ã‚‚æ—¢å˜ã®ã‚³ãƒ¼ãƒ‰ã‚’ã‚´ãƒªã‚´ãƒªã¨è§¦ã‚ŠãŸããªã„ã€‚ãã‚“ãªå ´åˆã«ãƒã‚°ã‚¤ãƒ³èªè¨¼éƒ¨åˆ†ã ã‘ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“ã‚¹åŒ–ã§ãã‚‹ã¨æ°—æŒã¡ã‚‚å¹¾åˆ†å’Œã‚‰ãŽã¾ã™ã€‚ä»Šæ—¥ã¯ãã‚“ãªã¡ã‚‡ã£ã¨ä¾¿åˆ©ãªã‚µãƒ¼ãƒã€Œloginsrvã€ã‚’ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ GitHub - tarent/loginsrv: JWT login microservice with plugable backends such as OAuth2, Github, htpasswd, osiam loginsrv is a standalone minimalistic login se
HHR 2017/06/02
OAuth
ãƒªãƒ³ã‚¯
OAuth 2.0 å…¨ãƒ•ãƒãƒ¼ã®å›³è§£ã¨å‹•ç”» - Qiita
RFC 6749 (The OAuth 2.0 Authorization Framework) ã§å®šç¾©ã•ã‚Œã¦ã„ã‚‹ 4 ã¤ã®èªå¯ãƒ•ãƒãƒ¼ã€ãŠã‚ˆã³ã€ãƒªãƒ•ãƒ¬ãƒƒã‚·ãƒ¥ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ç”¨ã„ã¦ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®å†ç™ºè¡Œã‚’å—ã‘ã‚‹ãƒ•ãƒãƒ¼ã®å›³è§£åŠã³å‹•ç”»ã§ã™ã€‚å‹•ç”»ã¯ YouTube ã¸ã®ãƒªãƒ³ã‚¯ã¨ãªã£ã¦ã„ã¾ã™ã€‚ English version: Diagrams And Movies Of All The OAuth 2.0 Flows è¿½è¨˜ (2019-07-02) èªå¯æ±ºå®šã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆã‹ã‚‰ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«èªå¯ã‚³ãƒ¼ãƒ‰ã‚„ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã‚’æ¸¡ã™æ–¹æ³•ã«ã¤ã„ã¦ã¯ã€åˆ¥è¨˜äº‹ã€ŽOAuth 2.0 ã®èªå¯ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã¨ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã«é–¢ã™ã‚‹èª¬æ˜Žã€ã§è§£èª¬ã—ã¦ã„ã¾ã™ã®ã§ã€ã”å‚ç…§ãã ã•ã„ã€‚ è¿½è¨˜ï¼ˆ2020-03-20ï¼‰ ã“ã®è¨˜äº‹ã®å†…å®¹ã‚’å«ã‚€ã€ç†è€…æœ¬äººã«ã‚ˆã‚‹ã€ŽOAuth & OIDC å…¥é–€ç·¨ã€è§£èª¬å‹•ç”»ã‚’å…¬é–‹ã—ã¾ã—ãŸï¼ 1. èªå¯ã‚³ãƒ¼ãƒ‰ãƒ•ãƒãƒ¼ RF
HHR 2017/04/29
OAuth
ãƒªãƒ³ã‚¯
ã‚ˆãã‚ã‹ã‚‹èªè¨¼ã¨èªå¯ | DevelopersIO
ã‚ˆãè¨“ç·´ã•ã‚ŒãŸã‚¢ãƒƒãƒ—ãƒ«ä¿¡è€…ã€éƒ½å…ƒã§ã™ã€‚ã€Œèªè¨¼ èªå¯ã€ã§ã‚°ã‚°ã‚‹ã¨ä¿è‚²åœ’ã®è©±ãŒå±±ç¨‹å‡ºã¦æ¥ã¾ã™ã€‚ãŒã€ä»Šæ—¥ã¯ä¿è‚²åœ’ã®è©±ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ãã¡ã‚‰ã‚’æœŸå¾…ã—ãŸæ–¹ã¯ã”ã‚ã‚“ãªã•ã„ã€‚ã“ã¡ã‚‰ã‹ã‚‰ãŠå¸°ã‚Šãã ã•ã„ã€‚ ã•ã¦ã€å…ˆæ—¥ã®Developers.IO 2016ã«ãŠã„ã¦ã€ãƒžã‚¤ã‚¯ãƒWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¨ã„ã†ãƒ†ãƒ¼ãƒžã§ãŠè©±ã•ã›ã¦é ‚ãã¾ã—ãŸã€‚ä¸€è¨€ã§è¨€ã†ã¨ OAuth 2.0 ã¨ OpenID Connect 1.0 ã®ãŠè©±ã ã£ãŸã®ã§ã™ãŒã€ã“ã‚Œã‚‰ã‚’ç†è§£ã™ã‚‹ã«ã‚ãŸã£ã¦ã¯ã€Œèªè¨¼ã€ã¨ã€Œèªå¯ã€ã‚’ã¯ã£ãã‚Šã¨åˆ¥ã®ã‚‚ã®ã¨ã—ã¦ã‚¯ãƒƒã‚ãƒªã¨èªè˜ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ã¾ãšã€ã–ã£ãã‚Šã¨ã—ãŸç†è§£ èªè¨¼ã¨èªå¯ã¯å¯†æŽ¥ã«çµ¡ã¿åˆã£ã¦ã„ã‚‹ä¸€æ–¹ã§å…¨ãåˆ¥ã®æ¦‚å¿µã§ã™ã€‚æ£ç›´ã€ç†è§£ã¯ç°¡å˜ã§ã¯ãªã„ã¨æ€ã„ã¾ã™ã€‚ ã¾ãšã€Œèªè¨¼ã€ã¯è‹±èªžã§ã¯ Authentication ã¨è¨€ã„ã¾ã™ã€‚é•·ã„ã®ã§ç•¥ã—ã¦ AuthN ã¨æ›¸ã„ãŸã‚Šã™ã‚‹ã“ã¨ã‚‚ã‚ã‚Šã¾ã™ã€‚æ„å‘³ã¨ã—ã¦ã¯ é€šä¿¡ã®ç›¸æ‰‹ãŒèª°ï¼ˆä½•ï¼‰ã§ã‚
HHR 2016/02/24
OAuth
ãƒªãƒ³ã‚¯
OpenID Connectä½“é¨“ - Qiita
OpenID Connectã‚’å¦ç¿’ã™ã‚‹ãŸã‚ã«ã€å®Ÿéš›ã«Yahoo! IDé€£æºã‚µãƒ¼ãƒ“ã‚¹ã§OpenID Connectã‚’ä½“é¨“ã—ã¦ã¿ã¾ã—ãŸã€‚ å‰ç½®ã ä½“é¨“ã—ã¦ã¿ãŸç†ç”± OpenID Connectã‚’åˆ©ç”¨ã—ãŸIDé€£æºã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ä½œã£ã¦è¦‹ã‚ˆã†ã¨æ€ã£ãŸã®ã§ã™ãŒã€çŸ¥è˜ã‚‚ç„¡ãã€ä»•æ§˜ã‚‚é›£ã—ãã€ã©ã“ã‹ã‚‰æ‰‹ã‚’ã¤ã‘ã¦è‰¯ã„ã®ã‹ã‚ã‹ã‚Šã¾ã›ã‚“ã§ã—ãŸã€‚ãã“ã§ã€å®Ÿéš›ã«OpenID Connectã®ãƒ•ãƒãƒ¼ã‚’ä¸€ã¤ä¸€ã¤æ‰‹ã§è¿½ã£ã¦ã¿ã¦ã€ç†è§£ã‚’æ·±ã‚ã‚ˆã†ã¨è€ƒãˆã¾ã—ãŸã€‚ãã®æ‰‹é †ã‚’è¨˜äº‹ã«ã—ã¾ã™ã€‚ OpenID Connectã¨ã¯ãªã«ã‹ OpenID Connectã¯ã€OAuth2.0ã¨ã„ã†ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã‚’åˆ©ç”¨ã—ãŸã‚»ã‚ãƒ¥ã‚¢ãªã‚µãƒ¼ãƒ“ã‚¹ã®åˆ©ç”¨ãŒã§ãã‚‹èªå¯ã®ä»•çµ„ã¿ã®ä¸Šã§èªè¨¼ãŒå‡ºæ¥ã‚‹ã‚ˆã†ã«ã—ãŸã‚‚ã®ã§ã™ã€‚ä»¥ä¸‹ã«OpenID Connectã‚’å‹‰å¼·ã™ã‚‹ä¸Šã§ã€å‚è€ƒã«ã—ãŸã‚µã‚¤ãƒˆã‚’è¨˜è¼‰ã—ã¾ã™ã€‚ OpenID Connect å…¥é–€ å‰æº–å‚™ äº‹å‰ã«å¿…è¦ãªã‚³ãƒˆ
HHR 2015/11/08
è‰¯è¨˜äº‹ã€‚ã‚ˆãã¾ã¨ã¾ã£ã¦ã„ã‚‹ã€‚

OAuth

Yahoo
ãƒªãƒ³ã‚¯
ã€ŒOAuthã€ã®åŸºæœ¬å‹•ä½œã‚’çŸ¥ã‚‹
ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã®ä¸–ç•Œã¸ã‚ˆã†ã“ã ã¯ã˜ã‚ã¾ã—ã¦ã€OpenID Foundation Japanã§ã‚¨ãƒãƒ³ã‚¸ã‚§ãƒªã‚¹ãƒˆã‚’ã—ã¦ã„ã‚‹Novã§ã™ã€‚ ã“ã®é€£è¼‰ã§ã¯ã€åƒ•ã‚’å«ã‚OpenID Foundation Japanã«ã‹ã‹ã‚ã‚‹ãƒ¡ãƒ³ãƒãƒ¼ã§ã€OpenID Connectã‚„OAuthãªã©ã®ã€Œãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ï¼ˆDigital Identityï¼‰ã€ã«ã‹ã‹ã‚ã‚‹æŠ€è¡“ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¦ã„ãã¾ã™ã€‚ APIã‚¨ã‚³ãƒŽãƒŸãƒ¼æ™‚ä»£ã®ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ ä¸–ç•Œä¸ã§9å„„äººã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’æŠ±ãˆã‚‹ã€ŒFacebookã€ã‚„5å„„äººã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’æŒã¤ã€ŒTwitterã€ãªã©ã€å·¨å¤§ãªã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚°ãƒ©ãƒ•ã‚’æŒã¤ã‚µãƒ¼ãƒ“ã‚¹ãŒã€æ—¥ã€…ãã®å˜åœ¨æ„Ÿã‚’å¢—ã—ã¦ã„ã¾ã™ã€‚æ—¥æœ¬ã§ã‚‚ã€ã‚°ãƒªãƒ¼ã‚„ãƒ¢ãƒã‚²ãƒ¼ãªã©ãŒãã‚Œãžã‚Œã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚²ãƒ¼ãƒ ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã‚’å…¬é–‹ã—ã€å›½å†…ã«ä¸€æ°—ã«å·¨å¤§ãªã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚²ãƒ¼ãƒ å¸‚å ´ã‚’ä½œã‚Šä¸Šã’ã¾ã—ãŸã€‚æœ€è¿‘ã§ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼æ•°ãŒ5000ä¸‡äººã‚’çªç ´ã—ã€ãƒ—ãƒ©ãƒƒãƒˆ
HHR 2012/08/28
OAuth
ãƒªãƒ³ã‚¯
å¤šå½©ãªãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã«å¯¾å¿œã—ãŸPHPå‘ã‘èªè¨¼ãƒ©ã‚¤ãƒ–ãƒ©ãƒªÂ·Opauth MOONGIFT
Opauthã¯PHPå‘ã‘ã®èªè¨¼ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã§ã™ã€‚æŠ½è±¡åŒ–ã™ã‚‹ã“ã¨ã§å¤šæ§˜ãªãƒ—ãƒãƒã‚¤ãƒ€ãƒ¼ã«å®¹æ˜“ã«å¯¾å¿œã§ãã¾ã™ã€‚ Webã‚µãƒ¼ãƒ“ã‚¹ã§èªè¨¼ã‚’ç”¨æ„ã™ã‚‹ã¨è¨€ã£ã¦ã‚‚ä»Šã¯å¤šæ§˜ãªæŠ€è¡“ãŒå˜åœ¨ã—ã¾ã™ã€‚å˜ãªã‚‹ID/ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«é™ã‚‰ãšã€OpenIDã‚„OAuthã‚‚ã‚ã‚Šã¾ã™ã€‚ã‚µãƒ¼ãƒ“ã‚¹ãƒ—ãƒãƒã‚¤ãƒ€ãƒ¼ã”ã¨ã«å®Ÿè£…ã‚‚è‹¥å¹²å¤‰ã‚ã£ãŸã‚Šã—ã¾ã™ã€‚ãã†ã—ãŸèªè¨¼æŠ€è¡“ã‚’çµ±åˆã—ã¦ä½¿ãˆã‚‹ã®ãŒOpauthã§ã™ã€‚ ãƒ‡ãƒ¢ã§ã™ã€‚ Facebookèªè¨¼ã§ã™ã€‚ å•é¡Œãªãèªè¨¼ã§ãã¾ã—ãŸã€‚å„ç¨®ãƒ‡ãƒ¼ã‚¿ã‚‚å–å¾—ã§ãã¦ã„ã‚‹ã®ãŒåˆ†ã‹ã‚Šã¾ã™ã€‚ ã“ã¡ã‚‰ã¯Googleèªè¨¼ã§ã™ã€‚ ã“ã¡ã‚‰ã‚‚ãƒ¦ãƒ¼ã‚¶ãƒ—ãƒãƒ•ã‚£ãƒ¼ãƒ«å«ã‚ã¦å–å¾—ã§ãã¦ã„ã¾ã™ã€‚ æœ€å¾Œã¯Twitterã§ã™ã€‚ ã¯ã„ã€å•é¡Œã‚ã‚Šã¾ã›ã‚“ï¼ Opauthã¯Rubyã®èªè¨¼ãƒ©ã‚¤ãƒ–ãƒ©ãƒªOmniauthã«ã‚¤ãƒ³ã‚¹ãƒ‘ã‚¤ã‚¢ã•ã‚Œã¦ä½œã‚‰ã‚Œã¦ãŠã‚Šã€èªè¨¼éƒ¨åˆ†ã‚’æŠ½è±¡åŒ–ã™ã‚‹ã“ã¨ã§ãƒ—ãƒãƒã‚¤ãƒ€ãƒ¼ã‚’åˆ‡ã‚Šæ›¿ãˆã¦å®¹æ˜“ã«æ§˜ã€…ãªã‚µãƒ¼ãƒ“ã‚¹ã«å¯¾å¿œã§ãã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã€‚æŠ€è¡“çš„ã«ã¯Ope
HHR 2012/06/04
php

OAuth

OpenID

facebook

Twitter

Google
ãƒªãƒ³ã‚¯
1