[B! authentication] Kanasansoftã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

Kanasansoft id:Kanasansoft

authenticationã«é–¢ã™ã‚‹Kanasansoftã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ä¸è¦ãªä¸–ç•Œã¯ã„ã‹ã«ã—ã¦å®Ÿç¾ã•ã‚Œã‚‹ã®ã‹ - FIDO2 ã¨ WebAuthn ã®åŸºæœ¬ã‚’çŸ¥ã‚‹
ä¸æ£é€é‡‘ã‚„ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®ä¹—ã£å–ã‚Šãªã©ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒåŽŸå› ã®äº‹ä»¶ãŒå¾Œã‚’çµ¶ã¡ã¾ã›ã‚“ã€‚é«˜é½¢è€…ãªã©ã€IT ãƒªãƒ†ãƒ©ã‚·ã®ä½Žã„äººã§ã‚‚ç°¡å˜ã‹ã¤å®‰å…¨ã«è‡ªåˆ†ã®ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ç®¡ç†ã§ãã‚‹ä¸–ç•ŒãŒç†æƒ³ã§ã™ãŒã€ã¾ãšã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ä¸è¦ãªä¸–ç•Œã‚’å®Ÿç¾ã™ã‚‹ã®ãŒå…ˆæ±ºã§ã‚ã‚‹ã“ã¨ã¯ã€ã“ã‚Œã¾ã§ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®æ´å²ã§è¨¼æ˜Žã•ã‚ŒãŸã¨è¨€ãˆã‚‹ã§ã—ã‚‡ã†ã€‚ãã—ã¦ã€ã“ã“ã«æ¥ã¦ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ä¸è¦ãªãƒã‚°ã‚¤ãƒ³ã‚’å®Ÿç¾ã™ã‚‹æŠ€è¡“ã¨ã—ã¦æ³¨ç›®ã•ã‚Œã¦ã„ã‚‹ã®ãŒ FIDO (= Fast IDentity Online, ã€Œãƒ•ã‚¡ã‚¤ãƒ‰ã€) ã§ã™ã€‚ãã—ã¦ãã® FIDO ã‚’ãƒ–ãƒ©ã‚¦ã‚¶ã‹ã‚‰åˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ã™ã‚‹ã®ãŒ WebAuthn (= Web Authenticationã€ã€Œã‚¦ã‚§ãƒ–ã‚ªãƒ¼ã‚¹ãƒ³ã€)ã€‚å ±é“å†…å®¹ãªã©ã‹ã‚‰ã“ã‚Œã‚‰ã¯æŒ‡ç´‹èªè¨¼ã‚’å®Ÿç¾ã™ã‚‹ã‚‚ã®ã€ã¨æ€ã£ã¦ã„ã‚‹äººã‚‚ã„ã‚‰ã£ã—ã‚ƒã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãŒã€å®Ÿéš›ã«ã¯ã¡ã‚‡ã£ã¨é•ã„ã¾ã™ã€‚ WebAuthn ã«é–¢ã—ã¦ã¯ã€ã™ã§ã«æ•°å¤šãã®è¨˜äº‹ãŒå‡ºã¦ã„ã¾ã™ã®ã§
Kanasansoft 2019/03/26
web

authentication

security

webauthn

fido

html5
ãƒªãƒ³ã‚¯
ã‚ˆãã‚ã‹ã‚‹èªè¨¼ã¨èªå¯ | DevelopersIO
ã‚ˆãè¨“ç·´ã•ã‚ŒãŸã‚¢ãƒƒãƒ—ãƒ«ä¿¡è€…ã€éƒ½å…ƒã§ã™ã€‚ã€Œèªè¨¼ èªå¯ã€ã§ã‚°ã‚°ã‚‹ã¨ä¿è‚²åœ’ã®è©±ãŒå±±ç¨‹å‡ºã¦æ¥ã¾ã™ã€‚ãŒã€ä»Šæ—¥ã¯ä¿è‚²åœ’ã®è©±ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ãã¡ã‚‰ã‚’æœŸå¾…ã—ãŸæ–¹ã¯ã”ã‚ã‚“ãªã•ã„ã€‚ã“ã¡ã‚‰ã‹ã‚‰ãŠå¸°ã‚Šãã ã•ã„ã€‚ ã•ã¦ã€å…ˆæ—¥ã®Developers.IO 2016ã«ãŠã„ã¦ã€ãƒžã‚¤ã‚¯ãƒWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¨ã„ã†ãƒ†ãƒ¼ãƒžã§ãŠè©±ã•ã›ã¦é ‚ãã¾ã—ãŸã€‚ä¸€è¨€ã§è¨€ã†ã¨ OAuth 2.0 ã¨ OpenID Connect 1.0 ã®ãŠè©±ã ã£ãŸã®ã§ã™ãŒã€ã“ã‚Œã‚‰ã‚’ç†è§£ã™ã‚‹ã«ã‚ãŸã£ã¦ã¯ã€Œèªè¨¼ã€ã¨ã€Œèªå¯ã€ã‚’ã¯ã£ãã‚Šã¨åˆ¥ã®ã‚‚ã®ã¨ã—ã¦ã‚¯ãƒƒã‚ãƒªã¨èªè˜ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ã¾ãšã€ã–ã£ãã‚Šã¨ã—ãŸç†è§£ èªè¨¼ã¨èªå¯ã¯å¯†æŽ¥ã«çµ¡ã¿åˆã£ã¦ã„ã‚‹ä¸€æ–¹ã§å…¨ãåˆ¥ã®æ¦‚å¿µã§ã™ã€‚æ£ç›´ã€ç†è§£ã¯ç°¡å˜ã§ã¯ãªã„ã¨æ€ã„ã¾ã™ã€‚ ã¾ãšã€Œèªè¨¼ã€ã¯è‹±èªžã§ã¯ Authentication ã¨è¨€ã„ã¾ã™ã€‚é•·ã„ã®ã§ç•¥ã—ã¦ AuthN ã¨æ›¸ã„ãŸã‚Šã™ã‚‹ã“ã¨ã‚‚ã‚ã‚Šã¾ã™ã€‚æ„å‘³ã¨ã—ã¦ã¯ é€šä¿¡ã®ç›¸æ‰‹ãŒèª°ï¼ˆä½•ï¼‰ã§ã‚
Kanasansoft 2016/04/07
ã€Žèªè¨¼ã¨èªå¯ã¯å¯†æŽ¥ã«çµ¡ã¿åˆã£ã¦ã„ã‚‹ä¸€æ–¹ã§å…¨ãåˆ¥ã®æ¦‚å¿µã§ã™ã€‚ã€ã€Žé€šä¿¡ã®ç›¸æ‰‹ãŒèª°ï¼ˆä½•ï¼‰ã§ã‚ã‚‹ã‹ã‚’ç¢ºèªã™ã‚‹ã“ã¨ã€ã€Žã¨ã‚ã‚‹ç‰¹å®šã®æ¡ä»¶ã«å¯¾ã—ã¦ã€ãƒªã‚½ãƒ¼ã‚¹ã‚¢ã‚¯ã‚»ã‚¹ã®æ¨©é™ã‚’ä¸Žãˆã‚‹ã“ã¨ã€

openid

oauth

authentication

development

security

authorization
ãƒªãƒ³ã‚¯
WebSocketã§OAuth 2.0ã‚’ä½¿ã£ã¦ã¿ãŸ - OAuth.jp
WebSocket Serverã§ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ã¨ã‹ã€WebSocket Serverã®è£ã«Railsãªã‚Šã®APIãŒã‚ã£ã¦Node.jsã‹ã‚‰ãã®APIå©ãè¦‹ãŸã„ãªã®ã¯ãã‚Œãªã‚Šã«ã‚ã‚Šãã†ãªã®ã«ã€ã‚ã‚“ã¾ã‚µãƒ³ãƒ—ãƒ«ã‚³ãƒ¼ãƒ‰çš„ãªã‚‚ã®ãŒè¦‹å½“ãŸã‚‰ãªã‹ã£ãŸã®ã§ã€è‡ªåˆ†ã§æ›¸ã„ã¦ã¿ãŸã®ã‚’ã“ã“ã«å…¬é–‹ã™ã‚‹ã“ã¨ã«ã—ã¾ã™ã€‚ ClientãŒWebSocket Serverã«ã¤ãªãæ™‚ã€http://socket.example.com/?access_token=*** ã¿ãŸã„ãªURLã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã€Serverã¯ãã®Tokenå…ƒã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’èªè¨¼ã—ã¦ã€ãã®å¾ŒsocketãŒã¤ãªãŒã£ã¦ã‚‹é–“ã¯Node.jsãŒãã®tokenä½¿ã£ã¦è£ã®Rails APIã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã€ã¨ã„ã†ä½¿ã„æ–¹ã‚’ã—ã¦ã¾ã™ã€‚ Access Tokenã®ä¿å˜å…ˆã«MySQLä½¿ã£ã¦ã‚‹ã®ã¯ã‚ãã¾ã§Railså´ã§ãã£ã¡ã®ãŒæ‰‹ã£å–ã‚Šæ—©ã‹ã£ãŸã‹ã‚‰ã§ã€ã“ã“ã¯Redisã§ã‚‚MongoD
Kanasansoft 2012/08/10
websocket

oauth

authentication

node.js

html5

redis

rails
ãƒªãƒ³ã‚¯
PAMã‚’åˆ©ç”¨ã—ã¦èªè¨¼ã‚’è¡Œã†
é€£è¼‰ Samba Tipsï¼ Sambaãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ç®¡ç† PAMã‚’åˆ©ç”¨ã—ã¦èªè¨¼ã‚’è¡Œã† ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ã‚’å®Ÿè¡Œã™ã‚‹PAMã‚·ã‚¹ãƒ†ãƒ ã‚’åˆ©ç”¨ã™ã‚‹ã¨ã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‹ã‚‰ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ã‚’ç‹¬ç«‹ã•ã›ã‚‹ã“ã¨ãŒã§ãã‚‹ã€‚ã“ã®PAMã‚’Sambaã¨çµ„ã¿åˆã‚ã›ã‚‹ã“ã¨ã§ã€UNIXã¨Sambaã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®åŒæœŸã‚’è¡Œã†ã“ã¨ãŒå¯èƒ½ã ã€‚ ä»Šå›žã¯ã“ã®PAMã‚’åˆ©ç”¨ã™ã‚‹æ–¹æ³•ã«ã¤ã„ã¦è§£èª¬ã—ã‚ˆã† ä½è—¤æ–‡å„ª <[email protected]> æ ªå¼ä¼šç¤¾ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ‡ã‚¶ã‚¤ãƒ³ æ—¥æœ¬Sambaãƒ¦ãƒ¼ã‚¶ä¼š 2000/6/21 PAMã¨ã¯? å‰å›žã«å¼•ãç¶šãã€Sambaãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¨UNIXãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®åŒæœŸã‚’å®Ÿç¾ã™ã‚‹æ–¹æ³•ã«ã¤ã„ã¦è§£èª¬ã—ã¾ã™ã€‚ä»Šå›žã¯ã€PAMã‚’åˆ©ç”¨ã™ã‚‹æ–¹æ³•ã‚’ç´¹ä»‹ã—ã¾ã—ã‚‡ã†ã€‚ PAMï¼ˆPluggable Authentication Moduleï¼‰ã¨ã¯ã€ å„ç¨®ã®èªè¨¼å‡¦ç†ã‚’å®Ÿè¡Œã™ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ç¾¤ã¨ã€ ãã‚Œã‚’åˆ©ç”¨ã™ã‚‹ãŸã‚ã®æ¨™æº–çš„ãªAPIï¼ˆApp
Kanasansoft 2009/09/27
linux

unix

security

pam

authentication
ãƒªãƒ³ã‚¯
PAMã®ä»•çµ„ã¿ã‚’çŸ¥ã‚ŠãŸã„
Red Hatãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ã®ãŸã‚ã«PAMï¼ˆPluggable Authentication Modulesï¼‰ã¨å‘¼ã°ã‚Œã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒç”¨æ„ã•ã‚Œã¦ã„ã‚‹ã€‚ é€šå¸¸ã€ã‚µãƒ¼ãƒã«æŽ¥ç¶šã™ã‚‹éš›ã«ã¯èªè¨¼ãƒ—ãƒã‚°ãƒ©ãƒ ãŒå‹•ä½œã—ã¦å„ã‚µãƒ¼ãƒ“ã‚¹ã¸æŽ¥ç¶šã•ã‚Œã‚‹ã€‚ã“ã®èªè¨¼éƒ¨åˆ†ã®ã¿ã‚’ç‹¬ç«‹ã•ã›ã‚‹ã“ã¨ã§å„ã‚µãƒ¼ãƒ“ã‚¹ï¼ˆftpdãªã©ï¼‰ã”ã¨ã«åŸºæœ¬çš„ãªèªè¨¼è¨å®šã‚’ã—ãªãã¦æ¸ˆã‚€ã‚ˆã†é…æ…®ã•ã‚Œã¦ã„ã‚‹ã®ã ã€‚å„ã‚µãƒ¼ãƒã‚½ãƒ•ãƒˆã‚’ãƒªã‚³ãƒ³ãƒ‘ã‚¤ãƒ«ã™ã‚‹å¿…è¦ãªãã€PAMã‚µãƒãƒ¼ãƒˆã¨ã„ã†å½¢ã§å…±é€šã®ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ãŒå®Ÿç¾ã§ãã‚‹ã€‚ èªè¨¼ã«é–¢ã‚ã‚‹è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã¯ã€/etc/pam.d/ä¸‹ã«ç”¨æ„ã•ã‚Œã¦ã„ã‚‹ã€‚ãƒ—ãƒã‚°ãƒ©ãƒ ã«èªè¨¼ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã™ã‚‹å½¢ã§åˆ¶å¾¡ã‚’è¡Œã£ã¦ã„ã‚‹ã®ã ã€‚ä¸‹ã®ãƒ•ã‚¡ã‚¤ãƒ«æ§‹æˆä¾‹ã¯ã€Red Hat Linux 6.2ã®ã‚‚ã®ã§ã‚ã‚‹ã€‚ $ ls -l /etc/pam.d/ total 19 -rw-r--r--ã€€1 rootã€€rootã€€ 336 Se
Kanasansoft 2009/09/27
linux

unix

security

pam

authentication
ãƒªãƒ³ã‚¯
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰
ã‚¢ã‚¯ã‚»ã‚¹åˆ¶é™ã‚µãƒ¼ãƒ“ã‚¹ Web ã¯ã€å¸¸ã«å…¨ã¦ã®äººé¡žã«å‘ã‘ã‚‰ã‚Œã¦ã„ã‚‹ã¨ã¯é™ã‚Šã¾ã›ã‚“ ç‰¹å®šã®åœ°åŸŸã‚„ã€ä¼šå“¡å‘ã‘ã®ã‚µãƒ¼ãƒ“ã‚¹ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚‚æ•°å¤šãå˜åœ¨ã—ã¾ã™ ã“ã†ã—ãŸã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã¯ã€é€šå¸¸ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼åã¨ ID ã§ã‚¢ã‚¯ã‚»ã‚¹ã‚’åˆ¶å¾¡ã—ã¦ã„ã¾ã™ æŒ‡å®šã—ãŸ URL ãŒç„¡æ¡ä»¶ã§ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹ã¨ã¯é™ã‚Šã¾ã›ã‚“ æ™‚ã«ã¯ã€ã‚µãƒ¼ãƒãƒ¼ã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’è¦æ±‚ã—ã¦ãã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã®ã§ã™ ã“ã‚Œã‚’åŽ³å¯†ã«åˆ¶å¾¡ã™ã‚‹ã«ã¯ãƒ—ãƒãƒˆã‚³ãƒ«ã®çŸ¥è˜ãŒå¿…è¦ã ã¨æ€ã‚ã‚Œã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãŒ Java ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ API ã¯ã€ã‚µãƒ¼ãƒãƒ¼ã¨ã®é€šä¿¡ã¯éš è”½ã—ã¦ãã‚Œã¾ã™ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯ java.net.PasswordAuthentication ã‚¯ãƒ©ã‚¹ã§è¡¨ã•ã‚Œã¾ã™ ã“ã®ã‚¯ãƒ©ã‚¹ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼åã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸åŒ–ã—ã¦ã„ã¾ã™ public final class PasswordAuthentication extends Object ã“ã®ã‚¯ãƒ©ã‚¹ã®ã‚³ãƒ³ã‚¹ãƒˆãƒ©ã‚¯ã‚¿ã¯æ¬¡ã®ã‚ˆã†ã«ãª
Kanasansoft 2009/06/04
authentication

java

programming
ãƒªãƒ³ã‚¯
koress.jp: OpenIDã®è¥²æ¥ã«å‚™ãˆã‚ˆï¼
è¿½è¨˜: OpenIDå¯¾å¿œã‚µãƒ¼ãƒ“ã‚¹ã¾ã¨ã‚ã‚’ä½œã‚Šã¾ã—ãŸã€‚ ãŸã¶ã‚“ã€2008å¹´ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆï¼ˆWebã‚µãƒ¼ãƒ“ã‚¹)æ¥ç•Œã¯OpenIDã«ã‚ˆã‚‹Webã‚µãƒ¼ãƒ“ã‚¹ã®IDä½“ç³»ã®çµ±ä¸€ã®è’æ³¢ã«æ‰ã¾ã‚Œã‚‹ã“ã¨ã«ãªã‚‹ã¨æ€ã†ã€‚æ—¥æœ¬ã®ã‚µãƒ¼ãƒ“ã‚¹ãƒ—ãƒãƒã‚¤ãƒ€ã¯ã€OpenIDã®è¥²æ¥ã«å‚™ãˆã‚‹ã¹ãã€‚ æµ·ã®å‘ã“ã†ã§ã¯ã™ã§ã«Digg, Wikipedia, Yahoo, Microsoftãªã©ãŒå°Žå…¥ã‚„æ”¯æŒã‚’ç™ºè¡¨ã—ã¦ã„ã‚‹ã»ã‹ã€å¤šãã®å°ã•ãªãƒãƒƒãƒˆã‚µãƒ¼ãƒ“ã‚¹ã¯OpenIDã«é ¼ã£ãŸã‚¢ãƒ¼ãƒªãƒ¼ã‚¢ãƒ€ãƒ—ã‚¿ã®å–ã‚Šè¾¼ã¿ã«ç©æ¥µçš„ã«ãªã£ã¦ã‚‹ã€‚æ—¥æœ¬å›½å†…ã§ã¯ã©ã†ã‹ã¨è¨€ãˆã°ã€niftyã®aboutmeãªã©ã‚’é™¤ã„ã¦å¤§æ‰‹ã®Webã‚µãƒ¼ãƒ“ã‚¹ã¯æœªã æ§˜åã‚’è¦‹ã¦ã„ã‚‹çŠ¶æ…‹ã€‚ãƒªã‚µãƒ¼ãƒãƒ¬ãƒ™ãƒ«ã§ã¯é‡è¦æ€§ãŒæŠŠæ¡ã•ã‚Œã¤ã¤ã‚ã‚‹ä¸€æ–¹ã€çµŒå–¶ãƒ¬ãƒ™ãƒ«ã§ã¯ã€Œãªã«ãã‚Œã€çš„ãªçŠ¶æ…‹ãŒå¤šãã†ã€‚ã„ã‹ã‚“ã€ã„ã‹ã‚“ã‚ˆã€‚ 2008å¹´ã€Yahooã‹Amazonã‹Googleã‹ã‚ã‹ã‚‰ãªã„ã‘ã‚Œã©ã€ã»ã¼é–“é•ã„ãªãã©ã“ã‹ã®æ—¥æœ¬ã®å¤§æ‰‹ã®
Kanasansoft 2007/10/14
authentication

openid

webservice
ãƒªãƒ³ã‚¯
1