Mercari’s passkey adoption | Mercari Engineering
Mercari, Inc. offers C2C marketplace services as well as online and mobile payment solutions. Users can sell items on the marketplace, and make purchases in physical stores. Mercari is actively working on preventing phishing attacks. This is the driving force behind the adoption of passkey authentication. To enhance phishing resistance, several factors need to be considered, leading to the introdu
2020å¹´ã®WebAuthnアップデート
Digital Identity技術勉強会 #iddance Advent Calendar 2020 12æ—¥ã‚ã®è¨˜äº‹ã§ã™ã€‚ 年末ã¨ã„ã†ã“ã¨ã§ã€æ°—楽ã«2020å¹´ã®WebAuthn関連ã®è©±é¡Œã‚’振り返ã£ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚WebAuthnã¯2019å¹´ã«ä¸€åº¦W3C勧告ã«ãªã‚Šã¾ã—ãŸãŒã€ãã®å¾Œã‚‚色々ãªå®Ÿè£…ã§ã®æŽ¡ç”¨ã®æ‹¡å¤§ã‚„ã€WebAuthn Level2ã¨ã„ã†æ–°ã—ã„改訂版ã®ä»•æ§˜ç–定ã®é€²å±•ãªã©ã€2020年も色々動ããŒã‚ã‚Šã¾ã—ãŸã€‚ãれらã®ä¸ã‹ã‚‰ã€èˆˆå‘³ã‚’惹ã‹ã‚ŒãŸè©±é¡Œã‚’解説ã—ã¦ã„ãã¾ã™ã€‚ Safariã§Face ID/Touch IDãŒPlatform Authenticatorã¨ã—ã¦ã‚µãƒãƒ¼ãƒˆWebAuthn周りã§ä»Šå¹´æœ€å¤§ã®é€²å±•ã¨ã„ã†ã¨ã€ã‚„ã¯ã‚ŠSafariã®WebAuthn実装ãŒFace ID/Touch IDã‚’Platform Authenticator（内蔵ã®èªè¨¼ãƒ‡ãƒã‚¤ã‚¹ï¼‰ã¨ã—ã¦ã‚µãƒãƒ¼ãƒˆã—ãŸã“ã¨ãŒæŒ™ã’られ
マイクãƒã‚µãƒ¼ãƒ“スã«ãŠã‘る内部通信ã®èªè¨¼ã«ã¤ã„ã¦
"Backend Engineer’s meetup ~マイクãƒã‚µãƒ¼ãƒ“スã«ãŠã‘ã‚‹èªè¨¼èªå¯åŸºç›¤~"ã®ç™ºè¡¨è³‡æ–™ã§ã™ã€‚ https://connpass.com/event/142624/
Secure Secure Shell
You may have heard that the NSA can decrypt SSH at least some of the time. If you have not, then read the latest batch of Snowden documents now. All of it. This post will still be here when you finish. My goal with this post here is to make NSA analysts sad. TL;DR: Scan this post for fixed width fonts, these will be the config file snippets and commands you have to use. Warning: You will need a re
Keycloak
Single-Sign On Users authenticate with Keycloak rather than individual applications. This means that your applications don't have to deal with login forms, authenticating users, and storing users. Once logged-in to Keycloak, users don't have to login again to access a different application. This also applies to logout. Keycloak provides single-sign out, which means users only have to logout once t
Basic èªè¨¼æƒ…å ±ãŒ ISO-8859-1 ã‹ã‚‰ UTF-8 ã«ã‚ˆã‚‹ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã«å¤‰ã‚ã‚Šã¾ã—㟠(影響ã‚ã‚Š) | Firefox サイト互æ›æ€§æƒ…å ±
Firefox ã¯å¾“æ¥ã€Basic HTTP èªè¨¼ãƒªã‚¯ã‚¨ã‚¹ãƒˆç”¨ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼åã¨ãƒ‘スワード㫠ISO-8859-1 æ–‡å—エンコーディングを採用ã—ã¦ã„ã¾ã—ãŸã€‚Firefox 59 以é™ã€ãƒ•ãƒ©ãƒ³ã‚¹èªžã®ã‚¢ã‚¯ã‚»ãƒ³ãƒˆè¨˜å·ä»˜ãæ–‡å—ãªã©éž ASCII æ–‡å—ãŒé©åˆ‡ã«ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•ã‚Œã‚‹ã‚ˆã†ã€Authorization ヘッダー㫠UTF-8 ãŒæŽ¡ç”¨ã•ã‚Œã¾ã™ã€‚ ã‚ãªãŸã®ã‚µã‚¤ãƒˆãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ã®èªè¨¼æƒ…å ±ã«è‹±æ•°å—や一般的ãªè¨˜å·ã®ã¿ã‚’許容ã—ã¦ã„ã‚‹å ´åˆã€ã“ã®å¤‰æ›´ã¯ä½•ã‚‰å•é¡Œã¨ãªã‚Šã¾ã›ã‚“。ã—ã‹ã—ã€éž ASCII ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼åやパスワードをå—ã‘入れã¦ã„るサイト㯠ISO-8859-1 㨠UTF-8 ã®ä¸¡æ–¹ã«å¯¾å¿œã™ã‚‹ã‚ˆã†æ›´æ–°ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã€ã•ã‚‚ãªã„ã¨ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒã‚°ã‚¤ãƒ³ã«å•é¡ŒãŒç”Ÿã˜ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ Google Chrome ã¯æ—¢ã« UTF-8 を採用ã—ã¦ã„ã‚‹ãŸã‚ã€RFC 7617 ã§æŒ‡æ‘˜ã•ã‚Œã¦ã„るよã†ã«ã€äººæ°—ã®ã‚¢ãƒ—リケーションフレ
How To Implement API Authentication with JSON Web Tokens and Passport | DigitalOcean
Introduction Many web applications and APIs use a form of authentication to protect resources and restrict their access only to verified users. JSON Web Token (JWT) is an open standard that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. This guide will walk you through how to implement authentication for an API using JWTs and Passpo
Scheduled Maintenance
Redirecting We're redirecting you to forgerock.com. If you still see this message after 5 seconds, please click here. ForgeRock Home
LINE DEVELOPER DAY 2016 開催ã®ãŠçŸ¥ã‚‰ã› « LINE Engineers' Blog
LINEæ ªå¼ä¼šç¤¾ã¯ã€2023å¹´10月1æ—¥ã«LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã«ãªã‚Šã¾ã—ãŸã€‚LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã®æ–°ã—ã„ブãƒã‚°ã¯ã“ã¡ã‚‰ã§ã™ã€‚ LINEヤフー Tech Blog saegusa2017-04-16Yoshihiro was a network engineer at LINE, responsible for all levels of LINE's infrastructure. Since being named Infra Platform Department manager, he is finding ways to apply LINE's technology and business goals to the platform. ã“ã‚“ã«ã¡ã¯ã€‚LINEã§ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚„データセンターを担当ã—ã¦ã„る三æžã§ã™ã€‚2017å¹´1月ã«JANOG39ã§ç™»å£‡ã™ã‚‹æ©Ÿä¼šã‚’é ‚ãã¾ã—ãŸã®ã§ã€ä»Šå›ž
Windows NTLM ã¾ãŸã¯ Kerberos 以外ã®ã‚µãƒ¼ãƒãƒ¼ã‹ã‚‰ã®èªè¨¼ã‚¨ãƒ©ãƒ¼ - Windows Server
ã“ã®è¨˜äº‹ã§ã¯ã€NTLM ãŠã‚ˆã³ Kerberos サーãƒãƒ¼ã§ Windows 7 ãŠã‚ˆã³ Windows Server 2008 R2 ベースã®ã‚³ãƒ³ãƒ”ューターをèªè¨¼ã§ããªã„ã€ã„ãã¤ã‹ã®èªè¨¼ã‚¨ãƒ©ãƒ¼ã®å•é¡Œã®è§£æ±ºç–ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ ã“ã‚Œã¯ã€ãƒãƒ£ãƒãƒ« ãƒã‚¤ãƒ³ãƒ‰ トークンã®å‡¦ç†æ–¹æ³•ã®é•ã„ãŒåŽŸå› ã§ç™ºç”Ÿã—ã¾ã™ã€‚ 元㮠KB 番å·: 976918 ç¾è±¡ Windows 7 ãŠã‚ˆã³ Windows Server 2008 R2 ã§ã¯ã€æ—¢å®šã§ãƒãƒ£ãƒãƒ« ãƒã‚¤ãƒ³ãƒ‰ トークン (CBT) ã®ã‚µãƒãƒ¼ãƒˆã‚’å«ã‚€çµ±åˆèªè¨¼ã®æ‹¡å¼µä¿è·ãŒã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã¾ã™ã€‚ 次ã®ç¾è±¡ã® 1 ã¤ä»¥ä¸ŠãŒç™ºç”Ÿã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ãƒãƒ£ãƒãƒ« ãƒã‚¤ãƒ³ãƒ‰ã‚’サãƒãƒ¼ãƒˆã™ã‚‹ Windows クライアントã¯ã€Windows Kerberos 以外ã®ã‚µãƒ¼ãƒãƒ¼ã«ã‚ˆã£ã¦èªè¨¼ã•ã‚Œã¾ã›ã‚“。 プãƒã‚ã‚· サーãƒãƒ¼ã‹ã‚‰ã® NTLM èªè¨¼ã‚¨ãƒ©ãƒ¼ã€‚ Windows 以外㮠N
waffle-parent – About
Project Modules This project has declared the following modules: Name Description
Redmine・Gitlab・Jenkins ã®ãƒã‚°ã‚¤ãƒ³ãƒ‘スワードã®ç®¡ç†ãŒå¤§å¤‰ã«ãªã£ãŸã®ã§ OAuth 化ã—㟠- suer ã®ãƒ–ãƒã‚°
開発環境ã¨ã—㦠Gitlabã€Jenkinsã€Redmine をセットã§ä½¿ã£ã¦ã„ã‚‹ã®ã§ã™ãŒã€ãã‚Œãžã‚Œã«ãƒ‘スワードã®è¨å®šãŒå¿…è¦ã¨ãªã£ã¦ç®¡ç†ãŒé¢å€’ã§ã™ã€‚ アカウントを一ã¤ã«çµ±åˆã—ãŸã„。ã¨ã„ã†ã“ã¨ã§ã‚„ã£ã¦ã¿ã¾ã—ãŸã€‚ 環境 Redmine 2.3.0 Jenkins 1.499 Gitlab 5.2 æ–¹é‡ Redmine ã«ãƒ—ラグイン㧠OAuth プãƒãƒã‚¤ãƒ€ã®æ©Ÿèƒ½ã‚’è¿½åŠ ã—ã€Redmine ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã§ Jenkins 㨠Gitlab ã¸ãƒã‚°ã‚¤ãƒ³ã§ãるよã†ã«ã—ã¾ã™ã€‚ Redmine ã« OAuth プãƒãƒã‚¤ãƒ€ã®æ©Ÿèƒ½ã‚’ã¤ã‘ã‚‹ ã‚„ã‚ŠãŸã„ã“ã¨ã«è¿‘ã„プラグインãŒã‚ã£ãŸã®ã§ã™ãŒã€Rails3 以é™ã® Redmine ã«å¯¾å¿œã—ã¦ã„ãªã‹ã£ãŸã®ã§ã€fork ã—ã¦ã€ã¤ã„ã§ã«æ—¥æœ¬èªžåŒ–ã—ã¦ãŠãã¾ã—ãŸã€‚ https://github.com/suer/redmine_oauth_provider http://red
JavaServlet : コンテナã®æ©Ÿèƒ½ã‚’使ã‚ãšã«BASICèªè¨¼ã‚’è¡Œã†
BASICèªè¨¼ã¯ã»ã¨ã‚“ã©ã®Webサーãƒãƒ¼ã€WebブラウザãŒå¯¾å¿œã—ã¦ãŠã‚Šã€ç°¡å˜ã«ä½¿ãˆã‚‹ã“ã¨ãŒç‰¹å¾´ã§ã™ãŒã€ãƒ‘スワードã¯ã‚¯ãƒªã‚¢ãƒ†ã‚スト(平文)ã§é€ã‚‰ã‚Œã¾ã™ã€‚ 実際ã¯E-Mailã®æ·»ä»˜ãƒ•ã‚¡ã‚¤ãƒ«ã§ã‚ˆã使ã‚れるBASE64ã¨ã„ã†å½¢å¼ã§ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã•ã‚Œã¦ã„ã¾ã™ãŒã€æš—å·åŒ–ã•ã‚Œã¦ã„ã‚‹ã‚ã‘ã§ã¯ãªã„ã®ã§ãƒ‡ã‚³ãƒ¼ãƒ‰ã—ã¦æ”¹ã–ã‚“ã™ã‚‹ã“ã¨ã‚‚容易ã§ã™ã€‚ ã§ã™ã‹ã‚‰ã€å¤šãã®å ´åˆã¯SSLã¨ã‚ã‚ã›ã¦æš—å·åŒ–ã—ã¦ç”¨ã„られã¾ã™ã€‚ Tomcatç‰ã®ã‚µãƒ¼ãƒ–レットコンテナã«ã‚‚ã€ã“ã®BASICèªè¨¼(基本èªè¨¼)ã‚’è¡Œã†æ©Ÿèƒ½ãŒä»˜ã„ã¦ã„ã¾ã™ã€‚「web.xmlã€ãƒ•ã‚¡ã‚¤ãƒ«ã§èªè¨¼æ–¹å¼ç‰ã‚’指定ã—〠コンテナã§å®Ÿéš›ã®èªè¨¼å‡¦ç†ã‚’è¡Œã„ã¾ã™ã€‚ã“ã®æ–¹æ³•ã§ç°¡å˜ã«èªè¨¼ã‚’実装ã§ãるコンテナもã‚ã‚Šã¾ã™ãŒã€å½“然ãªãŒã‚‰ã‚³ãƒ³ãƒ†ãƒŠã«ä¾å˜ã—ã¦ã—ã¾ã„ã¾ã™ã€‚ ãŸã¨ãˆã°ã€Tomcat用ã«ä½œã£ãŸã‚‚ã®ã¯ã€ãã®ã¾ã¾ã§ã¯WebSphereã‚„WebLogicã§ã¯å‹•ä½œã—ãªã„ã§ã—ょã†ã€‚ ã“ã‚ŒãŒå•é¡Œã«ãªã‚‹å ´åˆ(
OAuthã®èªè¨¼ã«WebViewを使ã†ã®ã¯ã‚„ã‚よã†
Androidã‹ã‚‰Twitterã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ãŸã‚ã®ãƒ©ã‚¤ãƒ–ラリã¨ã—ã¦ï¼ŒTwitter4JãŒæœ‰åã§ã™ï¼Ž ã“れを使ã£ã¦ã¿ã‚ˆã†ã¨ï¼Œã€ŒAndroid Twitter4Jã€ã¨æ¤œç´¢ã™ã‚‹ã¨ èªè¨¼ã«WebViewを使ã£ãŸä¾‹ãŒãŸãã•ã‚“出ã¦ãã¾ã™ï¼Ž ・・・ã„や，ã¡ã‚‡ã£ã¨ã¾ã¦ï¼Ž ãã‚Œã¯ã¡ã‚‡ã£ã¨ã¾ãšã„ã ã‚ã†ï¼Ž ãã†ã„ã†ã‚ã‘ã§ã‚‚ã†ã¡ã‚‡ã£ã¨è³¢ã„方法を探ã—ã¦ã¿ã¾ã—ãŸï¼Ž 何ãŒã¾ãšã„ã®ã• 「Android Twitter4Jã€ã¨æ¤œç´¢ã™ã‚‹ã¨ï¼Œä¸Šä½ã«ã“ã‚“ãªãƒšãƒ¼ã‚¸ãŒå‡ºã¦ãã¾ã™ï¼Ž Twitter4jを使ã£ã¦OAuthèªè¨¼ã‚’アプリ内ã§è¡Œã†æ–¹æ³• Twitter4j-2.2.xを使ã£ãŸOAuthèªè¨¼ã®ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ä¾‹ twitter4jã§ãƒ„イートã™ã‚‹ Android+Twitter4Jã§OAuthã™ã‚‹ãŸã‚ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ 上ã®ã‚µã‚¤ãƒˆã§ã¯æ¬¡ã®æ§˜ã¯æ–¹æ³•ã‚’ã¨ã£ã¦ã„ã¾ã™ï¼Ž アプリ内ã«WebViewを貼り付㑠WebViewã§Twitterã®èªè¨¼ç”»é¢
èªè¨¼ãŒå¿…è¦ãªã‚µã‚¤ãƒˆã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã“ã¨ã‚’考ãˆã¦ã¿ãŸ - Fly me to the Luna
org.eclipse.core.netã¨org.eclipse.ui.netプラグインãŒã‚る環境ã§ã€èªè¨¼ãŒå¿…è¦ãªã‚µã‚¤ãƒˆã¸æŽ¥ç¶šã™ã‚‹ã¨è‡ªå‹•ã§ãƒ¦ãƒ¼ã‚¶åやパスワードを入力ã™ã‚‹ãƒ€ã‚¤ã‚¢ãƒã‚°ãŒè¡¨ç¤ºã•ã‚Œã¾ã™ã€‚ ã“ã†ã„ã†ãƒ€ã‚¤ã‚¢ãƒã‚°ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã®ã§ã€ãƒ¦ãƒ¼ã‚¶åやパスワードãŒå¿…è¦ãªæ™‚ã«å…¥åŠ›ã‚’ã†ãªãŒã—ã¦ãれるã®ã¯ã„ã„ã®ã§ã™ãŒã€ä¸€åº¦å…¥åŠ›ã—ãŸã®ãªã‚‰ã€ã©ã“ã‹ã«æƒ…å ±ã‚’ä¿æŒã—ã¦ãŠããŸããªã‚‹ã‚ã‘ã§ã€ã©ã†ã‚„ã‚‹ã®ã‹ã€ãƒ¡ãƒ¢ã‚’残ã—ã¦ãŠãã¾ã™ã€‚ 環境ã«ã¤ã„㦠OS:Ubuntu Linux 9.10 Java:Sun Java 1.6.0-16 Javaã§èªè¨¼ãŒå¿…è¦ãªã‚µã‚¤ãƒˆã«æŽ¥ç¶šã™ã‚‹ä»•çµ„ã¿ã‚’ã¾ãšè¦‹ã¦ã¿ãŸã€‚ Javaã«ã¯èªè¨¼ãŒå¿…è¦ãªã‚µã‚¤ãƒˆã«æŽ¥ç¶šã—ãŸã¨ãã«èªè¨¼æƒ…å ±ã‚’ä¸Žãˆã‚‹ãŸã‚ã®æŠ½è±¡ã‚¯ãƒ©ã‚¹ãŒã‚ã‚Šã¾ã™ã€‚ãã‚ŒãŒjava.net.Authenticatorã§ã™ã€‚冒é ã®ãƒ€ã‚¤ã‚¢ãƒã‚°ã¯EclipseãŒç‹¬è‡ªã«Authenticatorã®å…·è±¡ã‚¯ãƒ©ã‚¹ã‚’作æˆã—
ランã‚ング
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - supertokens/supertokens-core: Open source alternative to Auth0 / Firebase Auth / AWS Cognito
GitHub - google/OpenSK: OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards.
GitHub - dwyl/learn-json-web-tokens: :closed_lock_with_key: Learn how to use JSON Web Token (JWT) to secure your next Web App! (Tutorial/Example with Tests!!)
第八回 #渋谷java - Java 8 ã§é€ ã‚‹èªè¨¼ç³»
Loading...
{{#tags}}- {{label}}
{{/tags}}