YConnect(OAuth2.0/OpenID Connect)をリリースã—ã¾ã—ãŸï¼ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã¯ã€2023å¹´10月1æ—¥ã«LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã«ãªã‚Šã¾ã—ãŸã€‚LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã®æ–°ã—ã„ブãƒã‚°ã¯ã“ã¡ã‚‰ã§ã™ã€‚LINEヤフー Tech Blog
å˜ãªã‚‹ OAuth 2.0 ã‚’èªè¨¼ã«ä½¿ã†ã¨ã€è»ŠãŒé€šã‚Œã‚‹ã»ã©ã®ã©ã§ã‹ã„ã‚»ã‚ュリティー・ホールãŒã§ãã‚‹
In some of the feedback I have gotten on the openID Connect spec, the statement is made that Connect is too complicated. That OAuth 2.0 is all you need to do authentication. Many point to Identity Pro… 英語èªã¿ãŸããªã„ã¨ã„ã†äººã®ãŸã‚ã«ç°¡å˜ã«è§£èª¬ã™ã‚‹ã¨â€¦ OAuth 2.0 ã® implicit flow を使ã£ã¦ã€Œèªè¨¼ã€ã‚’ã—よã†ã¨ã™ã‚‹ã¨ã€ã¨ã£ã¦ã‚‚大ããªç©´ãŒé–‹ãã¾ã™ã€‚ カット＆ペーストアタックãŒå¯èƒ½ã ã‹ã‚‰ã§ã™ã€‚ OAuth èªè¨¼ï¼Ÿã¯ã€å›³ï¼‘ã®ã‚ˆã†ãªæµã‚Œã«ãªã‚Šã¾ã™ã€‚ 図１ OAuth èªè¨¼ï¼Ÿã®æµã‚Œ 一見ã€å•é¡Œãªã•ãã†ã«è¦‹ãˆã¾ã™ã€‚ã—ã‹ã—ã€ãã‚Œã¯ã™ã¹ã¦ã®ã‚µã‚¤ãƒˆãŒã€Œè‰¯ã„サイトã€ãªã‚‰ã°ã§ã™ã€‚ Site_A
OAuth.jp
ã„ã¾ã¾ã§ Mix-up Attack 㯠Client ㌠AS 毎㫠redirect_uri を使ã„分ã‘ã¦ã„ã‚Œã°é˜²ã’ã‚‹ã¨ä¿¡ã˜ã‚‰ã‚Œã¦ãã¾ã—ãŸãŒã€ãã‚Œã˜ã‚ƒé˜²ã’ãªã„ケースもã‚るよã£ã¦ã®ãŒ OAuth ML ã«æŠ•ç¨¿ã•ã‚Œã¾ã—ãŸã€‚ ç´°ã‹ã„解説ã¯è‹±èªžèªã‚“ã§ã‚‚らã†ã¨ã—ã¦ã€ã‚·ãƒ¼ã‚±ãƒ³ã‚¹ã«ã™ã‚‹ã¨ã“ã†ã„ã†ã“ã¨ã§ã™ã€‚ Attacker AS ㌠(Display Name ã‚„ãƒã‚´ç‰ã‚’通ã˜ã¦) 一見 Honest Client ã«è¦‹ãˆã‚‹ã‚ˆã†ãª Client (Attacker Client) ã‚’ Honest AS ã«ç™»éŒ²ã—ã¦ãŠãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ User ㌠Attacker AS é¸ã‚“ã§ã‚‹ã®ã« Honest AS ã«é£›ã‚“㧠Approve ã—ã¦ã—ã¾ã£ã¦ã‚‹éƒ¨åˆ†ã‚‚ã€Attacker Proxy ãŒåˆ©ç”¨å¯èƒ½ãªçŠ¶æ³ (e.g., Client ㌠HTTP ãªã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆã§ Honest AS ã®ãƒã‚°ã‚¤ãƒ³ãƒœã‚¿ãƒ³ç‰ã‚’
OAuth 2.0を使ã†ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãªAndroidアプリã®ä½œã‚Šæ–¹ （1/3） - ï¼ IT
ãƒã‚¤ãƒ†ã‚£ãƒ–アプリã§å®Ÿè·µï¼ mixi Graph API活用法 OAuth 2.0を使ㆠソーシャルãªAndroidアプリã®ä½œã‚Šæ–¹ æ ªå¼ä¼šç¤¾ãƒŸã‚¯ã‚·ã‚£ システム本部 技術部 ãŸã‚“ã½ã½ã‚°ãƒ«ãƒ¼ãƒ— 藤崎 å‹æ¨¹ プラットフォームサービス開発部 鶴原 翔夢 2011/3/30 最近よã耳ã«ã™ã‚‹ã€ŒOAuthã€ã¨ã¯ã€mixiã€Facebookã€Twitterãªã©ã®å¤–部サービスã¨è‡ªã‚¢ãƒ—リケーションを連æºã™ã‚‹ãŸã‚ã®æŠ€è¡“ã§ã™ã€‚ 「クラウドã€ã€Œã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã€ã¨ã„ã†ã‚ーワードãŒå«ã°ã‚Œã¦ã„る昨今ã§ã¯ã€ã“ã†ã„ã£ãŸé€£æºã‚’ã„ã‹ã«ã†ã¾ãè¡Œã†ã‹ã¨ã„ã†ã“ã¨ãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ä½“験をå‘上ã•ã›ã‚‹éµã¨ãªã‚Šã¾ã™ã€‚ 特ã«ã€Œã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã€ã‚’å–り入れるã“ã¨ã¯ä»¥ä¸‹ã®ã‚ˆã†ãªç‚¹ã§ãƒ¡ãƒªãƒƒãƒˆãŒã‚ã‚‹ã¨è€ƒãˆã‚‰ã‚Œã¾ã™ã€‚ ユーザーã®ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚°ãƒ©ãƒ•ã‚’活用ã—ã¦ã€ã‚¢ãƒ—リをãƒã‚¤ãƒ©ãƒ«ãƒ»ãƒžãƒ¼ã‚±ãƒ†ã‚£ãƒ³ã‚°ã§ãã‚‹ ç¾å®Ÿã®äººé–“関係をベースã«ã—ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ä½“験（UX）をæä¾›ã—ã€ç¶™ç¶šçš„ã«ã‚¢ãƒ—リを使ã£
PECL :: Package :: oauth
Michael Wallner < mike at php dot net > (lead) [details] John Jawed < jawed at php dot net > (lead) [details] Felipe Pena < felipe at php dot net > (developer) [details] Rasmus Lerdorf < rasmus at php dot net > (lead) [details] Tjerk Meesters < datibbaw at php dot net > (developer) [details] Sean DuBois < sean at siobud dot com > (lead) [details]
The OAuth 2.0 Protocol
The OAuth 2.0 Protocol draft-ietf-oauth-v2-10 Abstract ã“ã‚Œã¯OAuth 2.0プãƒãƒˆã‚³ãƒ«ã®ä»•æ§˜æ›¸ã§ã‚ã‚‹. Status of this Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is
Web Authorization Protocol (oauth)
Groups By area/parent Apps & Realtime General Internet Ops & Management Routing Security Web and Internet Transport IAB IRTF IETF LLC RFC Editor Other Active AGs Active Areas Active Directorates Active IAB Workshops Active Programs Active RAGs Active Teams New work Chartering groups BOFs BOF Requests Other groups Concluded groups Non-WG lists Documents Search Recent I-Ds I-D submission IESG dashbo
mod_auth_openid - Trac
Introduction : The Apache OpenID Module mod_auth_openid is an authentication module for the Apache 2 webserver. It handles the functions of an OpenID consumer as specified in the OpenID 2.0 specification. See the FAQ for more information. Download the current release from the the releases page. Example Most people want to see an example first: http://coop.butterfat.net/~bmuller/mod_auth_openid/ot
ãŸã‘ã¾ã‚‹ / OAuth - リソースã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’代行ã™ã‚‹ãƒ—ãƒãƒˆã‚³ãƒ«
_ OAuth - リソースã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’代行ã™ã‚‹ãƒ—ãƒãƒˆã‚³ãƒ« [oauth][openid] [2007-09-23-1] 㧠AtomPub ã®èªè¨¼ã«ã¤ã„ã¦æ›¸ã„ãŸã‹ã‚‰ã¨ã„ã†ã‚ã‘ã§ã¯ãª ã„ã®ã§ã™ãŒï¼ŒOAuth ã¨ã„ã†ãƒ—ãƒãƒˆã‚³ãƒ«ã®ä»•æ§˜ã‚’æ–œã‚èªã¿ã—ãŸã®ã§ãƒ¡ãƒ¢ã—㦠ãŠãã¾ã™ï¼Žé–“é•ã„ãŒã‚ã£ãŸã‚‰æ•™ãˆã¦ã„ãŸã ã‘ã‚‹ã¨å¬‰ã—ã„ã§ã™ m(_ _)m (追記) OAuth ã®ã€ŒèƒŒæ™¯ã€ã¿ãŸã„ã®ã«ã¤ã„ã¦ã¯ï¼Œmiyagawa ã•ã‚“ã‹ã‚‰ã‚‚ら㣠ãŸã‚³ãƒ¡ãƒ³ãƒˆã¨ï¼Œã¾ã¡ã‚…ã•ã‚“ã®ã‚¨ãƒ³ãƒˆãƒªãŒå‚考ã«ãªã‚Šã¾ã™ï¼Ž - miyagawa ã•ã‚“ oAuthã¯Flickr,GoogleAuthSub,Y!BBAuth,AOL openAuth,TypeKeyãªã‚“ã‹ã® çµ±åˆãƒ—ãƒãƒˆã‚³ãƒ«ã¨ã„ã†ä½ç½®ã¥ã‘。例ã§ã¯401->WWW-Authenitcate㌠handshake ã«ãªã£ã¦ã‚‹ã‘ã©å®Ÿéš›ã¯ã‚‚ã£ã¨ä»–ã®æ–¹æ³•ã§é‹ç”¨ã•ã‚Œã‚‹ã‚“ã˜ã‚ƒãªã„ ã‹ãªã - ã¾ã¡ã‚…
Apacheã§çµ±åˆWindowsèªè¨¼ã‚’使ㆠ- daily dayflower
å‰æ›¸ã çµ±åˆ Windows èªè¨¼ã¨ã¯ï¼Œãƒ‰ãƒ¡ã‚¤ãƒ³ã®èªè¨¼æƒ…å ±ã‚’ä½¿ã£ã¦ HTTP サーãƒã«èªè¨¼ã—ã¦ã‚‚らã†æ–¹å¼ã§ã™ã€‚Windows クライアントãŒãƒ‰ãƒ¡ã‚¤ãƒ³ã«ãƒã‚°ã‚¤ãƒ³ã—ã¦ã„ã‚Œã°ï¼Œèªè¨¼ãƒ€ã‚¤ã‚¢ãƒã‚°ãŒå‡ºç¾ã™ã‚‹ã“ã¨ãªã自動的ã«èªè¨¼ã•ã‚Œã¾ã™ã€‚çµ±åˆ Windows èªè¨¼ã«ã¯ä»¥ä¸‹ã®2通りãŒã‚ã‚Šã¾ã™ã€‚ NTLM èªè¨¼ SPNEGO èªè¨¼ï¼ˆActive Directory 環境下；ã™ãªã‚ã¡ Kerberos GSSAPI を利用） 今回ã¯ã‚ã‘ã‚ã£ã¦ NTLM èªè¨¼ã‚’扱ã„ã¾ã™ã€‚ Apache on Unix*1 㧠NTLM èªè¨¼ã‚’サãƒãƒ¼ãƒˆã™ã‚‹ã‚‚ã®ã«ã¯ï¼Œæœ‰åãªã‚‚ã®ã§ä»¥ä¸‹ã®ç‰©ãŒã‚ã‚Šã¾ã™ã€‚ mod_ntlm Unofficial mod_ntlm modification mod_auth_ntlm_winbind å‰è€… 2 ã¤ã¯ã»ã¼åŒã˜ã‚‚ã®ï¼ˆ2 ã¤ã‚ãŒæ”¹è‰¯ç‰ˆã§ Apache 2.2 ã«ã‚‚対応ã—ã¦ã„る）ã§ã™ãŒï¼Œå¾Œè€…ã® m
仕様ã‹ã‚‰å¦ã¶OpenIDã®ã‚ホン ï¼ ï¼ IT
ã«ã‚ã‹ã«æ³¨ç›®ã‚’集ã‚ã¦ã„ã‚‹ã€URLã‚’IDã¨ã—ã¦åˆ©ç”¨ã™ã‚‹èªè¨¼ãƒ—ãƒãƒˆã‚³ãƒ«ã€OpenID。本連載ã§ã¯ã“ã®ãƒ—ãƒãƒˆã‚³ãƒ«ã®ä»•çµ„ã¿ã‚’技術的ã«è§£èª¬ã™ã‚‹ã¨ã¨ã‚‚ã«ã€OpenIDãŒä»Šå¾Œã©ã®ã‚ˆã†ã«æ´»ç”¨ã•ã‚Œã¦ã„ãã®ã‹ã‚’紹介ã™ã‚‹ï¼ˆç·¨é›†éƒ¨ï¼‰ OpenIDã£ã¦ãªã‚“ã ã‚ã†ï¼Ÿ ç¾åœ¨ã€å›½å†…外ã§ã«ã‚ã‹ã«æ³¨ç›®ã•ã‚Œã¤ã¤ã‚ã‚‹OpenIDã¨ã„ã†ä»•çµ„ã¿ã‚’èžã„ãŸã“ã¨ãŒã‚ã‚‹ã§ã—ょã†ã‹ï¼Ÿ ã“ã‚Œã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ä¸å¿ƒã®åˆ†æ•£IDèªè¨¼ã‚·ã‚¹ãƒ†ãƒ ã§ã™ãŒã€ã¾ã 日本ã§ã®æ™®åŠã¯é€²ã‚“ã§ã„ãªã„状æ³ã§ã™ã€‚ ã“ã‚Œã«ã¯ã„ãã¤ã‹åŽŸå› ãŒæŒ™ã’られるã§ã—ょã†ãŒã€ç†è€…ã¯OpenIDãŒæ£ã—ãç†è§£ã•ã‚Œã¦ã„ãªã„ã“ã¨ãŒåŽŸå› ã ã¨è€ƒãˆã¾ã™ã€‚ 本連載ã§ã¯OpenIDã®ç¾è¡Œä»•æ§˜ã€ãŠã‚ˆã³ãã®æ‹¡å¼µä»•æ§˜ã¨ã¨ã‚‚ã«ã€å®Ÿè£…を例ã«å–ã‚Šã¤ã¤OpenIDã¨ã¯ä½•ã‹ã¨ã„ã†ã“ã¨ã‚’明らã‹ã«ã—ã¦ã„ãã¾ã™ã€‚最終的ã«ã¯OpenIDãŒåˆ‡ã‚Šé–‹ã未æ¥ã‚’見るãŸã‚ã€ç¾åœ¨ç–定ä¸ã®æ¬¡æœŸä»•æ§˜ã«ã¤ã„ã¦ã‚‚触れã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ 広ãŒã‚Šã¤ã¤ã‚るブラウザベ
livedoor Authã®é‹å–¶çµ‚了ã®ãŠçŸ¥ã‚‰ã›
livedoor Authã®é‹å–¶çµ‚了ã®ãŠçŸ¥ã‚‰ã› 2021å¹´3月末をもã¡ã¾ã—ã¦ã€livedoor Authã®é‹å–¶ã‚’終了ã„ãŸã—ã¾ã—ãŸã€‚ é•·ãã«æ¸¡ã‚Šã”愛顧をã„ãŸã ãã¾ã—ã¦ã€èª ã«ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸã€‚ livedoorホームã¸æˆ»ã‚‹
1
ランã‚ング
障害
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Homepage - Opauth
GitHub - google/gtm-oauth2: Google Toolbox for Mac - OAuth 2 Controllers
gtm-oauth - Project Hosting on Google Code
PHP: OAuth - Manual
http://www.machu.jp/posts/20051101/p01/
{{#tags}}- {{label}}
{{/tags}}