[B! OAuth] itboyã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

itboy id:itboy

OAuthã«é–¢ã™ã‚‹itboyã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (15)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚µãƒ¼ãƒ“ã‚¹çµ‚äº†ã®ãŠçŸ¥ã‚‰ã›
ã‚µãƒ¼ãƒ“ã‚¹çµ‚äº†ã®ãŠçŸ¥ã‚‰ã› ã„ã¤ã‚‚Yahoo! JAPANã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’ã”åˆ©ç”¨ã„ãŸã ãèª ã«ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ ãŠå®¢æ§˜ãŒã‚¢ã‚¯ã‚»ã‚¹ã•ã‚ŒãŸã‚µãƒ¼ãƒ“ã‚¹ã¯æœ¬æ—¥ã¾ã§ã«ã‚µãƒ¼ãƒ“ã‚¹ã‚’çµ‚äº†ã„ãŸã—ã¾ã—ãŸã€‚ ä»Šå¾Œã¨ã‚‚Yahoo! JAPANã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’ã”æ„›é¡§ãã ã•ã„ã¾ã™ã‚ˆã†ã€ã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚
itboy 2014/05/07
security

oauth
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2014/02/27/20140226openid-foundation-launches-openid-connect-identity-protocol-with-support-from-google-microsoft-others/
itboy 2014/02/27
openid

oauth

security
ãƒªãƒ³ã‚¯
ã€ŒOAuthã€ã®åŸºæœ¬å‹•ä½œã‚’çŸ¥ã‚‹
ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã®ä¸–ç•Œã¸ã‚ˆã†ã“ã ã¯ã˜ã‚ã¾ã—ã¦ã€OpenID Foundation Japanã§ã‚¨ãƒãƒ³ã‚¸ã‚§ãƒªã‚¹ãƒˆã‚’ã—ã¦ã„ã‚‹Novã§ã™ã€‚ ã“ã®é€£è¼‰ã§ã¯ã€åƒ•ã‚’å«ã‚OpenID Foundation Japanã«ã‹ã‹ã‚ã‚‹ãƒ¡ãƒ³ãƒãƒ¼ã§ã€OpenID Connectã‚„OAuthãªã©ã®ã€Œãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ï¼ˆDigital Identityï¼‰ã€ã«ã‹ã‹ã‚ã‚‹æŠ€è¡“ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¦ã„ãã¾ã™ã€‚ APIã‚¨ã‚³ãƒŽãƒŸãƒ¼æ™‚ä»£ã®ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ ä¸–ç•Œä¸ã§9å„„äººã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’æŠ±ãˆã‚‹ã€ŒFacebookã€ã‚„5å„„äººã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’æŒã¤ã€ŒTwitterã€ãªã©ã€å·¨å¤§ãªã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚°ãƒ©ãƒ•ã‚’æŒã¤ã‚µãƒ¼ãƒ“ã‚¹ãŒã€æ—¥ã€…ãã®å˜åœ¨æ„Ÿã‚’å¢—ã—ã¦ã„ã¾ã™ã€‚æ—¥æœ¬ã§ã‚‚ã€ã‚°ãƒªãƒ¼ã‚„ãƒ¢ãƒã‚²ãƒ¼ãªã©ãŒãã‚Œãžã‚Œã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚²ãƒ¼ãƒ ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã‚’å…¬é–‹ã—ã€å›½å†…ã«ä¸€æ°—ã«å·¨å¤§ãªã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚²ãƒ¼ãƒ å¸‚å ´ã‚’ä½œã‚Šä¸Šã’ã¾ã—ãŸã€‚æœ€è¿‘ã§ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼æ•°ãŒ5000ä¸‡äººã‚’çªç ´ã—ã€ãƒ—ãƒ©ãƒƒãƒˆ
itboy 2012/08/28
API

oauth

programming
ãƒªãƒ³ã‚¯
ã„ã¾ã•ã‚‰ã§ã™ã‘ã©ã€ŒOAuthãªã‚‰å®‰å¿ƒã€ã¨ã„ã†èª¤è§£ã«ã¤ã„ã¦
Twitter ã® BASIC èªè¨¼ãŒå»ƒæ¢ã•ã‚Œ OAuth ãŒæ¨™æº–ã®èªè¨¼æ–¹æ³•ã«ãªã‚Šã¾ã—ãŸãã€‚ BASIC èªè¨¼ã¨ OAuth ã‚‚ã®ã™ã”ãç°¡å˜ã«è¨€ã†ã¨ã€ BASIC èªè¨¼ã¨ã„ã†ã®ã¯æ¯Žå›ž ID ã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä½¿ã†èªè¨¼æ–¹æ³•ãªã®ã§ å¤–éƒ¨ã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’åˆ©ç”¨ã™ã‚‹ã«ã¯ ãã®é‹å–¶è€…ã« ID ã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’é ã‘ã‚‹ã“ã¨ã«ãªã‚‹ã€‚ ãã‚Œã«å¯¾ã—ã¦ OAuth ã¨ã„ã†ã®ã¯ Twitter ã‹ã‚‰å°‚ç”¨ã®ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã¨ã„ã†ã‚‚ã®ãŒæä¾›ã•ã‚Œ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¯ãã®ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ä½¿ã£ã¦ Twitter ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã®ã§ å¤–éƒ¨ã‚µãƒ¼ãƒ“ã‚¹é‹å–¶è€…ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’æ¸¡ã™å¿…è¦ãŒãªã„ã€‚ ãã®ã‚µãƒ¼ãƒ“ã‚¹ã®åˆ©ç”¨ã‚’ã‚„ã‚ãŸã„å ´åˆã‚‚ ã‚µãƒ¼ãƒ“ã‚¹å´ã«ç”³è«‹ã™ã‚‹å¿…è¦ã¯ãªãã€ Twitter ã®ã‚µã‚¤ãƒˆä¸Šã§ã€Œè¨±å¯ã‚’å–ã‚Šæ¶ˆã™ã€ã¨ã„ã†ãƒœã‚¿ãƒ³ã‚’æŠ¼ã™ã ã‘ã€‚ ã“ã‚Œã¯å®‰å¿ƒã€‚ å®‰å¿ƒã˜ã‚ƒãªã„ ç¢ºã‹ã«ã€ID ã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’æ¸¡ã™ã¨ã„ã†ã“ã¨ã¯ ç›¸æ‰‹ãŒãã®æ°—ã«ãªã‚Œã°ä½•ã§ã‚‚ã§ãã‚‹ã¨ã„ã†ã“ã¨ã€‚ ã‚¢
itboy 2010/09/28
oauth

twitter

Security
ãƒªãƒ³ã‚¯
Twitterã€BASICèªè¨¼çµ‚äº†ã‚’8æœˆã«å»¶æœŸã€€Wæ¯å¯¾å¿œã§
ç±³Twitterã¯6æœˆ18æ—¥ã€Twitter APIã®BASICèªè¨¼ã®çµ‚äº†æ—¥ã‚’ã€å½“åˆã®6æœˆæœ«ã‹ã‚‰8æœˆæœ«ã«å»¶æœŸã™ã‚‹ã¨ç™ºè¡¨ã—ãŸã€‚ã‚µãƒƒã‚«ãƒ¼ ãƒ¯ãƒ¼ãƒ«ãƒ‰ã‚«ãƒƒãƒ—ï¼ˆWæ¯ï¼‰ã®å½±éŸ¿ã§ã‚·ã‚¹ãƒ†ãƒ è² è·ãŒé«˜ããªã‚Šã€ã²ã‚“ã±ã‚“ã«ã‚¨ãƒ©ãƒ¼ãŒå‡ºã‚‹ãªã©ä¸å®‰å®šãªçŠ¶æ…‹ã«ãªã£ã¦ã„ã‚‹ãŸã‚ã€‚ BASICèªè¨¼ã¯ã€8æœˆ16æ—¥ã‹ã‚‰æ®µéšŽçš„ã«ç¸®å°ã€‚31æ—¥ã¾ã§ã®é–“ã€1æ—¥å½“ãŸã‚Šã®APIã‚’å‘¼ã¶å›žæ•°åˆ¶é™ï¼ˆlate limitï¼‰ã‚’æ¸›ã‚‰ã—ã¦ã„ãã€‚31æ—¥ã‹ã‚‰ã¯ã€BASICèªè¨¼ã®APIã‚³ãƒ¼ãƒ«ã«ã¯ã™ã¹ã¦ã€HTTP 403ã‚¨ãƒ©ãƒ¼ã‚’è¿”ã™ã€‚ Twitterã¯ã€IDãƒ»ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’æ¸¡ã•ãšã«ãƒˆãƒ¼ã‚¯ãƒ³ã§APIèªè¨¼ã§ãã‚‹OAuthã¨ã€OAuthã®ç°¡æ˜“ç‰ˆã§ã€ãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ã‚¢ãƒ—ãƒªãªã©ã§ã‚‚åˆ©ç”¨ã§ãã‚‹ã€ŒxAuthã€ã‚‚æä¾›ã—ã¦ãŠã‚Šã€BASICèªè¨¼ã®ã‚µãƒ¼ãƒ“ã‚¹æä¾›è€…ã«ç§»è¡Œã‚’å‘¼ã³æŽ›ã‘ã¦ã„ã‚‹ã€‚ é–¢é€£è¨˜äº‹ Twitterã€BASICèªè¨¼ã‚’6æœˆæœ«ã«çµ‚äº†ã€€OAuthã¨xAuthã®ã¿ã« ç±³Twitterã¯ã€T
itboy 2010/06/18
ã¾ã ä¿ºã‚‚å¯¾å¿œã§ãã¦ã¾ã›ã‚“ã€‚

twitter

API

oauth
ãƒªãƒ³ã‚¯
Twitterã®OAuthèªè¨¼ã‚’ä½¿ã£ãŸã‚µãƒ¼ãƒ“ã‚¹ã‚’é–‹ç™ºã™ã‚‹éš›ã®æ³¨æ„ - Sacrificed & Exploited
ã€ŒOAuth ã‚’ä½¿ã£ã¦ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãƒ»ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚ãƒ³ã‚° Web ã‚µã‚¤ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹: ç¬¬ 2 å›ž: OAuth å¯¾å¿œã®Web ç‰ˆ Twitter ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’ä½œæˆã™ã‚‹ã€ã®ã‚µãƒ³ãƒ—ãƒ«ã‚’ã„ã˜ãã£ã¦ã„ã¦æ°—ã¥ã„ãŸã‚“ã§ã™ãŒã€Twitterã®OAuthèªè¨¼ã‚’ä½¿ã£ãŸã‚µãƒ¼ãƒ“ã‚¹ã‚’é–‹ç™ºã™ã‚‹å ´åˆã€AccessTokenã®ç®¡ç†æ–¹æ³•ã«æ³¨æ„ãŒå¿…è¦ã§ã™ã€‚ ã‚ã‚“ã¾ã‚Šè‡ªä¿¡ãŒãªã„ã®ã§ã€èª¤ã‚ŠãŒã‚ã‚Œã°ã©ã‚“ã©ã‚“æŒ‡æ‘˜ã—ã¦ãã ã•ã„ã€‚ ä»¥ä¸‹ã®æ¡ä»¶ãŒæˆã‚Šç«‹ã¤å ´åˆã€ã‚µãƒ¼ãƒ“ã‚¹å†…ã§ãªã‚Šã™ã¾ã—ãŒã§ãã¦ã—ã¾ã„ã¾ã™ã€‚ ã‚µãƒ¼ãƒ“ã‚¹(Consumer)ãŒtwitterIDã¨AccessTokenã‚’ã²ã‚‚ã¥ã‘ã¦ä¿ç®¡ã—ã¦ã„ã‚‹ã€‚ ã‚µãƒ¼ãƒ“ã‚¹ãŒãƒ–ãƒ©ã‚¦ã‚¶ã¸æ¸¡ã™cookieã«twitterIDã‚’ãã®ã¾ã¾ä¿å˜ã—ã¦ã„ã‚‹ ãƒ–ãƒ©ã‚¦ã‚¶ã‹ã‚‰ã‚µãƒ¼ãƒ“ã‚¹ã¸twitterIDã‚’å«ã‚€CookieãŒæ¸¡ã•ã‚ŒãŸå ´åˆã€twitterIDã‚’ã‚ãƒ¼ã¨ã—ã¦ã‚µãƒ¼ãƒ“ã‚¹å†…ã«ä¿å˜ã—ã¦ã„ã‚‹AccessTokenã‚’æ¤œç´¢ã—ã€
itboy 2010/05/28
OAuth

twitter

security
ãƒªãƒ³ã‚¯
2010-04-17
æ˜¨å¤œå¯’ã„å¯’ã„ã¨è¨€ã£ã¦ã„ãŸã‚‰ã€ä»Šæœèµ·ããŸã‚‰å¤–ãŒç™½ãã¦ã³ã£ãã‚Šã€‚ ã»ã¨ã‚“ã©æº¶ã‘ã‹ã‹ã£ãŸæ§˜ãªçŠ¶æ…‹ãªã®ã§ã€å±‹æ ¹ã‹ã‚‰é›ªãŒãƒ™ãƒ©ãƒ³ãƒ€ã«æ»‘ã‚Šè½ã¡ã¦ã‘ãŸãŸã¾ã—ã„éŸ³ã‚’ä¸Šã’ãŸã€‚ ã“ã‚“ãªæ™‚æœŸã«é›ªãŒãµã‚‹ã“ã¨ãŒã‚ã‚‹ã‚“ã ã€‚ æ±äº¬ã§ã“ã®æ™‚æœŸã®é›ªã¯41å¹´ã¶ã‚Šã‚‰ã—ãã¦ã€‚ãƒ›ãƒ³ãƒˆã€å†¬ç”¨ã®ã‚³ãƒ¼ãƒˆã‚’ã‚¯ãƒªãƒ¼ãƒ‹ãƒ³ã‚°ã«å‡ºã—ã¦ãªãã¦ã‚ˆã‹ã£ãŸã€‚ã‚‚ã£ã¨ã‚‚ã€æ£ç¢ºã«è¨€ã†ã¨ã‚¯ãƒªãƒ¼ãƒ‹ãƒ³ã‚°ã«å‡ºãã†ã¨å¿˜ã‚Œãªã„ã‚ˆã†ã«ä½•åº¦ã‚‚çŽ„é–¢ã®ã‚¯ãƒªãƒ¼ãƒ‹ãƒ³ã‚°ç”¨ç´™è¢‹ã«å…¥ã‚ŒãŸã“ã¨ã¯ã‚ã£ãŸã®ã ãŒã€æœã€å®¶ã‚’å‡ºã‚‹æ™‚æ®Šã®å¤–å¯’ã„ã“ã¨ãŒä½•åº¦ã‹ã‚ã£ã¦è¢‹ã‹ã‚‰å–ã‚Šå‡ºã—ã¦ã„ãŸã®ã ã‘ã©ã€‚ Twitter APIã‚’é€šã—ã¦ã€ã‚ã‚‹ãƒ¦ãƒ¼ã‚¶ã®å…¨ãƒ•ã‚©ãƒãƒ¯ãƒ¼ã‚’å–å¾—ã—ãŸã„ã¨æ€ã£ãŸã‚‰ä»¥ä¸‹ã®æ§˜ãªå½¢ã«ãªã‚‹ã€‚ ã“ã“ã§ã¯ã€ã‚¹ã‚¯ãƒªãƒ¼ãƒ³åã¨è¨å®šã—ã¦ã‚ã‚‹ã‚¢ã‚¤ã‚³ãƒ³ã®ä¿ç®¡ä½ç½®ã‚’å–å¾—ã—ã¦ã„ã‚‹ã€‚ ãƒŸã‚½ã¨è¨€ã†ã‚ã‘ã§ã¯ãªã„ãŒã€$info = $twitter->statuses->followers(array("cursor" => -1))
itboy 2010/05/25
twitter

oauth

PHP
ãƒªãƒ³ã‚¯
OAuthãƒ—ãƒãƒˆã‚³ãƒ«ã®ä¸èº«ã‚’ã–ã£ãã‚Šè§£èª¬ã—ã¦ã¿ã‚‹ã‚ˆ - ( ê’ªâŒ“ê’ª) ã‚†ã‚‹ã‚ˆã‚æ—¥è¨˜
ã€ŒãŠãƒ¼ãŠãƒ¼ã£ã™ã£!ã€ ã¦ãªã“ã£ã¦ã€Twitterã®APIã®BASICèªè¨¼ã‚‚6æœˆæœ«ã«çµ‚äº†ã—ã¦OAuth/xAuthã«ç§»è¡Œã™ã‚‹ã¨ã„ã†ã“ã®æ™‚æœŸã«ã€ã‚ã‚‰ãŸã‚ã¦OAuthã«ã¤ã„ã¦å‹‰å¼·ã—ã¦ã¿ãŸã‚“ã§ã™ã®ã‚ˆ? OAuthèªè¨¼ã‚’åˆ©ç”¨ã™ã‚‹ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã¯å„è¨€èªžã§å‡ºãã‚ã£ã¦ãã¦ã‚‹ã®ã§ãã‚Œã‚’ä½¿ãˆã°ã„ã‚“ã˜ã‚ƒã¾ã„ã‹? ã¨ã„ã†ã¨è©±ãŒçµ‚ã‚ã‚‹ã®ã§ã€ã˜ã‚ƒã‚ãã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã®ä¸èº«ã¯ãªã«ã‚„ã£ã¦ã‚“ã®ã‚ˆã£ã¦ã“ã¨ã‚’ã€OAuthã™ã‚‹Scalaã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒªä½œã‚ŠãªãŒã‚‰èª¿ã¹ãŸã“ã¨ã‚’ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ é–“é•ã£ã¦ã„ã‚‹ã¨ã“ã‚ã‚‚ã‚ã‚‹ã¨æ€ã†ã®ã§ãƒ„ãƒƒã‚³ãƒŸæ“è¿Žã§ã™ï¼žï¼œ OAuthã£ã¦ãã‚‚ãã‚‚ãªã‚“ãªã®? ã‚‚ã®ã™ã”ãã–ã£ãã‚Šã¨ã„ã†ã¨ã€ŒAPIåˆ©ç”¨å´ãŒã€ãƒ¦ãƒ¼ã‚¶èªè¨¼ã‚’APIæä¾›ã‚µãƒ¼ãƒ“ã‚¹å´ã«ã‚„ã£ã¦ã‚‚ã‚‰ã†ãŸã‚ã®ä»•æ§˜ã€ã£ã¦æ„Ÿã˜ã§ã—ã‚‡ã†ã‹? BASICèªè¨¼ã®å ´åˆã€APIåˆ©ç”¨å´ãŒèªè¨¼ã«å¿…è¦ãªã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’é ã‹ã‚‹å¿…è¦ãŒã‚ã‚‹ã‚ã‘ã§ã™ã€‚æ‚ªæ„ã®ã‚ã‚‹APIåˆ©ç”¨å´ãŒã€Œãªã‚“ã¨ã‹ãƒ¡ãƒ¼ã‚«ãƒ¼
itboy 2010/05/07
oauth

twitter

API
ãƒªãƒ³ã‚¯
Twitter botã§OAuthã‚’ä½¿ã†æ–¹æ³•ï½žPHPç·¨ - 4403 is writtenï¼ˆçµ‚äº†ã—ã¾ã—ãŸï¼‰
@è‡ªå®…ï¼ˆå€‹äººã®è¦‹è§£ã«åŸºã¥ã„ã¦ãŠã‚Šï¼Œæ‰€å±žçµ„ç¹”ãªã©ã¨ã¯ä¸€åˆ‡é–¢ä¿‚ã‚ã‚Šã¾ã›ã‚“ã—ï¼Œäº‹å®Ÿã‹ã©ã†ã‹ã‚‚ã‚ã‹ã‚Šã¾ã›ã‚“ï¼‰ ã“ã®ä¸–ç•Œã«å¸Œæœ›ã‚’ã‚‚ã¤ãŸã‚ã«ã¯æ‰¹åˆ¤ã—ç¶šã‘ã‚‹ã“ã¨ã“ããŒå¿…è¦ã - Edward W. Said (1935-2003) Twitterã®BASICèªè¨¼ãŒ2010å¹´6æœˆæœ«ã§çµ‚ã‚ã‚Šï¼ŒOAuth/xAuthã§ã®èªè¨¼ãŒå¿…è¦ã«ãªã‚Šã¾ã™ï¼Žä»¥å‰ï¼ŒxAuthã«å¯¾å¿œã™ã‚‹è©±ã‚’æ›¸ãã¾ã—ãŸãŒï¼Œæœ€è¿‘ã«ãªã£ã¦ï¼Œbotã®å ´åˆã¯xAuthç”³è«‹ã‚’ã™ã‚‹å¿…è¦ãŒãªããªã£ãŸã‚ˆã†ã§ã™ï¼Žæ‰‹é †ã¯ä»¥ä¸‹ã®é€šã‚Šï¼Ž ã¾ãšã¯ï¼Œã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ç™»éŒ²ã‚’ã—ã¾ã™ï¼Žã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ç™»éŒ²ãŒå®Œäº†ã™ã‚‹ã¨ï¼ŒOAuthã®Consumer keyã¨Consumer secretãŒæ‰‹ã«å…¥ã‚Šã¾ã™ï¼Ž ã“ã®2ã¤ã®å€¤ã‚’ã‚³ãƒ”ãƒ¼ã—ã¦ãŠãã¾ã™ï¼Žç¶šã„ã¦ï¼Œå³ã®ãƒ¡ãƒ‹ãƒ¥ãƒ¼ã‹ã‚‰My Access Tokenã‚’é¸ã³ã¾ã™ï¼Ž è¡¨ç¤ºã•ã‚Œã‚‹Access Tokenã¨Access Token Secret
itboy 2010/05/05
twitter

oauth

tips
ãƒªãƒ³ã‚¯
Twitterã®BASICèªè¨¼å»ƒæ¢ã€ä¼æ¥ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒçŸ¥ã£ã¦ãŠãã¹ãã“ã¨
Twitterãƒ¦ãƒ¼ã‚¶ãƒ¼ã€ã‚ã‚‹ã„ã¯ã“ã®ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ãƒ‡ãƒ™ãƒãƒƒãƒ‘ãƒ¼ã‚„ä¼æ¥ã¯ã€2010å¹´6æœˆ30æ—¥ã«å‘ã‘ã¦é©åˆ‡ãªå¯¾å¿œã‚’å›³ã‚‹å¿…è¦ãŒã‚ã‚‹ã€‚Twitter APIã®BASICèªè¨¼ãŒå»ƒæ¢ã•ã‚Œã‚‹ãŸã‚ã ã€‚ æ„å¤–ã¨çŸ¥ã‚‰ã‚Œã¦ã„ãªã„ã“ã¨ã¨ã—ã¦ã€APIã®åˆ¶é™ã®ã»ã‹ã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ã”ã¨ã®åˆ¶é™ãŒã‚ã‚‹ã¨ä¸¹ç¾½æ°ã€‚1æ—¥å½“ãŸã‚Šã®ãƒ„ã‚¤ãƒ¼ãƒˆã‚„ãƒ•ã‚©ãƒãƒ¼ã€ãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãªã©ã«ä¸Šé™ãŒã‚ã‚‹ãŒã€ãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®250ä»¶ï¼æ—¥åˆ¶é™ã«å¼•ã£ã‹ã‹ã£ã¦ã¯ã˜ã‚ã¦ãã‚Œã«æ°—ä»˜ãä¼æ¥ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚‚å°‘ãªããªã„ã¨ã„ã† ã€ŒTwitter Development Talkï¼ˆTwitter-Devï¼‰ã€ã‚„ã€ŒTwitter API Announcementsã€ãªã©ã§ã¯ã‹ãªã‚Šå‰ã‹ã‚‰ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã•ã‚Œã¦ã„ãŸãŒã€2010å¹´6æœˆ30æ—¥ã‚’æœ€å¾Œã«ã€Twitter APIã®BASICèªè¨¼ã¯ã‚¨ãƒ©ãƒ¼ãŒè¿”ã£ã¦ãã‚‹ã‚ˆã†ã«ãªã‚‹ã€‚ä¸€è¦‹åœ°å‘³ã«æ˜ ã‚‹ã“ã®å‡ºæ¥äº‹ã ãŒã€ã‚«ã‚¦ãƒ³ãƒˆãƒ€ã‚¦ãƒ³ã‚µã‚¤ãƒˆã‚‚ç”¨
itboy 2010/04/29
APIè‡ªä½“ã‚’è¶£å‘³ãƒ¬ãƒ™ãƒ«ã§å¼„ã‚Œãªããªã‚‹ã®ã¯ã¡ã‚‡ã£ã¨ç—›ã„æ°—ãŒã™ã‚‹ã‘ã©ãƒ»ãƒ»ãƒ»

twitter

oauth

security

API
ãƒªãƒ³ã‚¯
PHPã§Yahoo!ã®OAuthå¯¾å¿œAPIã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã¿ã‚ˆã†ï¼
ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã¯ã€2023å¹´10æœˆ1æ—¥ã«LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã«ãªã‚Šã¾ã—ãŸã€‚LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã®æ–°ã—ã„ãƒ–ãƒã‚°ã¯ã“ã¡ã‚‰ã§ã™ã€‚LINEãƒ¤ãƒ•ãƒ¼ Tech Blog ã“ã‚“ã«ã¡ã¯ã€IDãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ æŠ€è¡“ã®è¿‘è—¤ã§ã™ã€‚ å‰å›žã®è¨˜äº‹ã§ã¯Yahoo! JAPAN ã®OAuthãŒæŽ¡ç”¨ã—ã¦ã„ã‚‹Session Extensionã«ã¤ã„ã¦ç°¡å˜ã«ç´¹ä»‹ã‚’ã—ã¾ã—ãŸã€‚ ãã“ã§Session Extentionã®ä¸€é€£ã®ãƒ•ãƒãƒ¼ã‚’é–‹ç™ºè€…ãŒæ„è˜ã™ã‚‹ã“ã¨ãªãã€OAuthã«å¯¾å¿œã—ãŸYahoo! JAPANã®APIã‚’ä½¿ã£ã¦Webã‚¢ãƒ—ãƒªã‚’å®Ÿè£…ã§ãã‚‹ã‚ˆã†ã«Yahoo! JAPANãƒ‡ãƒ™ãƒãƒƒãƒ‘ãƒ¼ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã«PHP SDKã‚’å…¬é–‹ã—ã¾ã—ãŸã€‚ ä»Šå›žã¯SDKã‚’åˆ©ç”¨ã—ã¦ãƒžã‚¤ãƒ»ã‚ªãƒ¼ã‚¯ã‚·ãƒ§ãƒ³è¡¨ç¤ºï¼ˆã‚¦ã‚©ãƒƒãƒãƒªã‚¹ãƒˆãƒ»é–‹å‚¬ä¸ã®ã‚ªãƒ¼ã‚¯ã‚·ãƒ§ãƒ³ï¼‰APIã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ç°¡å˜ãªã‚µãƒ³ãƒ—ãƒ«ã‚³ãƒ¼ãƒ‰ã‚’ä½œã£ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ ã¯ã˜ã‚ã«ï¼ŒYahoo!ãƒ‡ãƒ™ãƒãƒƒãƒ‘ãƒ¼ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯
itboy 2009/09/14
php

oauth

Yahoo!
ãƒªãƒ³ã‚¯
PHPã‚’èªã‚“ã ã“ã¨ã‚ã‚‹äººã®ãŸã‚ã®OAuthã®Signatureè§£èª¬ - r-weblife
ä»Šå›žã¯OAuthã®ãŠè©±ã§ã™ã€‚ ãªã‚“ã¨ãªãã€ä¸–ã®ä¸ã«å‡ºå›žã£ã¦ã„ã‚‹ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’ä½¿ã‚ãšã€OAuthã®æ©Ÿèƒ½ã‚’ç‹¬è‡ªã§ï¼‘ã‹ã‚‰ä½œã‚Šã“ã‚€äººã‚‚ã‘ã£ã“ã†ã„ã‚‹ã‚ˆã†ãªæ°—ãŒã—ã¾ã™ã€‚ ä»Šå›žã¯PHPã®OAuthãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’ç”¨ã„ã¦ã€HMAC-SHA1ã®Signatureã‚’ä½œæˆã™ã‚‹ã¨ãã®ãƒã‚¸ãƒƒã‚¯ã‚’è¦‹ã¦ã¿ã¾ã™ã€‚ ä»•æ§˜ : OAuth Core 1.0 Revision A â– å‰ææ¡ä»¶ ä»Šå›žã¯2legged OAuth Request(3leggedã§ã‚‚ä¸€ç·’) GETã§http://r-weblife.sakura.ne.jp/SignedRequest/example.phpã«ã‚¢ã‚¯ã‚»ã‚¹ ä¸‹è¨˜ã®ã‚ˆã†ãªãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã‚’ä»˜åŠ ã™ã‚‹ $params = array( "opensocial_app_url" => 'http://r-weblife.sakura.ne.jp/SignedRequest/SignedRequest.xml
itboy 2009/09/13
php

oauth
ãƒªãƒ³ã‚¯
OAuthã®ã‚»ãƒƒã‚·ãƒ§ãƒ³å›ºå®šæ”»æ’ƒã«ã¤ã„ã¦ï¼ˆç¿»è¨³ï¼‰ - ã‚‚ã®ãŒãŸã‚Š(æ—§)
Explaining the OAuth Session Fixation Attackã¨ã„ã†æ–‡ç« ãŒèˆˆå‘³æ·±ã„ã‚‚ã®ã ã£ãŸã®ã§ç¿»è¨³ã—ã¦ã¿ãŸã€‚ä½•ã‹è§£æ±ºç–ã‚’æ€ã„ã¤ã„ãŸäººã¯OAuthã®ãƒ¡ãƒ¼ãƒªãƒ³ã‚°ãƒªã‚¹ãƒˆã«é€ã£ã¦ã‚ã’ã‚‹ã¨è‰¯ã„ã¨æ€ã†ã€‚ã£ã¦åƒ•ã¯å‚åŠ ã—ã¦ã‚‚ã„ãªã„ã®ã ã‘ã©ã€‚ã‚ã¨èª¤è¨³ã¨ã‹ã¯ã‚³ãƒ¡ãƒ³ãƒˆã—ã¦ã‚‚ã‚‰ãˆã‚Œã°å¯¾å¿œã—ã¾ã™ã€‚ãƒ¯ã‚¿ã‚¯ã‚·å®Ÿã®ã¨ã“ã‚OAuthãªã‚“ã¦ä½¿ã£ãŸã“ã¨ã‚‚ãªã‹ã£ãŸã‚Šã—ã¦ã€‚ ï¼ˆåŽŸæ–‡ã¯ãƒªãƒ³ã‚¯å…ˆã«ã‚‚ã‚ã‚‹é€šã‚Šã€Eran Hammer-Lahavæ°ã‹ã‚‰cc-by 3.0 usã§æä¾›ã•ã‚Œã¦ã„ã‚‹ã€‚ï¼‰ è¿½è¨˜: æ—¥æœ¬ã§ã‚‚ãƒ‹ãƒ¥ãƒ¼ã‚¹ã«ãªã£ã¦ã„ãŸ: http://www.atmarkit.co.jp/news/200904/23/oauth.html è¿½è¨˜2: å…ƒè¨˜äº‹ã®ç”»åƒãŒã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã•ã‚Œã¦ã„ãŸã®ã§ã€è¿½å¾“ã—ã¦æ›´æ–° ä»¥ä¸‹ç¿»è¨³: å…ˆé€±ã€ã‚ã‚Œã‚ã‚ŒãŒç™ºè¦‹ã—ã¦å¯¾å¿œã—ãŸOAuthã®ãƒ—ãƒãƒˆã‚³ãƒ«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã«ã¯èªžã‚‹ã¹ãã“ã¨ãŒå¤šãã‚ã‚‹ã€‚
itboy 2009/04/27
security

oauth

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
APIã‚¢ã‚¯ã‚»ã‚¹æ¨©ã‚’å§”è²ã™ã‚‹ãƒ—ãƒãƒˆã‚³ãƒ«ã€OAuthã‚’çŸ¥ã‚‹ ï¼ ï¼ IT
ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³ã§ã®ãƒ‡ã‚¸ã‚¿ãƒ«ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã‚’å®ˆã‚‹ APIã‚¢ã‚¯ã‚»ã‚¹æ¨©ã‚’å§”è²ã™ã‚‹ãƒ—ãƒãƒˆã‚³ãƒ«ã€ OAuthã‚’çŸ¥ã‚‹ ä½œå³¶ã€€ç«‹æ¨¹ NRIãƒ‘ã‚·ãƒ•ã‚£ãƒƒã‚¯ 2008/1/21 OAuthãƒ—ãƒãƒˆã‚³ãƒ«ã‚’çŸ¥ã‚‹ OAuthã‚’ä½¿ã£ãŸWeb APIã‚¢ã‚¯ã‚»ã‚¹æ¨©ã®å§”è²ãŒå®Ÿéš›ã«ã©ã®ã‚ˆã†ã«è¡Œã‚ã‚Œã‚‹ã‹ã¯ã‚¨ãƒ©ãƒ³ãƒ»ãƒãƒžãƒ¼æ°ã®ãƒ–ãƒã‚°ã«è©³ã—ã„ãŒã€ç°¡å˜ã«èª¬æ˜Žã™ã‚‹ã¨ã€2ã¤ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ãƒžãƒƒã‚·ãƒ¥ã‚¢ãƒƒãƒ—ã•ã›ãŸã„ã€Œãƒ¦ãƒ¼ã‚¶ãƒ¼ã€ãŒã€ãƒªã‚½ãƒ¼ã‚¹ï¼ˆä¾‹ãˆã°ã€ã‚¢ãƒ«ãƒãƒ ã‚µã‚¤ãƒˆã«ã‚ã‚‹å†™çœŸãªã©ï¼‰ã‚’ç®¡ç†ã™ã‚‹ã‚µã‚¤ãƒˆã€Œã‚µãƒ¼ãƒ“ã‚¹ãƒ—ãƒãƒã‚¤ãƒ€ã€ãŒæä¾›ã™ã‚‹APIã®æŽ¥ç¶šè¨±å¯è¨¼ã€Œãƒˆãƒ¼ã‚¯ãƒ³ã€ã‚’ã€ã‚µãƒ¼ãƒ“ã‚¹ãƒ—ãƒãƒã‚¤ãƒ€ã‚’é€šã˜ã¦ã€ãƒªã‚½ãƒ¼ã‚¹ã‚’åˆ©ç”¨ã—ãŸã‚µãƒ¼ãƒ“ã‚¹ã‚’æä¾›ã™ã‚‹åˆ¥ã®ã‚µã‚¤ãƒˆï¼ˆä¾‹ãˆã°ã€å†™çœŸã‚’ç¾åƒã™ã‚‹ã‚µã‚¤ãƒˆï¼‰ã€Œã‚³ãƒ³ã‚·ãƒ¥ãƒ¼ãƒžã€ã¸ç™ºè¡Œã—ã€IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ä»£ã‚ã‚Šã«ãƒˆãƒ¼ã‚¯ãƒ³ã‚’æ¸¡ã—ã¦ã‚µãƒ¼ãƒ“ã‚¹ãƒ—ãƒãƒã‚¤ãƒ€ä¸Šã®ãƒªã‚½ãƒ¼ã‚¹ã¸ã‚¢ã‚¯ã‚»ã‚¹ã•ã›ã‚‹ã€ã¨ã„ã†ã“ã¨ã«ãªã‚‹ã€‚
itboy 2009/04/21
oauth

API

security
ãƒªãƒ³ã‚¯
http://www.machu.jp/posts/20071207/
itboy 2008/08/21
javascript

oauth

security

ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³
ãƒªãƒ³ã‚¯
1