[B! OAuth] kaorunã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kaorun id:kaorun

OAuthã«é–¢ã™ã‚‹kaorunã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (30)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

OAuthã®è¨€è‘‰å‘¨ã‚Šã‚’æ•´ç†ã™ã‚‹
OAuthã®ä»•çµ„ã¿ã¨Tokenèªè¨¼å‘¨ã‚Šã®è¨€è‘‰ã¯ã„ã¤ã¾ã§çµŒã£ã¦ã‚‚ã¯ã£ãã‚Šç†è§£ã§ããªã„ã‚‚ã®ã®ä¸€ã¤ã§ã—ãŸã€‚ ã—ã‹ã—æœ€è¿‘ã‚ˆã†ã‚„ãç†è§£ã§ãã‚‹ã‚ˆã†ã«ãªã£ã¦ããŸã®ã§ã¨ã‚Šã‚ãˆãšãã‚Œãžã‚Œã®è¨€è‘‰ã®æŒ‡ã™ã‚‚ã®ã‚„å®šç¾©ã‚’ã“ã“ã§æ•´ç†ã—ã¦ã¿ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ ãƒªãƒ•ãƒ¬ãƒƒã‚·ãƒ¥ãƒˆãƒ¼ã‚¯ãƒ³ ãƒªãƒ•ãƒ¬ãƒƒã‚·ãƒ¥ãƒˆãƒ¼ã‚¯ãƒ³ã¨ã¯ ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®æœ‰åŠ¹æœŸé™ãŒåˆ‡ã‚ŒãŸã¨ãã«ã€èªå¯ã‚µãƒ¼ãƒãƒ¼ã«ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®æ›´æ–°ãƒªã‚¯ã‚¨ã‚¹ãƒˆèªè¨¼ã‚’ã™ã‚‹ãŸã‚ã®ãƒˆãƒ¼ã‚¯ãƒ³ã€‚ OAuthè‡ªä½“ã¯ãƒªãƒ•ãƒ¬ãƒƒã‚·ãƒ¥ãƒˆãƒ¼ã‚¯ãƒ³ãŒãªãã¨ã‚‚å®Ÿè£…ã§ãã‚‹ãŒã€ãƒªãƒ•ãƒ¬ãƒƒã‚·ãƒ¥ãƒˆãƒ¼ã‚¯ãƒ³ã¯OAuthã‚’ã‚ˆã‚Šä¾¿åˆ©ã«ã™ã‚‹ãŸã‚ã®ã‚‚ã®ã€‚ ä¸€èˆ¬çš„ã«æœ‰åŠ¹æœŸé™ã¯é•·ã„ã€‚ ãªã„ã¨ã©ã†ãªã‚‹ã®ã‹ ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®æœŸé™ãŒåˆ‡ã‚ŒãŸã‚‰ãã®åº¦ã«SNSèªè¨¼ã®ã‚ã®ãƒã‚°ã‚¤ãƒ³ç”»é¢ã«é£›ã°ã•ã‚Œã¦ãƒ¡ã‚¢ãƒ‰ã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å…¥åŠ›ãŒå¿…è¦ã«ãªã‚‹ã€‚ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹ã“ã¨ æœ‰åŠ¹æœŸé™ãŒé•·ãã¦ã‚‚å®‰å…¨æ€§ã«å•é¡ŒãŒãªã„ã¨è€ƒãˆã‚‰ã‚Œã‚‹ç†ç”±ã¨ã—ã¦ã¯ã€ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®æœŸé™åˆ‡ã‚Œæ™‚ã«ã—ã‹
kaorun 2022/07/12
OAuth

auth
ãƒªãƒ³ã‚¯
Facebookã‹ã‚‰OAuthã‚’åœæ¢ã•ã‚Œã¦ã‚ã‹ã£ãŸä»Šæ™‚ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ - Uzabase for Engineers
NewsPicksã®é«˜å±±ã§ã™ã€‚ ã“ã®è¨˜äº‹ã¯Uzabase Advent Calendar 2021ã®23æ—¥ç›®ã®è¨˜äº‹ã§ã™ã€‚æ˜¨æ—¥ã¯æˆ‘ã‚‰ãŒèµ¤æ¾¤å‰›ã•ã‚“ã«ã‚ˆã‚‹AWS Organizationã®è¨˜äº‹ã§ã—ãŸã€‚ åŽ»ã‚‹2021å¹´10æœˆ12æ—¥ã«çªç„¶NewsPicksã®ã‚µãƒ¼ãƒ“ã‚¹ã§Facebookãƒã‚°ã‚¤ãƒ³ã‚„Facebookã¸ã®æŠ•ç¨¿ãŒã§ããªããªã‚Šã¾ã—ãŸã€‚ã“ã®çŠ¶æ…‹ã¯12æœˆ13æ—¥ã¾ã§2ãƒ¶æœˆã‚‚ã®é–“ç¶™ç¶šã—ã¦ã„ã¦ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã•ã‚“ã«ã¯ä¸ä¾¿ã‚’å¼·ã„ã¦ã—ã¾ã„ã¾ã—ãŸã€‚ ç±³Facebookæœ¬ç¤¾ã¨ãƒ¡ãƒ¼ãƒ«ã§ã‚„ã‚Šã¨ã‚Šã—ã¦ã„ã¾ã—ãŸãŒã€ãƒ¡ãƒ¼ãƒ«è¿”ä¿¡ã«ä½•é€±é–“ã‚‚å¾…ãŸã•ã‚Œã€Facebookæ—¥æœ¬æ³•äººã«åŠ©ã‘ã¦ã‚‚ã‚‰ã£ã¦ã‚ˆã†ã‚„ãè§£æ±ºã«è‡³ã‚‹ã“ã¨ãŒã§ãã¾ã—ãŸã€‚ ã“ã®è‹¦åŠ´è©±ã¯ã„ãã‚‰ã§ã‚‚ã§ãã‚‹ã®ã§ã™ãŒã€ä»Šå›žã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®åˆ‡ã‚Šå£ã§æ›¸ã„ã¦ã„ãã¾ã™ã€‚ Facebookã®ã€Œãƒ‡ãƒ¼ã‚¿ä¿è·è©•ä¾¡ã€ ãƒ‡ãƒ¼ã‚¿ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é …ç›® ã€Œã™ã¹ã¦ã®ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ãƒ‡ãƒ¼ã‚¿ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸(ã™ã¹ã¦ã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹
kaorun 2021/12/24
facebook

OAuth

security

aws

agreements
ãƒªãƒ³ã‚¯
å…¨å“¡ã‹ã‚™OAuth 2.0ã‚’ç†è§£ã—ã¦ã„ã‚‹ãƒãƒ¼ãƒ ã®ä½œã‚Šæ–¹ #devio2021 | DevelopersIO
DevelopersIO 2021 Decadeã§ã€Œå…¨å“¡ã‹ã‚™OAuth 2.0ã‚’ç†è§£ã—ã¦ã„ã‚‹ãƒãƒ¼ãƒ ã®ä½œã‚Šæ–¹ã€ã¨ã„ã†ãƒ†ãƒ¼ãƒžã§è©±ã•ã›ã¦ã„ãŸã ãã¾ã—ãŸã€‚ DevelopersIO 2021 Decade ã§ã€Œå…¨å“¡ã‹ã‚™OAuth 2.0ã‚’ç†è§£ã—ã¦ã„ã‚‹ãƒãƒ¼ãƒ ã®ä½œã‚Šæ–¹ã€ã¨ã„ã†ãƒ†ãƒ¼ãƒžã§è©±ã•ã›ã¦ã„ãŸã ãã¾ã—ãŸã€‚ ã‚¹ãƒ©ã‚¤ãƒ‰ è©±ã—ãŸå†…å®¹ ãªãœäººé¡žã¯ OAuth 2.0 ã«å…¥é–€ã—ç¶šã‘ã‚‹ã®ã‹ ãªãœ OAuth 2.0 ã‚’ãƒãƒ¼ãƒ ã«æ ¹ä»˜ã‹ã›ãŸã„ã®ã‹ é–‹ç™ºãƒ•ãƒãƒ¼ã¨ã—ã¦ã‚³ãƒ¼ãƒ‰ãƒ¬ãƒ“ãƒ¥ãƒ¼ãŒã‚ã‚‹ ä»•æ§˜ãŒã‚ã‹ã‚‰ãªã„ã¨ã€ãƒ¬ãƒ“ãƒ¥ãƒ¼ãŒã§ããªã„ ã‚³ãƒ¼ãƒ‰ã¨ä»•æ§˜ã®ã™ã‚Šåˆã‚ã›ã®ãŸã‚ã«ä»•æ§˜ãŒåˆ†ã‹ã‚‹å¿…è¦ãŒã‚ã‚‹ OAuth 2.0 ã¯ã¾ã‚ã¾ã‚ã‚„ã‚„ã“ã—ã„ OAuth 2.0 ã§ã¯ç™»å ´äººç‰©ãŒ4äººã„ã¦ã€ãã‚Œãžã‚ŒãŒã„ã‚ã‚“ãªã‚„ã‚Šã¨ã‚Šã‚’ã—ã¾ã™ã€‚ ãã‚Œãžã‚Œã®ã‚„ã‚Šã¨ã‚Šã«ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ãƒ¼ãŒã‚ã‚‹ã®ã§ã€èª°ãŒèª°ã«ã©ã†ã„ã†å€¤ã‚’ã©ã†ã—ã¦é€ã‚‹ã€ã¿ãŸã„ãªã¨ã“ã‚ã¾ã§è€ƒãˆã‚‹ã¨ã¾ã‚ã¾ã‚ã‚„ã‚„
kaorun 2021/10/08
OAuth

auth

security
ãƒªãƒ³ã‚¯
OAuthã«ãŠã‘ã‚‹èªå¯ã‚³ãƒ¼ãƒ‰æ¨ªå–ã‚Šæ”»æ’ƒã¨ãã®å¯¾ç–
OAuthã«ãŠã‘ã‚‹èªå¯ã‚³ãƒ¼ãƒ‰æ¨ªå–ã‚Šæ”»æ’ƒã¨ãã®å¯¾ç– Jul 5, 2021 å‰å›žã®è¨˜äº‹ã§ç¤ºã—ãŸã‚ˆã†ã«ã€ã‚«ã‚¹ã‚¿ãƒ URLã‚¹ã‚ãƒ¼ãƒ ã‚’å½è£…ã—ãŸä¸æ£ã‚¢ãƒ—ãƒªã¯æ£è¦ã‚¢ãƒ—ãƒªã¸ã®ãƒ‡ã‚£ãƒ¼ãƒ—ãƒªãƒ³ã‚¯ã‚’ä¹—ã£å–ã‚Œã‚‹ã€‚ã“ã®æŒ™å‹•ã®æ‚ªç”¨ã‚·ãƒŠãƒªã‚ªã¨ã—ã¦ã€æ£è¦ã‚¢ãƒ—ãƒªã¨èªå¯ã‚µãƒ¼ãƒãƒ¼é–“ã®OAuthãƒ•ãƒãƒ¼ã«ãŠã‘ã‚‹èªå¯ã‚³ãƒ¼ãƒ‰æ¨ªå–ã‚Šæ”»æ’ƒãŒçŸ¥ã‚‰ã‚Œã¦ã„ã‚‹ã€‚ã“ã®æ”»æ’ƒã¸ã®å¯¾ç–ã‚’æŠŠæ¡ã™ã‚‹ãŸã‚ã«iOSç’°å¢ƒã§ã‚·ãƒŠãƒªã‚ªã‚’å†ç¾ã—ã€PKCEã®æœ‰åŠ¹æ€§ã‚’ç¢ºèªã—ãŸã€‚ è¦ç´„ OAuth 2.0ã®æ‹¡å¼µæ©Ÿèƒ½ã§ã‚ã‚‹PKCEã‚’å°Žå…¥ã™ã‚‹ã“ã¨ã§èªå¯ã‚³ãƒ¼ãƒ‰æ¨ªå–ã‚Šæ”»æ’ƒã‚’ç„¡åŠ¹åŒ–ã§ãã‚‹ã€‚OAuth 2.0ã®ä»•æ§˜ã§ã¯ã€èªå¯ã‚µãƒ¼ãƒãƒ¼ã¯ãƒã‚¤ãƒ†ã‚£ãƒ–ã‚¢ãƒ—ãƒªã‚’ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆèªè¨¼ã§ããªã„ã€‚ãã®ãŸã‚ã€èªå¯ã‚µãƒ¼ãƒãƒ¼ã¯èªå¯ã‚³ãƒ¼ãƒ‰ã‚’æ¨ªå–ã‚Šã—ãŸä¸æ£ã‚¢ãƒ—ãƒªã¨æ£è¦ã‚¢ãƒ—ãƒªã‚’è˜åˆ¥ã§ããªã„ã€‚ã—ã‹ã—ã€PKCEã®ä»•çµ„ã¿ã«ã‚ˆã‚Šèªå¯ã‚µãƒ¼ãƒãƒ¼ã¯æ£è¦ã‚¢ãƒ—ãƒªã‚’è˜åˆ¥ã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã€èªå¯ã‚³ãƒ¼ãƒ‰æ¨ªå–ã‚Šæ”»æ’ƒã®æ¤œçŸ¥ãŒå¯èƒ½ã¨ãªã‚‹ã€‚ ãƒã‚¤ãƒ†ã‚£ãƒ–ã‚¢
kaorun 2021/07/05
security

oauth
ãƒªãƒ³ã‚¯
èªè¨¼ã¨èªå¯ã®è¶…ã‚µãƒžãƒªã€€OAuth ã¨ã‹ OpenID Connect ã¨ã‹ SAML ã¨ã‹ã‚’ã¾ã¨ã‚ã¦ã–ã£ã¨æŠŠæ¡ã™ã‚‹æœ¬
èªè¨¼ã¨èªå¯ã«ã¤ã„ã¦ã®çŸ¥è˜ãŒå¿…è¦ã«ãªã£ãŸã®ã§ã€åŸºç¤Žçš„ãªã“ã¨ã‚’å¦ã‚“ã§ã„ã¾ã™ã€‚ ä¸€åˆ‡ä½•ã‚‚çŸ¥ã‚‰ãªã„çŠ¶æ…‹ã‹ã‚‰æ‰‹å½“ãŸã‚Šæ¬¡ç¬¬ã«ç´°ã‹ãèª¿ã¹ã‚‹ã®ã¯å¤§å¤‰ã ã£ãŸã®ã§ã€è¶…ã‚µãƒžãƒªã‚’æ•´ç†ã—ã¦ã¿ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ ã“ã®æœ¬ã¯ã€Œå€‹ã€…ã®è¦ç´ ã«è©³ã—ããªã‚‹å¿…è¦ã¯ãªã„ã‚“ã ã‘ã©ã€æ¦‚è¦ãã‚‰ã„ã¯ã•ã£ã¨æŠŠæ¡ã—ã¦ãŠããŸã„ã€ã¨ã‹ã€Œæ‰‹å½“ãŸã‚Šæ¬¡ç¬¬ã«è©³ç´°èª¿æŸ»ã‚’ã™ã‚‹å‰ã«ã€ä¸€çž¥ã—ã¦ã“ã‚Œã‹ã‚‰è¸ã¿è¾¼ã‚‚ã†ã¨ã—ã¦ã„ã‚‹é ˜åŸŸã®è¶…ä¿¯çž°ãƒžãƒƒãƒ—ã‚’ä½œã‚‹ã€ã¨ã„ã†æ„Ÿã˜ã§ä½¿ã†ã“ã¨ã‚’æƒ³å®šã—ã¦ã„ã¾ã™ã€‚ åŒã˜æ§˜ãªæ–¹ã®å½¹ã«ç«‹ã£ãŸã‚‰ã€ã¨ã¦ã‚‚å¬‰ã—ã„ã§ã™ã€‚ ã“ã®æœ¬ã¯ç†è€…ã®ç†è§£ã«é€£å‹•ã—ã¦è¿½è¨˜ä¿®æ£ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚
kaorun 2021/05/03
auth

OAuth

security
ãƒªãƒ³ã‚¯
OAuthå¯¾å¿œã˜ã‚ƒãªã„ã¨ãƒ¡ãƒ¼ãƒ«ã®é€å—ä¿¡ãŒã§ããªããªã‚‹ã‹ã‚‚ï¼Ÿã€€å¹´æœ«å¹´å§‹ã¯ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ—ãƒªã‚’è¦‹ç›´ãã†ï¼Microsoft/GoogleãŒãƒ¡ãƒ¼ãƒ«ã‚µãƒ¼ãƒ“ã‚¹ã®åŸºæœ¬èªè¨¼ã‚’å»ƒæ¢ã¸ã€ã‚„ã˜ã†ã¾ã®æœã€‘
kaorun 2020/12/25
email

smtp

OAuth

office365

gmail

o365

settings
ãƒªãƒ³ã‚¯
OAuthèªè¨¼ã¨ã¯ä½•ã‹?ãªãœãƒ€ãƒ¡ãªã®ã‹ - 2020å†¬ - r-weblife
ã“ã‚“ã°ã‚“ã¯ã€‚ritouã§ã™ã€‚ Digital IdentityæŠ€è¡“å‹‰å¼·ä¼š #iddance Advent Calendar 2020 1æ—¥ã‚ã®è¨˜äº‹ã§ã™ã€‚ qiita.com åˆæ—¥ãªã®ã§ã‚†ã‚‹ãµã‚ãªè©±ã‚’ã—ã¾ã—ã‚‡ã†ã€‚ ä½•ã®è©±ã‹ ã‚‚ã†ã ã„ã¶å‰ã§ã™ãã€‚9æœˆã®ãŠè©±ã§ã™ã€‚ã“ã‚“ãªTweetã‚’è¦‹ã‹ã‘ã¾ã—ãŸã€‚ ç¤¾å†…Slackã«ã„ã‚‹ã€ŒOAuthèªè¨¼ã€ã¨æ›¸ãã¨è¨‚æ£ã—ã¦ãã‚Œã‚‹botãŒä¸å¯§ãªè§£èª¬ã‚’ã™ã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ãŸ èªè¨¼(Authentication)ã¨èªå¯(Authorization)ã¯é–“é•ãˆã‚„ã™ã„ã‚ã‚Šã«ãƒŸã‚¹ã‚‹ã¨ç”šå¤§ãªè¢«å®³ã‚’ã‚‚ãŸã‚‰ã—ãŒã¡ãªã®ã§ã€å¸¸æ—¥é ƒã‹ã‚‰æ„è˜ã‚’é«˜ã‚ã¦ã„ããŸã„ã§ã™ã pic.twitter.com/oVQxBgZcHSâ€” greenspa (@greenspa) 2020å¹´9æœˆ28æ—¥ ã“ã®botã«å¯¾ã™ã‚‹æ€ã†ã¨ã“ã‚ã¯ã‚‚ã†è‰¯ã„ã§ã™ã€‚ ä»Šå›žã¯ã€ã€ŒOAuthã®ä»•æ§˜ã«æ²¿ã£ã¦IDé€£æºã‚’å®Ÿè£…ã™ã‚‹ã„ã‚ã‚†ã‚‹"OAut
kaorun 2020/12/01
OAuth

auth
ãƒªãƒ³ã‚¯
OAuth 2.0 ã®å‹‰å¼·ã®ãŸã‚ã«èªå¯ã‚µãƒ¼ãƒãƒ¼ã‚’è‡ªä½œã™ã‚‹ - Qiita
é€†ã«ã€RFC 6749 ä»¥å¤–ã§å®šç¾©ã•ã‚Œã¦ã„ã‚‹èªå¯ãƒ•ãƒãƒ¼ã‚’ã‚µãƒãƒ¼ãƒˆã™ã‚‹å ´åˆã€æ–°ãŸã«åˆ¥ã®ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆã®å®Ÿè£…ãŒå¿…è¦ã«ãªã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ä¾‹ãˆã° CIBAï¼ˆClient Initiated Backchannel Authenticationï¼‰ã§ã¯ãƒãƒƒã‚¯ãƒãƒ£ãƒãƒ«èªè¨¼ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆï¼ˆbackchannel authentication endpointï¼‰ã€ãƒ‡ãƒã‚¤ã‚¹ãƒ•ãƒãƒ¼ï¼ˆRFC 8628ï¼‰ã§ã¯ãƒ‡ãƒã‚¤ã‚¹èªå¯ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆï¼ˆdevice authorization endpointï¼‰ã®å®Ÿè£…ãŒæ±‚ã‚ã‚‰ã‚Œã¾ã™ã€‚ ã“ã®è¨˜äº‹ã§ã¯ã€èªå¯ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆã¨ãƒˆãƒ¼ã‚¯ãƒ³ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆã‚’å®Ÿè£…ã—ã¾ã™ã€‚ã‚µãƒãƒ¼ãƒˆã™ã‚‹èªå¯ãƒ•ãƒãƒ¼ã¯èªå¯ã‚³ãƒ¼ãƒ‰ãƒ•ãƒãƒ¼ã®ã¿ã€ã‚µãƒãƒ¼ãƒˆã™ã‚‹ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãƒ»ã‚¿ã‚¤ãƒ—ã¯ãƒ‘ãƒ–ãƒªãƒƒã‚¯ã®ã¿ã¨ã—ã¾ã™ã€‚ 2. æ³¨æ„ç‚¹ ä¸‹è¨˜ã®ç†ç”±ã€ãŠã‚ˆã³æ›¸ã‹ã‚Œã¦ã„ãªã„ãã®ä»–ã®ç†ç”±ã«ã‚ˆã‚Šã€æœ¬å®Ÿè£…ã¯å•†ç”¨åˆ©ç”¨ã«ã¯é©ã—ã¦ã„ã¾ã›ã‚“ã€‚ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ä¸Šå¿…é ˆ
kaorun 2019/10/18
oauth
ãƒªãƒ³ã‚¯
ASP.NET Coreã¨Azure AD B2Cã‚’ä½¿ã£ãŸã‚µã‚¯ã£ã¨èªè¨¼
1. ASP.NET Coreã¨Azure AD B2C ã‚’ä½¿ã£ãŸã‚µã‚¯ã£ã¨èªè¨¼ 2017/10/21 Fukuoka.NET Conf @tsubakimoto_s 2. 2 è‡ªå·±ç´¹ä»‹ â€¢æ¾æ‘ å„ªå¤§ (MLBãŠå…„ã•ã‚“) â€¢æ ªå¼ä¼šç¤¾ã‚ªãƒ«ã‚¿ãƒ¼ãƒ–ãƒ¼ã‚¹ â€¢ Chief Technical Architect â€¢C# / PHP / Azure / AWS â€¢Microsoft MVP for VSDT æ‰€å±ž ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ 3. .NET Core Version Release Date 1.0 2016/06/27 1.1 2016/10/24 2.0 2017/05/10 5 https://github.com/dotnet/core/blob/master/release-notes/download-archive.md
kaorun 2018/08/13
AAD

Azure

ActiveDirectory

auth

OAuth

asp.net core
ãƒªãƒ³ã‚¯
Displayã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã®ãƒªãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ | Custom Skills
Redirect
kaorun 2018/07/30
alexa

AlexaSkill

oauth
ãƒªãƒ³ã‚¯
Reactã§SPAã‚’ä½œã‚Šã€Twitterèªè¨¼(OAuth)ã§ãƒã‚°ã‚¤ãƒ³ã™ã‚‹ã€‚ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã¯Rails
ã¯ã˜ã‚ã« Reactã§SPAã‚’ä½œã‚‹ã“ã¨ã«ãªã£ã¦ã€ãƒã‚°ã‚¤ãƒ³èªè¨¼ã«ãƒ¡ãƒ¼ãƒ«ï¼†ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®èªè¨¼ã«åŠ ãˆã¦ã€ Googleã‚„Twitterèªè¨¼ã‚‚åŠ ãˆãŸããªã£ãŸæ™‚ã€ã©ã†ã™ã‚Œã°ã‚ˆã„ã‹ã‚ã‹ã‚‰ãªã‹ã£ãŸã€‚ ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã¯Railsã ãŒã€ã‚ãã¾ã§APIã‚µãƒ¼ãƒãƒ¼çš„ãªç«‹å ´ãªã®ã§ ãƒ¡ã‚¸ãƒ£ãƒ¼ãªomniauth ãªã‚“ã‹ã¯ä½¿ãˆãã†ã«ãªã„ã€‚ã€‚ã€‚ å‰å›žã®Googleç·¨ã«ç¶šãã€ä»Šå›žã¯Twitterç·¨ã€‚ ã‚ã‚Œã“ã‚Œæ‚©ã¿ãªãŒã‚‰ãªã‚“ã¨ã‹å‹•ãã¨ã“ã‚ã¾ã§ãŸã©ã‚Šç€ã„ãŸã®ã§ã€ã‚„ã‚Šæ–¹ã‚’å…¬é–‹ã€‚ React+Reduxã®ç’°å¢ƒãªã‚“ã§ã™ãŒã€ãã“ã¾ã§ç«‹ã¡å…¥ã‚‹ã¨è©±ãŒã‚„ã‚„ã“ã—ããªã‚‹ã®ã§ã€ å®Ÿè£…ã®ã‚¨ã‚ã‚¹éƒ¨åˆ†ã ã‘ã‚’è¨˜è¼‰ã—ã¦ã¿ã¾ã™ã€‚ Twitter Developerã«ã‚¢ãƒ—ãƒªç™»éŒ² Twitter Developer ã“ã‚Œã«ã¤ã„ã¦ã¯ä¸Šè¨˜ã®URLã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã‚¢ãƒ—ãƒªã‚’ç™»éŒ²ã—ã¦ãã ã•ã„ã€‚ ã‚¢ãƒ—ãƒªåã¨ã‚³ãƒ¼ãƒ«ãƒãƒƒã‚¯URLã‚’ç™»éŒ²ã—ãŸã‚‰ã€Consumer Key (API Key)
kaorun 2018/07/24
spa

react

twitter

OAuth
ãƒªãƒ³ã‚¯
HTTPS ã§ã‚‚ Full URL ãŒæ¼ã‚Œã‚‹ï¼ŸOAuth ã® code ã‚‚æ¼ã‚Œã‚‹ã‚“ã˜ã‚ƒãï¼Ÿï¼Ÿ - OAuth.jp
ãªã‚“ã§ã™ã‹ã“ã‚Œã¯ï¼ New attack bypasses HTTPS protection on Macs, Windows, and Linux DHCP ã«ã¤ãªãã¨ PAC ãƒ•ã‚¡ã‚¤ãƒ«ãŒãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã•ã‚Œã¦ HTTPS ã§ã‚ã‚ã†ã¨ã‚¢ã‚¯ã‚»ã‚¹å…ˆã® Full URL ã¯æ¼ã‚Œã‚‹ã§ã™ã£ã¦ï¼Ÿ Web Proxy Autodiscovery ã§ã™ã£ã¦ï¼Ÿ ãƒãƒ§ãƒƒãƒˆãƒ‹ãƒ›ãƒ³ã‚´ãƒ‡ã‚ªãƒã‚¬ã‚¤ã‚·ãƒžã‚¹ ã£ã¦ã“ã¨ã§ã€ã¾ãã“ã‚ŒãŒå®Ÿéš›ã©ã‚Œãã‚‰ã„ç°¡å˜ã«å®Ÿç¾ã§ãã‚‹æ”»æ’ƒãƒ‘ã‚¿ãƒ¼ãƒ³ãªã®ã‹ã¯ä»–ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ¥ç•Œã®æ–¹ã€…ã«å¾Œã§èžãã¨ã—ã¦ã€ã“ã®è¨˜äº‹ã§ã‚‚è§¦ã‚Œã‚‰ã‚Œã¦ã‚‹ OpenID Connect ã¨ã‹ OAuth2 ã¸ã®å½±éŸ¿ã«ã¤ã„ã¦ã€ã¡ã‚‡ã£ã¨ã¾ã¨ã‚ã¦ãŠãã¾ã—ã‚‡ã†ã‹ã€‚ Authorization Request & Response ãŒæ¼ã‚Œã‚‹ response_mode=form_post ãªã‚“ã¦ã„ã†ã®ã‚‚ä¸€éƒ¨ã‚ã‚Šã¾ã™ãŒã€åŸºæœ¬ OAuth2 /
kaorun 2016/07/28
security

exploit

https

dhcp

oauth
ãƒªãƒ³ã‚¯
MSã€ã€ŒMicrosoftã‚¢ã‚«ã‚¦ãƒ³ãƒˆã€ã¨ã€ŒAzure ADã€ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®çµ±åˆã¸å‰é€²
Microsoftã¯ã€ã€ŒMicrosoftã‚¢ã‚«ã‚¦ãƒ³ãƒˆã€ã¨ã€ŒAzure Active Directoryï¼ˆAzure ADï¼‰ã€ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’çµ±åˆã™ã‚‹ã¨ã„ã†é•·æœŸçš„ãªç›®æ¨™ã«å‘ã‘ã€æœ€åˆã®1æ©ã‚’è¸ã¿å‡ºã—ãŸã€‚ Microsoftã¯ç±³å›½æ™‚é–“8æœˆ12æ—¥ã€ä¸¡è€…ã‚’çµ±åˆã™ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ãƒ¢ãƒ‡ãƒ«ã®ãƒ‘ãƒ–ãƒªãƒƒã‚¯ãƒ—ãƒ¬ãƒ“ãƒ¥ãƒ¼ç‰ˆã®æä¾›ã‚’é–‹å§‹ã—ãŸã€‚ åŒç¤¾ã®ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ãŠã‚ˆã³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚µãƒ¼ãƒ“ã‚¹ã®ãƒ—ãƒã‚°ãƒ©ãƒ ç®¡ç†æ‹…å½“ãƒ‡ã‚£ãƒ¬ã‚¯ã‚¿ãƒ¼ã§ã‚ã‚‹Alex Simonsæ°ã¯ã€Œã“ã‚Œã«ã‚ˆã‚Šé–‹ç™ºè€…ã¯ã€Microsoftã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¨Azure ADã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®åŒæ–¹ã‚’å¿…è¦ã¨ã™ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ã€ã“ã‚Œã¾ã§ã‚‚ã‚ˆã‚Šã‚‚ã€Žã¯ã‚‹ã‹ã«å®¹æ˜“ã«ã€é–‹ç™ºã§ãã‚‹ã‚ˆã†ã«ãªã‚‹ã€ã¨åŒç¤¾ãƒ–ãƒã‚°ã§è¿°ã¹ã¦ã„ã‚‹ã€‚ Microsoftã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¯MicrosoftãŒã‚³ãƒ³ã‚·ãƒ¥ãƒ¼ãƒžãƒ¼å‘ã‘ã«æä¾›ã—ã¦ã„ã‚‹ã‚¯ãƒ©ã‚¦ãƒ‰ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã‚µãƒ¼ãƒ“ã‚¹ã§ã‚ã‚Šã€Azure ADã¯åŒç¤¾ã®ä¼æ¥å‘ã‘ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã‚µãƒ¼
kaorun 2015/08/27
MSAccount

AzureAD

azure

OAuth
ãƒªãƒ³ã‚¯
OAuth 2 Simplified
This post describes OAuth 2.0 in a simplified format to help developers and service providers implement the protocol. The OAuth 2 spec can be a bit confusing to read, so I've written this post to help describe the terminology in a simplified format. The core spec leaves many decisions up to the implementer, often based on security tradeoffs of the implementation. Instead of describing all possible
kaorun 2014/05/16
OAuth

webapi

sample
ãƒªãƒ³ã‚¯
OAuthã¨OpenIDã«æ·±åˆ»ãªè„†å¼±æ€§ã‹--Facebookãªã©å¤§æ‰‹ã‚µã‚¤ãƒˆã«å½±éŸ¿ã‚‚
OpenSSLã®è„†å¼±æ€§ã€ŒHeartbleedã€ã«ç¶šãã€äººæ°—ã®ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã¾ãŸ1ã¤å¤§ããªè„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ãŸã€‚ä»Šå›žã€è„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ãŸã®ã¯ãƒã‚°ã‚¤ãƒ³ãƒ„ãƒ¼ãƒ«ã®ã€ŒOAuthã€ã¨ã€ŒOpenIDã€ã§ã€ã“ã‚Œã‚‰ã®ãƒ„ãƒ¼ãƒ«ã¯å¤šæ•°ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã¨ã€Googleã€Facebookã€Microsoftã€LinkedInã¨ã„ã£ãŸãƒ†ã‚¯ãƒŽãƒã‚¸å¤§æ‰‹ã«ä½¿ã‚ã‚Œã¦ã„ã‚‹ã€‚ ã‚·ãƒ³ã‚¬ãƒãƒ¼ãƒ«ã«ã‚ã‚‹Nanyang Techno logical Universityï¼ˆå—æ´‹ç†å·¥å¤§å¦ï¼‰ã§å¦ã¶åšå£«èª²ç¨‹ã®å¦ç”ŸWang Jingæ°ã¯ã€ã€ŒCovert Redirectã€ã¨ã„ã†æ·±åˆ»ãªè„†å¼±æ€§ã«ã‚ˆã£ã¦ã€å½±éŸ¿ã‚’å—ã‘ã‚‹ã‚µã‚¤ãƒˆã®ãƒ‰ãƒ¡ã‚¤ãƒ³ä¸Šã§ãƒã‚°ã‚¤ãƒ³ç”¨ãƒãƒƒãƒ—ã‚¢ãƒƒãƒ—ç”»é¢ã‚’å½è£…ã§ãã‚‹ã“ã¨ã‚’ç™ºè¦‹ã—ãŸã€‚Covert Redirectã¯ã€æ—¢çŸ¥ã®ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã«åŸºã¥ã„ã¦ã„ã‚‹ã€‚ ãŸã¨ãˆã°ã€æ‚ªæ„ã‚ã‚‹ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ãƒªãƒ³ã‚¯ã‚’ã‚¯ãƒªãƒƒã‚¯ã™ã‚‹ã¨ã€Faceboo
kaorun 2014/05/07
security

exploit

OAuth

openid
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2014/02/27/20140226openid-foundation-launches-openid-connect-identity-protocol-with-support-from-google-microsoft-others/
kaorun 2014/02/27
OpenID

OAuth

microsoft

google

SSO

security
ãƒªãƒ³ã‚¯
Developer resources | Nokia
Industries Trusted networks with superior performance to meet the demands and opportunities of your digital transf ormation.
kaorun 2013/12/23
wpdev

OAuth

nokia
ãƒªãƒ³ã‚¯
neue cc - AsyncOAuth - C#ç”¨ã®å…¨ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ å¯¾å¿œã®éžåŒæœŸOAuthãƒ©ã‚¤ãƒ–ãƒ©ãƒª
å¾…ã¡æœ›ã¾ã‚Œã¦ã„ãŸHttpClientãŒPorta ble Class LibraryåŒ–ã—ã¾ã—ãŸã€ã¾ã Betaã ã‘ã©ãï¼ã¨ã„ã†ã‚ã‘ã§ã€æ—©é€ŸPCLç‰ˆã®HttpClientã‚’ãƒ™ãƒ¼ã‚¹ã«ã—ãŸOAuthãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’ä»•ä¸Šã’ã¦ã¿ã¾ã—ãŸã€‚ãƒãƒ¼ã‚¿ãƒ–ãƒ«ã‚¯ãƒ©ã‚¹ãƒ©ã‚¤ãƒ–ãƒ©ãƒªãªã®ã§ã€.NET 4.5ã¯å‹¿è«–ã€Windows Phone 7.5, 8, Windows Store Apps, Silverlight, ãã‚Œã¨.NET 4.0ã«ã‚‚å¯¾å¿œã§ã™ã€‚ AsyncOAuth - GitHub å‰èº«ã®ReactiveOAuthãŒTwitterã§ã—ã‹ãƒã‚¯ã«ãƒ†ã‚¹ãƒˆã—ã¦ãªãã¦Hatenaã§ã‚ºã‚¿ãƒœãƒã ã£ãŸã“ã¨ã‚’åçœã—ã€ä»Šå›žã¯Sampleã«Twitterã¨Hatenaã‚’å…¥ã‚Œã¦ãŠãã¾ã—ãŸï¼†ã©ã£ã¡ã§ã‚‚ã¡ã‚ƒã‚“ã¨æ£å¸¸ã«å‹•ãã¾ã™ã€‚ãªãŠã€å®Œå…¨ã«ä¸Šä½äº’æ›ãªã®ã§ã€ReactiveOAuthã¯Obsoleteã§ã™ã€‚ãã‚Œã¨ã€ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã¯Nu
kaorun 2013/02/27
neuecc

OAuth

.net

pcl

async

AsyncOAuth

HttpClient

rx
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ - Windows ãƒ©ãƒ³ã‚¿ã‚¤ãƒ ã¨ OAuth ã‚’ä½¿ã£ã¦ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ ã‚µãƒ¼ãƒ“ã‚¹ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹
ã“ã®ãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ã¯ã‚µãƒãƒ¼ãƒˆã•ã‚Œãªããªã‚Šã¾ã—ãŸã€‚ Microsoft Edge ã«ã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰ã™ã‚‹ã¨ã€æœ€æ–°ã®æ©Ÿèƒ½ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ›´æ–°ãƒ—ãƒã‚°ãƒ©ãƒ ã€ãŠã‚ˆã³ãƒ†ã‚¯ãƒ‹ã‚«ãƒ« ã‚µãƒãƒ¼ãƒˆã‚’åˆ©ç”¨ã§ãã¾ã™ã€‚ Windows ãƒ©ãƒ³ã‚¿ã‚¤ãƒ ã¨ OAuth ã‚’ä½¿ã£ã¦ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ ã‚µãƒ¼ãƒ“ã‚¹ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ Tim Kulp ã‚³ãƒ¼ãƒ‰ ã‚µãƒ³ãƒ—ãƒ«ã‚’ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã™ã‚‹ æ˜” Web 1.0 ãŒä½¿ã‚ã‚Œã¦ã„ãŸé ƒã® Web ã‚µã‚¤ãƒˆã¯å˜ã«è©°ã‚è¾¼ã‚“ã ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’èªã¿å–ã‚‹ã ã‘ã®ã‚‚ã®ã§ã—ãŸã€‚é–‹ç™ºéƒ¨é–€ã« Web 2.0 ãŒå°Žå…¥ã•ã‚Œã‚‹ã¨ã€Web ã‚µã‚¤ãƒˆã¯ API ã‚’å‚™ãˆãŸã‚ªãƒ³ãƒ©ã‚¤ãƒ³ ã‚µãƒ¼ãƒ“ã‚¹ã¨ãªã‚Šã€é–‹ç™ºè€…ã¯ã“ã® API ã‚’ä½¿ã£ã¦ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã€ãƒ‡ãƒ¼ã‚¿ã€æ©Ÿèƒ½ã‚’çµ„ã¿åˆã‚ã›ã¦å¯¾å¿œã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ç¾åœ¨ã§ã¯ã€ãƒžãƒƒã‚·ãƒ¥ã‚¢ãƒƒãƒ—ã«ã‚ˆã‚Šã€ãƒ‡ãƒ¼ã‚¿ã‚’ã‚µãƒ¼ãƒãƒ¼ ãƒ«ãƒ¼ãƒ ã§ç®¡ç†ã™ã‚‹ã‚ªãƒ¼ãƒãƒ¼ãƒ˜ãƒƒãƒ‰ã‚’å¿…è¦ã¨ã—ãªã„ã§ã€æ©Ÿèƒ½è±Šå¯Œãªã‚³ãƒ³ãƒ†ãƒ³ãƒ„ ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã¾
kaorun 2013/01/29
WinRT

OAuth
ãƒªãƒ³ã‚¯
Windows.Security.Authentication.Web Namespace - Windows apps
kaorun 2012/11/11
WinRT

OAuth

password

auth
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸