RFC7636ã¨ã—ã¦ç™ºè¡Œã•ã‚ŒãŸOAuth PKCEã¨ã¯ - r-weblifeãŠã²ã•ã—ã¶ã‚Šã§ã™ã€ritouã§ã™ã€‚ 今日ã¯å®¶ã§é¢¨é‚ªæ²»ã—ã¦ã¾ã—ãŸãŒã€TLã«æµã‚Œã¦ããŸæ¬¡ä¸–代ãªã‚“ã¡ã‚ƒã‚‰ã®è©±é¡Œã«ä¹—ã£ã‹ã£ã¦ã€ã–ã£ãã‚Šã¨ã—ãŸä»•æ§˜ç´¹ä»‹ã§ã™ã€‚ ベンダー個別ã®ãƒ‘スワード管ç†ã«ã¯èª²ç¨Žã›ã‚ˆï¼ï¼Ÿ 次世代Webカンファレンス『identity〠#nextwebconf #nextwebconf407 - Togetter OAuth PKCEãŒRFC7636ã¨ã—ã¦ç™ºè¡Œã•ã‚Œã¾ã—ãŸã€‚ | @_Nat Zone RFC 7636 - Proof Key for Code Exchange by OAuth Public Clients 一言ã§ã„ã†ã¨ ã“ã®è¦æ ¼ã¯OAuth 2.0 [RFC6749]ã®Public Client ã® Code Interception Attack 脆弱性ã«å¯¾å¿œã™ã‚‹ã‚‚ã®ã§ã€ephemeral keyを生æˆã—ã¦ã€ã“れを使ã£ãŸProof of Possession of
RFC2616 is Dead
{{#tags}}- {{label}}
{{/tags}}