[B! oauth2.0] proto_jpã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

proto_jp id:proto_jp

oauth2.0ã«é–¢ã™ã‚‹proto_jpã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Implicit Flow ã§ã¯ Covert Redirect ã§ Token æ¼ã‚Œã‚‹ã - OAuth.jp
ã“ã®è¨˜äº‹ã¯ã€å…ˆã»ã©æ›¸ã„ãŸã“ã¡ã‚‰ã®è¨˜äº‹ã®è¨‚æ£ç‰ˆã§ã™ã€‚ è¨˜äº‹ã«å…¥ã‚‹å‰ã«ã€ã¾ãšã¯å…¨ã‚·ãƒ³ã‚¬ãƒãƒ¼ãƒ«ã«ãŠè©«ã³ç”³ã—ä¸Šã’ã¾ã™m m ã•ã¦ã€Covert Redirect ã«ã¤ã„ã¦ã®èª¬æ˜Žã¯â€¦è¶…çµ¶å–ã‚Šæ¶ˆã—ç·šã¯ã„ã‚Šã¾ãã£ã¦ã‚‹å‰ã®è¨˜äº‹ã‚’èªã‚“ã§ãã ã•ã„ã€ã§ã„ã„ã§ã—ã‚‡ã†ã‹ï¼Ÿ ã§ã€è¨‚æ£åˆ†ã ã‘ä»¥ä¸‹ã«ã€‚ Fragment Handling in Redirect å®®å·ã•ã‚“ãŒè¨˜äº‹ã«ã—ã¦ã¾ã™ãã€‚ è‹±èªžã ã‘ã©ã€‚ ã§ã€ã¾ãè¦ã™ã‚‹ã«ã€(Modern Browser ã¯) 30x ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆæ™‚ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆå…ƒã«ä»˜ã„ã¦ãŸ URL fragment ã‚’ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆå…ˆã«ã‚‚å¼•ã£ä»˜ã‘ã‚‹ã€ã¨ã€‚ fragment ã¯ server-side ã«ã¯é€ã‚‰ã‚Œãªã„ã‘ã©ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚µã‚¤ãƒ‰ã§ã¯ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆå…ˆã«å¼•ãç¶™ãŒã‚Œã‚‹ã€ã¨ã€‚ è©¦ã—ã« http://www.idcon.org/#foobar ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ã€http://idcon.org/#fooba
proto_jp 2014/05/07
oauth2.0

hack

javascript
ãƒªãƒ³ã‚¯
ã€Node.jsã€‘OAuthèªè¨¼ã§PassportãŒæœ€å¼·ã«ä½¿ã„ã‚„ã™ã„
proto_jp 2013/02/01
node.js

passport

oauth

oauth2.0
ãƒªãƒ³ã‚¯
Google+ APIï½·ï¾€â”â”â”â”(ï¾Ÿâˆ€ï¾Ÿ)â”â”â”â”ï½¯!! - ãšã£ã¨å›ã®ã‚¿ãƒ¼ãƒ³
ã‚„ã£ã¨ã§ã¾ã—ãŸã€Google+ APIï¼ã“ã‚Œã§ä»Šå›žã®GDDã‚‚ãŠã‚‚ã—ã‚ããªã‚Šãã†ï¼ APIã‚’ä½¿ç”¨ã—ã¦ã§ãã‚‹ã“ã¨ã¯ã¾ã æƒ…å ±ã®å–å¾—ã ã‘ã ã‘ã©ã€å¤§ä½“ã©ã‚“ãªæ„Ÿã˜ã®APIã«ãªã‚‹ã‹ã¯æƒ³åƒã§ãã‚‹ã—ã€Javaã€PHPã€Pythonã€Rubyã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒªãŒæ—¢ã«å˜åœ¨ã™ã‚‹ã®ã‚‚ç´ æ™´ã‚‰ã—ã„ã€‚ï¼ˆæœ¬éŸ³ã‚’è¨€ãˆã°Rubyç‰ˆãªã‚“ã‹ã¯è‡ªåˆ†ã§ä½œã£ã¦ã¿ãŸã‹ã£ãŸæ°—ã‚‚ã™ã‚‹ã‘ã©ãƒ»ãƒ»ãƒ»ï¼‰ ã¨ã‚Šã‚ãˆãšãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã®ãƒˆãƒƒãƒ—ãƒšãƒ¼ã‚¸ã‚’è¨³ã—ã¦ã¿ã¾ã—ãŸã€‚ http://developers.google.com/+/api/ Google+ API Goolge+ APIã¯Google+ã®ãŸã‚ã®ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã§ã™ã€‚ã“ã®APIã‚’åˆ©ç”¨ã™ã‚‹ã¨ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚„ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚’Google+ã¨çµ±åˆã§ãã¾ã™ã€‚ã“ã‚Œã«ã‚ˆã£ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯ã‚ãªãŸã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å†…ã§Google+ã®æ©Ÿèƒ½ã‚’æœ€å¤§é™ã«åˆ©ç”¨ã—ã¦ç›¸äº’ã«ç¹‹ãŒã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ æ³¨: Google+ A
proto_jp 2011/09/16
google+

google

oauth2.0

oauth

api

javascript

json
ãƒªãƒ³ã‚¯
http://instagr.am/oauth/manage_access
proto_jp 2011/02/28
instagram

oauth

oauth2.0
ãƒªãƒ³ã‚¯
Instagram APIã¯OAuth 2.0ã¨xAuthã«å¯¾å¿œã—ã¦ã„ã‚‹ã¨ã„ã†è¬Ž - r-weblife
ãªãœInstagram APIã¯OAuth 2.0 + xAuthãªã®ï¼ŸOAuth 2.0 draft 10ãªã‚‰Resource Owner Password Credentialsãªã‚“ã˜ã‚ƒãªã„ã®ï¼Ÿç¶šãã¯Blogã«æ›¸ãã¾ã™ http://twitter.com/ritou/status/40750451557277696 ã¨ã„ã†ã“ã¨ã§ã€ä»Šæ—¥ã¯Instagram APIã®OAuthå®Ÿè£…ã‚’ç¢ºèªã—ã¦ã¿ã¾ã™ã€‚ ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã¯ã“ã¡ã‚‰ã§ã™ã€‚ é–‹ç™ºè€…ã¨ã—ã¦ã®ç™»éŒ²ã¨ãƒã‚°ã‚¤ãƒ³ãŒå¿…è¦ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ https://api.instagram.com/developer/auth/ OAuth 2.0 Draft 10ã®ï¼’ã¤ã®Profileã‚’ã‚µãƒãƒ¼ãƒˆ ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã¯ä»¥ä¸‹ã®ã‚ˆã†ã«æ›¸ã„ã¦ã‚ã‚Šã¾ã™ã€‚ Server-side (Explicit) Flow : web server profileã«ç›¸å½“ Client
proto_jp 2011/02/26
instagram

api

oauth2.0

oauth
ãƒªãƒ³ã‚¯
1