[B! OAuth] skypenguinsã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

skypenguins id:skypenguins

OAuthã«é–¢ã™ã‚‹skypenguinsã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (8)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

OAuth 2.0ã®èªå¯ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆã«ãŠã‘ã‚‹è„†å¼±ãªå®Ÿè£…ä¾‹ã¨å¯¾ç–ã«ã¤ã„ã¦è€ƒãˆã‚‹ - Qiita
èªå¯ã‚³ãƒ¼ãƒ‰ã‚°ãƒ©ãƒ³ãƒˆ RFC 6749ã§å®šç¾©ã•ã‚Œã‚‹OAuthã®èªå¯ã‚³ãƒ¼ãƒ‰ã‚°ãƒ©ãƒ³ãƒˆã§ã¯ã€èªå¯ã‚µãƒ¼ãƒã®å®Ÿè£…ã¨ã—ã¦ã€èªå¯ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆã¨ãƒˆãƒ¼ã‚¯ãƒ³ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆã®2ã¤ãŒå¿…è¦ã§ã™ã€‚ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯å¤§ããåˆ†ã‘ã¦èªå¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆ (Authorization Request) ãŠã‚ˆã³ãƒˆãƒ¼ã‚¯ãƒ³ãƒªã‚¯ã‚¨ã‚¹ãƒˆ (Access Token Request) ã®2ã¤ã«åˆ†ã‘ã‚‰ã‚Œã¾ã™ã€‚ å…¨ä½“ã®ã‚·ãƒ¼ã‚±ãƒ³ã‚¹å›³ã¯ä»¥ä¸‹ã®é€šã‚Šã§ã™ã€‚ PlantUMLã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ @startuml @startuml title èªå¯ã‚³ãƒ¼ãƒ‰ã‚°ãƒ©ãƒ³ãƒˆã«ãŠã‘ã‚‹ã‚·ãƒ¼ã‚±ãƒ³ã‚¹å›³ autonumber actor RO as "ãƒªã‚½ãƒ¼ã‚¹ã‚ªãƒ¼ãƒŠãƒ¼" participant UA as "User-Agent" participant C as "ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆ" participant AS as "èªå¯ã‚µãƒ¼ãƒ" participant RS as "ãƒªã‚½ãƒ¼ã‚¹ã‚µãƒ¼ãƒ
skypenguins 2025/01/01
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

èªå¯

èªè¨¼

OAuth

oidc
ãƒªãƒ³ã‚¯
OAuth/OIDCã®JWTã¾ã¨ã‚ - Qiita
ã¯ã˜ã‚ã« Wikipedia ã® JWT (JSON Web Token) ã«é–¢ã™ã‚‹è¨˜äº‹ãŒèª¤ã£ã¦ã„ãŸã®ã§ã€2020 å¹´ 5 æœˆ 9 æ—¥ã€è‹±èªžç‰ˆã€æ—¥æœ¬èªžç‰ˆã¨ã‚‚ã«ä¿®æ£ã‚’è¡Œã„ã¾ã—ãŸã€‚ ä¿®æ£å‰ã®è¨˜äº‹ã§ã¯ã€JWT ã®ã“ã¨ã‚’ã€ŒJSON ã‚’ãƒ™ãƒ¼ã‚¹ã¨ã—ãŸã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®ãŸã‚ã®ã‚ªãƒ¼ãƒ—ãƒ³æ¨™æº–ã§ã‚ã‚‹ã€ã¨èª¬æ˜Žã—ã¦ã„ã¾ã—ãŸã€‚ã—ã‹ã— JWT ã¯ç”¨é€”ã‚’é™å®šã—ãªã„æ±Žç”¨çš„ãªãƒ‡ãƒ¼ã‚¿ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã§ã™ã€‚ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã¨ã—ã¦ JWT ã‚’æŽ¡ç”¨ã™ã‚‹ã“ã¨ã¯ã€JWT ã®å¿œç”¨äº‹ä¾‹ã®ä¸€ã¤ã«éŽãŽã¾ã›ã‚“ã€‚ãªãŠã€ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã¯å¿…ãšã—ã‚‚ JWT ã¨ã¯é™ã‚Šã¾ã›ã‚“ã€‚â†’ å‚è€ƒ:ã€Žå›³è§£ JWS/JWE/JWT/IDãƒˆãƒ¼ã‚¯ãƒ³/ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®åŒ…å«é–¢ä¿‚ã€ JWT ã‚’çŸ¥ã‚‰ãªã„çŠ¶æ…‹ã§ OAuth ã¨ OpenID Connect ã®å¦ç¿’ã‚’å§‹ã‚ã‚‹ã¨ã€ã€ŒJWT ã¯ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®ãŸã‚ã®æŠ€è¡“ã§ã‚ã‚‹ã€ã€ã€ŒJWT ã¯ãƒ¦ãƒ¼ã‚¶èªè¨¼ã®ãŸã‚ã®æŠ€
skypenguins 2024/12/03
èªè¨¼

èªå¯

OpenID

OIDC

OAuth
ãƒªãƒ³ã‚¯
OAuth & OIDC å‹‰å¼·ä¼š ã€å…¥é–€ç·¨ã€‘ - Authlete
OAuth 2.0 ãŠã‚ˆã³ OpenID Connect (OIDC) ã¯ã€é–¢é€£æŠ€è¡“ã‚’å«ã‚ã€æ•°å¤šãã®ä»•æ§˜ã‹ã‚‰æ§‹æˆã•ã‚Œã¦ã„ã¾ã™ã€‚API ã‚¢ã‚¯ã‚»ã‚¹èªå¯ã‚„ãƒ‡ã‚¸ã‚¿ãƒ«ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã‚’å°‚é–€ã¨ã—ãªã„æ–¹ã«ã¨ã£ã¦ã¯ã€OAuth 2.0 / OIDC ä»•æ§˜ã‚’ã©ã“ã‹ã‚‰ã©ã®ã‚ˆã†ã«ç†è§£ã—ã€ã“ã‚Œã‚‰ã®ä»•æ§˜ã«æº–æ‹ ã—ãŸã‚µãƒ¼ãƒãƒ¼ã‚’ã©ã®ã‚ˆã†ã«å®Ÿè£…ã™ã‚Œã°è‰¯ã„ã®ã‹ã€é›£ã—ã•ã‚’æ„Ÿã˜ã‚‹ã“ã¨ã‚‚å°‘ãªããªã„ã‹ã¨æ€ã„ã¾ã™ã€‚ ãã“ã§ä»Šå›žã¯ã€ä¸€æ˜¨å¹´å®Ÿæ–½ã—å¥½è©•ã‚’åšã—ãŸã€OAuth 2.0 ï¼† OpenID Connect ã‚’ãƒ•ãƒ«ã‚¹ã‚¯ãƒ©ãƒƒãƒå®Ÿè£…ã—ãŸã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ï¼ˆæ ªå¼ä¼šç¤¾ Authlete ä»£è¡¨ï¼‰ã«ã‚ˆã‚‹è§£èª¬ã‚’ä¸å¿ƒã¨ã—ãŸå‹‰å¼·ä¼šã‚’å†é–‹å‚¬ã„ãŸã—ã¾ã™ã€‚ã¾ãŸæœ€è¿‘ã®ä»•æ§˜ç–å®šã®å‹•å‘ã«ã¤ã„ã¦ã‚‚ã€ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã‚’ãŠä¼ãˆã„ãŸã—ã¾ã™ã€‚ OAuth 2.0 ã¨ OpenID Connect ã®æ¦‚è¦ JWS/JWE/JWTã€ID ãƒˆãƒ¼ã‚¯ãƒ³ OAuth 2.0 ã¨ OpenID Co
skypenguins 2024/01/20
èªè¨¼

èªå¯

OAuth

OIDC
ãƒªãƒ³ã‚¯
æœ€æ–°ã®6.0ã§å¦ã¶ï¼åˆã‚ã¦ã®ã²ã¨ã®ãŸã‚ã®Spring Security | ãƒ‰ã‚¯ã‚»ãƒ«
æœ€æ–°ã®6.0ã§å¦ã¶ï¼ åˆã‚ã¦ã®ã²ã¨ã®ãŸã‚ã® Spring Security (æ ª)ã‚¯ãƒ¬ãƒ‡ã‚£ã‚»ã‚¾ãƒ³ å¤šç”°çœŸæ• 2022å¹´6æœˆ28æ—¥(2023å¹´1æœˆæ”¹è¨‚) JSUGå‹‰å¼·ä¼š 1 ã“ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã«ã¤ã„ã¦ â–¸ Spring Securityã®æœ€æ–°æƒ…å ±ã«åŸºã¥ã„ã¦ã€ åŸºç¤Žã‹ã‚‰ä¸å¯§ã«è§£èª¬ã—ã¾ã™ â–¸ å¯¾è±¡è€… â–¸ [å¿…é ˆ] ã“ã®è³‡æ–™ãƒ¬ãƒ™ãƒ«ã®Springã®DIã‚³ãƒ³ãƒ†ãƒŠãƒ»Spring MVC ãƒ»Spring JDBCãƒ»Spring Bootã®çŸ¥è˜ãŒã‚ã‚‹æ–¹ â–¸ Spring Securityã‚’ä½¿ã†ã®ãŒåˆã‚ã¦ã®æ–¹ or Spring Securityã‚’ä½¿ã£ãŸã“ã¨ã¯ã‚ã‚‹ã‘ã©çŸ¥è˜ã‚’ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã—ãŸã„æ–¹ â–¸ ä»¥ä¸‹ã¯ã‚¹ã‚³ãƒ¼ãƒ—å¤–ã¨ã—ã¾ã™ â–¸ OAuthã€OpenID Connectã€SAMLã€Kotlinã€WebFlux 2 https://www.docswell.com/s/MasatoshiTada/5Q4EMZ-spr
skypenguins 2023/08/31
java

spring

oauth

OpenID

èªè¨¼

èªå¯
ãƒªãƒ³ã‚¯
ã€ŒæŒ«æŠ˜ã—ãªã„ OAuth / OpenID Connect å…¥é–€ã€ã®ãƒã‚¤ãƒ³ãƒˆ - Authlete
ã“ã®ãƒ“ãƒ‡ã‚ªã«ã¤ã„ã¦ ã“ã®ãƒ“ãƒ‡ã‚ªã¯ã€2021 å¹´ 10 æœˆ 6 æ—¥ã«é–‹å‚¬ã•ã‚ŒãŸ ã€ŒæŒ«æŠ˜ã—ãªã„ OAuth / OpenID Connect å…¥é–€ã€ã®ç†è§£ã‚’æ·±ã‚ã‚‹ä¼š ã®ãƒ—ãƒ¬ã‚¼ãƒ³ãƒ†ãƒ¼ã‚·ãƒ§ãƒ³éŒ²ç”»ã§ã™ã€‚ 2021 å¹´ 9 æœˆ 18 æ—¥ç™ºå£²ã®ã€ŒSoftware Design 2021 å¹´ 10 æœˆå·ã€ã§ã¯ã€OAuth/OIDC ãŒç‰¹é›†ã•ã‚Œã€ã€ŒæŒ«æŠ˜ã—ãªã„ OAuth/OpenID Connect å…¥é–€ãƒ»API ã‚’å®ˆã‚‹èªè¨¼ãƒ»èªå¯ãƒ•ãƒãƒ¼ã®ã—ãã¿ã€ã¨é¡Œã—ã€Authlete ä»£è¡¨ã®å·å´Žè²´å½¦ãŒå¯„ç¨¿ã—ã¾ã—ãŸã€‚ æœ¬ãƒ—ãƒ¬ã‚¼ãƒ³ãƒ†ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯è¨˜äº‹ã®ãƒã‚¤ãƒ³ãƒˆã‚„ã€ç†è§£ã‚’æ·±ã‚ã‚‹ãŸã‚ã«é‡è¦ãªãƒã‚¤ãƒ³ãƒˆã«ã¤ã„ã¦ã€è‘—è€…ã®å·å´ŽãŒãŠè©±ã—ã—ã¾ã™ã€‚ æ–‡å—èµ·ã“ã— ã¯ã˜ã‚ã« ç›®æ¬¡ è¨˜äº‹ã®ç¬¬1ç« ã€ç¬¬2ç« ã€ç¬¬3ç« ã¯ã€ã“ã†ã„ã†ç›®æ¬¡ã«ãªã£ã¦ã„ã¾ã™ã€‚ ã“ã“ã‹ã‚‰ãƒ”ãƒƒã‚¯ã‚¢ãƒƒãƒ—ã—ã¦ã€ ã“ã‚“ãªã“ã¨ã‚’è©±ã—ã¦ã¾ã™ã€ã¨ã„ã†ã¨ã“ã‚ã‚’ã€ ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ è‡ªå·±ç´¹ä»‹ Au
skypenguins 2021/10/19
èªè¨¼ãƒ»èªå¯

API

OAuth

OpenID
ãƒªãƒ³ã‚¯
TwitterAPI 1.1ã§ãƒªãƒ„ã‚¤ãƒ¼ãƒˆãƒ©ãƒ³ã‚ãƒ³ã‚°ã‚’ä½œã‚‹ ï½œ Tips Note by TAM
Twitter API1.1ã«ç§»è¡Œã—ã¦ã—ã°ã‚‰ãçµŒã¡ã¾ã™ãŒã€ä»Šã¾ã§ã¨é•ã£ã¦è‰²ã€…ä¾¿åˆ©ã«ãªã£ãŸéƒ¨åˆ†ã‚„ ä¸ä¾¿ã«ãªã£ãŸéƒ¨åˆ†ãªã©è‰²ã€…ã‚ã£ãŸã®ã§ãƒã‚¹ãƒˆã—ã¦ãŠãã¾ã™ã€‚ â– API 1.1 API1.1ã«ãªã£ã¦ã‹ã‚‰ã¯ã©ã®APIã‚’ä½¿ç”¨ã™ã‚‹ã«ã‚‚ã‚¢ãƒ—ãƒªçµŒç”±ã§ã‚¢ã‚¯ã‚»ã‚¹ã•ã›ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ä¾‹ãˆã°ç‰¹å®šã®ãƒ¯ãƒ¼ãƒ‰ã§æ¤œç´¢ã™ã‚‹å ´åˆã€ä»Šã¾ã§ã¯searchã®URLã«GETã§æ¤œç´¢ã™ã‚‹ãƒ¯ãƒ¼ãƒ‰ã‚’æŠ•ã’ã‚‹ã ã‘ã€ã¨ã„ã†ãŠæ‰‹è»½ä»•æ§˜ã ã£ãŸã®ã§ã™ãŒã€ å‚è€ƒï¼šSearch API (ãƒ„ã‚¤ãƒ¼ãƒˆã®æ¤œç´¢) 1.1ã‹ã‚‰ã¯ã‚¢ãƒ—ãƒªçµŒç”±ã§oauthèªè¨¼ã•ã›ã¦ã‹ã‚‰APIã‚’å©ãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ãƒ»PHP twitteroauth - GitHub å‚è€ƒãƒšãƒ¼ã‚¸ï¼šTwitter API 1.1 ã‚’ä½¿ç”¨ã—ã¦PHPã§ã¤ã¶ã‚„ãã®æ¤œç´¢çµæžœã‚’å–å¾—ã—ãŸã¨ãã®ãƒ¡ãƒ¢ ãƒ»JavaScript oauth.js å‚è€ƒãƒšãƒ¼ã‚¸ï¼šJavaScriptã§OAuthèªè¨¼ã‚’ä½¿ã£ã¦Twitterã®Time
skypenguins 2016/02/27
twitter

OAuth

twitterapi

ãƒªãƒ„ã‚¤ãƒ¼ãƒˆ

é–‹ç™º
ãƒªãƒ³ã‚¯
ãƒ—ãƒãƒ†ã‚¯ãƒˆå¼·åŒ–å¾Œã®ã‚‚ãµã£ãŸãƒ¼ã‚‚äºˆæƒ³ä»¥ä¸Šã«é…·ã‹ã£ãŸä»¶(è¿½è¨˜ã‚ã‚Š)
ã“ã¨ã®ã‚ã‚‰ã¾ã—Twitterã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚‚ãµã£ãŸãƒ¼ã®ä½œè€…ã€ŒTweetDeckã®consumer secretç°¡å˜ã«æŠœã‘ã‚‹ã€çµ‚ã‚ã£ã¦ã‚‹ã€(http://blog.livedoor.jp/blackwingcat/archives/1760823.html)åˆ¥ã®èª°ã‹ã€Œã‚‚ãµã£ãŸãƒ¼ã®consumer secretã‚‚ç°¡å˜ã«æŠœã‘ã‚‹ã€(http://d.hatena.ne.jp/kusano_k/20130318/1363640368)ã‚‚ãµã£ãŸãƒ¼ã®ä½œè€…ã€Œãƒ—ãƒãƒ†ã‚¯ãƒˆå¼·åŒ–ã—ãŸã€(http://blog.livedoor.jp/blackwingcat/archives/1762970.html)ã€Œãƒ—ãƒãƒ†ã‚¯ãƒˆã‹ã‘ãŸã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’å®Ÿè£…ã—ãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«å·®ã—æ›¿ãˆã€ãŸãªã‚“ã¦è¨€ã‚ã‚Œã‚‹ã¨æœ¬å½“ã«ã€Œãƒ—ãƒãƒ†ã‚¯ãƒˆã€ãŒã‹ã‹ã£ã¦ã„ã‚‹ã®ã‹ç¢ºã‹ã‚ã¦ã¿ãŸããªã‚‹ã®ãŒäººæƒ…ã¨ã„ã†ã‚‚ã®ã€‚ã¨ã„ã†ã‚ã‘ã§ã€ãƒ—ãƒãƒ†ã‚¯ãƒˆå¼·åŒ–å¾Œã®ã‚‚ãµã£ãŸãƒ¼(v0.9.6b)
skypenguins 2015/11/03
OAuth

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢

å¢—ç”°

ãƒªãƒãƒ¼ã‚¹
ãƒªãƒ³ã‚¯
OAuth/OpenID Connectã‚’ç”¨ã„ã¦IDé€£æºã‚’å®Ÿè£…ã™ã‚‹ã¨ãã«æ°—ã‚’ä»˜ã‘ã‚‹ã“ã¨ #yapcasia
YAPC::Asia Tokyo 2014 ã§è©±ã—ãŸã‚¹ãƒ©ã‚¤ãƒ‰ã§ã™ã€‚ http://yapcasia.org/2014/talk/show/cc57f3ca-01b8-11e4-b7e8-e4a96aeab6a4
skypenguins 2015/08/25
é–‹ç™º

OpenID

OAuth

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

OpenID Connect
ãƒªãƒ³ã‚¯
1