RFC7636ã¨ã—ã¦ç™ºè¡Œã•ã‚ŒãŸOAuth PKCEã¨ã¯ - r-weblifeãŠã²ã•ã—ã¶ã‚Šã§ã™ã€ritouã§ã™ã€‚ 今日ã¯å®¶ã§é¢¨é‚ªæ²»ã—ã¦ã¾ã—ãŸãŒã€TLã«æµã‚Œã¦ããŸæ¬¡ä¸–代ãªã‚“ã¡ã‚ƒã‚‰ã®è©±é¡Œã«ä¹—ã£ã‹ã£ã¦ã€ã–ã£ãã‚Šã¨ã—ãŸä»•æ§˜ç´¹ä»‹ã§ã™ã€‚ ベンダー個別ã®ãƒ‘スワード管ç†ã«ã¯èª²ç¨Žã›ã‚ˆï¼ï¼Ÿ 次世代Webカンファレンス『identity〠#nextwebconf #nextwebconf407 - Togetter OAuth PKCEãŒRFC7636ã¨ã—ã¦ç™ºè¡Œã•ã‚Œã¾ã—ãŸã€‚ | @_Nat Zone RFC 7636 - Proof Key for Code Exchange by OAuth Public Clients 一言ã§ã„ã†ã¨ ã“ã®è¦æ ¼ã¯OAuth 2.0 [RFC6749]ã®Public Client ã® Code Interception Attack 脆弱性ã«å¯¾å¿œã™ã‚‹ã‚‚ã®ã§ã€ephemeral keyを生æˆã—ã¦ã€ã“れを使ã£ãŸProof of Possession of
Twitterã®OAuth脆弱性
Twitterå…¬å¼ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ã‚³ãƒ³ã‚·ãƒ¥ãƒ¼ãƒžã‚ー — Gist
ブãƒã‚°
Twitterã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŒãƒãƒƒã‚¯ã•ã‚ŒãŸäººãŒå¤–部アプリã®ä½œè€…ã«ã‚µãƒ¼ãƒ“スã®å…¨åœæ¢ã‚’è¦æ±‚
HybridAuth, open source social sign on php library
磯野ーï¼ãƒ¯ãƒ¼ãƒ‰ã‚µãƒ©ãƒ€ä½œã£ã¦ã‚¢ãƒ•ã‚£ãƒªã‚¨ã‚¤ãƒˆä»˜ã‚¹ãƒ‘ムブãƒã‚°ã—よã†ãœãƒ¼ï¼ | 月ã¨ç‡ƒç´ ã¨ã€ã²ã¨åŒ™ã®ç ‚ç³–
å˜ãªã‚‹ OAuth 2.0 ã‚’èªè¨¼ã«ä½¿ã†ã¨ã€è»ŠãŒé€šã‚Œã‚‹ã»ã©ã®ã©ã§ã‹ã„ã‚»ã‚ュリティー・ホールãŒã§ãã‚‹
{{#tags}}- {{label}}
{{/tags}}