[B! OAuth] airj12ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

airj12 id:airj12

OAuthã«é–¢ã™ã‚‹airj12ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (13)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã€ŒOAuth 2.0ã€ã®åŸºæœ¬å‹•ä½œã‚’çŸ¥ã‚‹
SNSãªã©è¤‡æ•°ã®Webã‚µãƒ¼ãƒ“ã‚¹ãŒé€£æºã—ã¦å‹•ãã‚µãƒ¼ãƒ“ã‚¹ãŒåºƒãä½¿ã‚ã‚Œã¦ã„ã‚‹ã€‚é€£æºã«å¿…è¦ä¸å¯æ¬ ãªã®ãŒã€ã‚¢ã‚¯ã‚»ã‚¹æ¨©é™ã‚’ã‚»ã‚ãƒ¥ã‚¢ã«å—ã‘æ¸¡ã™ãŸã‚ã®ä»•çµ„ã¿ã ã€‚æœ¬é€£è¼‰ã§ã¯ã“ã®ã‚ˆã†ãªä»•çµ„ã¿ã®ã†ã¡ã€ã€ŒOAuth 2.0ã€ã‚„ã€ŒOpenID Connectã€ã€ŒSCIMã€ã®æœ€æ–°å‹•å‘ã¨æŠ€è¡“ã®å†…å®¹ã‚’ç´¹ä»‹ã™ã‚‹ã€‚ OpenID Foundation Japan Evangelistã®ritouã§ã™ã€‚ æœ¬é€£è¼‰ã§ã¯ã€Webã‚µãƒ¼ãƒ“ã‚¹ã®é€£æºã«å¿…è¦ä¸å¯æ¬ ãªã‚¢ã‚¯ã‚»ã‚¹æ¨©é™ã®å—ã‘æ¸¡ã—ã‚’å¯èƒ½ã«ã™ã‚‹æŠ€è¡“ã¨ã—ã¦ã€ã€ŒOAuthã€ã‚„ã€ŒOpenIDã€ã€ŒSCIMã€ã®æœ€æ–°å‹•å‘ã¨æŠ€è¡“ã®å†…å®¹ã‚’ç´¹ä»‹ã—ã¦ã„ãã¾ã™ã€‚ç¬¬1å›žã¨ç¬¬2å›žã¯OAuth 2.0ã‚’æ‰±ã„ã¾ã™ã€‚ OAuth 2.0ã®ä»•æ§˜ã‚’å®šã‚ãŸã€ŒRFC 6749ã€ã€ŒRFC 6750ã€ãŒã€2012å¹´10æœˆã«å…¬é–‹ã•ã‚Œã¦ã‹ã‚‰ã€ç´„5å¹´ãŒçµŒéŽã—ã¾ã—ãŸï¼Š1ï¼‰ã€‚OAuth 2.0ã¯å¹…åºƒãä½¿ã‚ã‚Œã‚‹æŠ€è¡“ã«è‚²ã£ã¦ã„ã¾ã™ã€‚ç¬¬1å›žã¯ãƒ¦ãƒ¼
airj12 2017/09/01
oauth
ãƒªãƒ³ã‚¯
äº‹å‹™å±€ãƒ–ãƒã‚°ï¼šã€ŒCovert Redirectã€ã«ã¤ã„ã¦ã® John Bradley æ°ã®è§£èª¬ï¼ˆè¿½è¨˜ã‚ã‚Šï¼‰
è¿½è¨˜ (5/7 20:30): æœ¬æ–‡ä¸ã«ã€Œã¾ã¨ã‚‚ãªãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ã§ã‚ã‚Œã°ã€ãã®ãƒ•ãƒ©ã‚°ãƒ¡ãƒ³ãƒˆã‚’ URI ã®ä¸€éƒ¨ã«ã™ã‚‹ã‚ˆã†ãªã“ã¨ã¯ãªã„ã‹ã‚‰ã€ã‚ªãƒ¼ãƒ—ãƒ³ãƒ»ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ã‚¿ãƒ¼ã«ã¯é€ã‚‰ã‚Œãªã„ã€‚ã€ã¨ã‚ã‚Šã¾ã™ãŒã€å°‘ãªãã¨ã‚‚ Chrome ã¨ Firefox ã¯ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆæ™‚ã« URI ãƒ•ãƒ©ã‚°ãƒ¡ãƒ³ãƒˆã‚’ãã®ã¾ã¾ä¿ã¤ (i.e. ä¸ååˆ†ãª redirect_uri ãƒã‚§ãƒƒã‚¯ & ã‚ªãƒ¼ãƒ—ãƒ³ãƒ»ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ã‚¿ãƒ¼ & ã‚¤ãƒ³ãƒ—ãƒªã‚·ãƒƒãƒˆãƒ»ãƒ•ãƒãƒ¼ã®å ´åˆã€ã‚¢ã‚¯ã‚»ã‚¹ãƒ»ãƒˆãƒ¼ã‚¯ãƒ³å…¥ã‚Šã® URI ãƒ•ãƒ©ã‚°ãƒ¡ãƒ³ãƒˆã‚’ã€ãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ãŒãã®ã¾ã¾ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆå…ˆã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ç”¨ã„ã‚‹) ã¨ã®ã“ã¨ã§ã™ã€‚ç¶šå ±ãŒã‚ã‚Šæ¬¡ç¬¬è¿½è¨˜ã—ã¾ã™ã€‚ è¿½è¨˜2 (5/7 23:50): John Bradley æ°è‡ªèº«ã«ã‚ˆã‚‹ãƒ•ã‚©ãƒãƒ¼ã‚¢ãƒƒãƒ—ã‚’è¨³ã—ã¾ã—ãŸã€‚ Covert Redirect and its real impact on OAuth and OpenID Connect ã‚’ã€ã¨
airj12 2014/05/07
security

oauth

openid
ãƒªãƒ³ã‚¯
ã€æ‹¡æ•£å¸Œæœ›ã€‘twitterã®æ–°åž‹ã‚¦ã‚¤ãƒ«ã‚¹ãŒãƒ¤ãƒã„ URLè¸ã‚“ã ã ã‘ã§ã‚¢ã‚¦ãƒˆ
2020/10/18 ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ D4DJ Groovy Mix ã‚ªãƒ¼ãƒ—ãƒ³ãƒ™ãƒ¼ã‚¿é–‹å§‹ 2020/10/18 ï¼¤ï¼ª ç§‹è‘‰åŽŸ(ã‚’å¤¢è¦‹ã‚‹)ãƒ‘ãƒ©ãƒ€ã‚¤ã‚¹ãƒ¬ã‚¤ãƒ‡ã‚£ã‚ª Vol.1 @ twitché…ä¿¡ 2020/10/25 ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ D4DJ Groovy Mix ãƒªãƒªãƒ¼ã‚¹ 2020/11/14 ï¼¤ï¼ª UNDER Freaks 2nd anniv. @ æ¸‹è°·Cafe W (æ¸‹è°·WOMB 1F) (2013/03/01 14:40è¿½è¨˜) twitterå´ã§ã€ã“ã®ã‚¿ã‚¤ãƒ—ã®ã‚¦ã‚¤ãƒ«ã‚¹ã¸ã®å¯¾ç–ãŒå–ã‚‰ã‚Œã€ã€ŒURLã‚’è¸ã‚“ã ã ã‘ã§ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä¹—ã£å–ã‚‰ã‚Œã‚‹ã€ã¨ã„ã†è„…å¨ã¯ç„¡ããªã‚Šã¾ã—ãŸ twitterã«å‡ºç¾ã—ãŸæ–°åž‹ã‚¦ã‚¤ãƒ«ã‚¹ãŒéžå¸¸ã«ãƒ¤ãƒã„ã®ã§ã€å¯¾å‡¦æ³•ãªã©ã‚’ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ #æ£ã—ãã¯ã‚¦ã‚¤ãƒ«ã‚¹ã§ã¯ãªãã€Œæ”»æ’ƒã‚µã‚¤ãƒˆã€ã§ã™ãŒã€è„…å¨ãŒä¼ã‚ã‚Šã¥ã‚‰ã„ã®ã§é‡£ã‚Šæ°—å‘³ã«ã€Œã‚¦ã‚¤ãƒ«ã‚¹ã€ã¨æ›¸ã„ã¦ã¾ã™ã€‚ (2013/02/28 23:08è¿½è¨˜)ï¼š
airj12 2013/03/01
security

Twitter

OAuth
ãƒªãƒ³ã‚¯
OAuthã®èªè¨¼ã«WebViewã‚’ä½¿ã†ã®ã¯ã‚„ã‚ã‚ˆã†
Androidã‹ã‚‰Twitterã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ãŸã‚ã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã¨ã—ã¦ï¼ŒTwitter4JãŒæœ‰åã§ã™ï¼Ž ã“ã‚Œã‚’ä½¿ã£ã¦ã¿ã‚ˆã†ã¨ï¼Œã€ŒAndroid Twitter4Jã€ã¨æ¤œç´¢ã™ã‚‹ã¨ èªè¨¼ã«WebViewã‚’ä½¿ã£ãŸä¾‹ãŒãŸãã•ã‚“å‡ºã¦ãã¾ã™ï¼Ž ãƒ»ãƒ»ãƒ»ã„ã‚„ï¼Œã¡ã‚‡ã£ã¨ã¾ã¦ï¼Ž ãã‚Œã¯ã¡ã‚‡ã£ã¨ã¾ãšã„ã ã‚ã†ï¼Ž ãã†ã„ã†ã‚ã‘ã§ã‚‚ã†ã¡ã‚‡ã£ã¨è³¢ã„æ–¹æ³•ã‚’æŽ¢ã—ã¦ã¿ã¾ã—ãŸï¼Ž ä½•ãŒã¾ãšã„ã®ã• ã€ŒAndroid Twitter4Jã€ã¨æ¤œç´¢ã™ã‚‹ã¨ï¼Œä¸Šä½ã«ã“ã‚“ãªãƒšãƒ¼ã‚¸ãŒå‡ºã¦ãã¾ã™ï¼Ž Twitter4jã‚’ä½¿ã£ã¦OAuthèªè¨¼ã‚’ã‚¢ãƒ—ãƒªå†…ã§è¡Œã†æ–¹æ³• Twitter4j-2.2.xã‚’ä½¿ã£ãŸOAuthèªè¨¼ã®ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ä¾‹ twitter4jã§ãƒ„ã‚¤ãƒ¼ãƒˆã™ã‚‹ Android+Twitter4Jã§OAuthã™ã‚‹ãŸã‚ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ ä¸Šã®ã‚µã‚¤ãƒˆã§ã¯æ¬¡ã®æ§˜ã¯æ–¹æ³•ã‚’ã¨ã£ã¦ã„ã¾ã™ï¼Ž ã‚¢ãƒ—ãƒªå†…ã«WebViewã‚’è²¼ã‚Šä»˜ã‘ WebViewã§Twitterã®èªè¨¼ç”»é¢
airj12 2012/11/28
OAuth

security

Android
ãƒªãƒ³ã‚¯
RFCã¨ãªã£ãŸã€ŒOAuth 2.0ã€â€•â€•ãã®è¦ç‚¹ã¯ï¼Ÿ
RFCã¨ãªã£ãŸã€ŒOAuth 2.0ã€â€•â€•ãã®è¦ç‚¹ã¯ï¼Ÿï¼šãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£æŠ€è¡“æœ€æ–°å‹•å‘ï¼ˆ2ï¼‰ï¼ˆ1/2 ãƒšãƒ¼ã‚¸ï¼‰ ã„ã¾Webã®ä¸–ç•Œã§ã¯ã€ã•ã¾ã–ã¾ãªWebã‚µãƒ¼ãƒ“ã‚¹ãŒæä¾›ã™ã‚‹ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã¨ã€ã‚µãƒ¼ ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ãŒæä¾›ã™ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒAPIã‚’ä¸å¿ƒã«çµã³ä»˜ãã€ä¸€ç¨®ã®ã€ŒAPIã‚¨ã‚³ãƒŽãƒŸãƒ¼ã€ã‚’å½¢æˆã—ã¦ã„ã¾ã™ã€‚ã“ã®é€£è¼‰ã§ã¯ã€ãã“ã§é‡è¦ãªå½¹å‰²ã‚’æžœãŸã™ã€Œãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã€ã«ã¤ã„ã¦ç†è§£ã‚’æ·±ã‚ã¦ã„ãã¾ã™ã€‚ å†ã³ã€ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã®ä¸–ç•Œã¸ã‚ˆã†ã“ã å‰å›žã€Œã€ŽOAuthã€ã®åŸºæœ¬å‹•ä½œã‚’çŸ¥ã‚‹ã€ã§ã¯OAuthã®ä»•æ§˜ãŒã©ã†ã„ã†ã‚‚ã®ã‹ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã—ãŸã€‚ä»Šå›žã¯å¼•ãç¶šãã€ OAuth 1.0ã¨OAuth 2.0ã®é•ã„ OAuth 2.0ã‚’ã‚»ã‚ãƒ¥ã‚¢ã«ä½¿ã†ãŸã‚ã«çŸ¥ã£ã¦ãŠãã¹ãã“ã¨ ã«ã¤ã„ã¦è¿°ã¹ã¦ã„ãã¾ã™ã€‚ OAuth 1.0ã¨OAuth 2.0ã®é•ã„ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚¿ã‚¤ãƒ—ã®å®šç¾© OAuth 2.0ã§ã¯ã€O
airj12 2012/09/12
OAuth
ãƒªãƒ³ã‚¯
ã€ŒOAuthã€ã®åŸºæœ¬å‹•ä½œã‚’çŸ¥ã‚‹
ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã®ä¸–ç•Œã¸ã‚ˆã†ã“ã ã¯ã˜ã‚ã¾ã—ã¦ã€OpenID Foundation Japanã§ã‚¨ãƒãƒ³ã‚¸ã‚§ãƒªã‚¹ãƒˆã‚’ã—ã¦ã„ã‚‹Novã§ã™ã€‚ ã“ã®é€£è¼‰ã§ã¯ã€åƒ•ã‚’å«ã‚OpenID Foundation Japanã«ã‹ã‹ã‚ã‚‹ãƒ¡ãƒ³ãƒãƒ¼ã§ã€OpenID Connectã‚„OAuthãªã©ã®ã€Œãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ï¼ˆDigital Identityï¼‰ã€ã«ã‹ã‹ã‚ã‚‹æŠ€è¡“ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¦ã„ãã¾ã™ã€‚ APIã‚¨ã‚³ãƒŽãƒŸãƒ¼æ™‚ä»£ã®ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ ä¸–ç•Œä¸ã§9å„„äººã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’æŠ±ãˆã‚‹ã€ŒFacebookã€ã‚„5å„„äººã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’æŒã¤ã€ŒTwitterã€ãªã©ã€å·¨å¤§ãªã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚°ãƒ©ãƒ•ã‚’æŒã¤ã‚µãƒ¼ãƒ“ã‚¹ãŒã€æ—¥ã€…ãã®å˜åœ¨æ„Ÿã‚’å¢—ã—ã¦ã„ã¾ã™ã€‚æ—¥æœ¬ã§ã‚‚ã€ã‚°ãƒªãƒ¼ã‚„ãƒ¢ãƒã‚²ãƒ¼ãªã©ãŒãã‚Œãžã‚Œã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚²ãƒ¼ãƒ ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã‚’å…¬é–‹ã—ã€å›½å†…ã«ä¸€æ°—ã«å·¨å¤§ãªã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚²ãƒ¼ãƒ å¸‚å ´ã‚’ä½œã‚Šä¸Šã’ã¾ã—ãŸã€‚æœ€è¿‘ã§ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼æ•°ãŒ5000ä¸‡äººã‚’çªç ´ã—ã€ãƒ—ãƒ©ãƒƒãƒˆ
airj12 2012/08/27
oauth
ãƒªãƒ³ã‚¯
node.js+express+Passportã§OAuthèªè¨¼ - Tech-Sketch
è»½ã‚ã®è©±é¡Œã‚’ æ¯Žå›žå‰²ã¨ã€Œæ¿ƒã„ç›®ã€ã®è¨˜äº‹ãŒå¤šã„ã“ã®Tech-Sketchã§ã™ãŒã€ä»Šå›žã¯è»½ã‚ã®å†…å®¹ã¨ã—ã¦ã€nodejsã¨ãã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ã‚ã‚‹Passportã‚’åˆ©ç”¨ã—ãŸä»–ã‚µãƒ¼ãƒ“ã‚¹ã¨ã®èªè¨¼é€£æºã‚’èª¬æ˜Žã—ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ Passportã¯Connectã‚„Expressãƒ™ãƒ¼ã‚¹ã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«èªè¨¼ã®ä»•çµ„ã¿ã‚’çµ„ã¿è¾¼ã‚€ã“ã¨ãŒã§ãã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ã™ã€‚å˜ç´”ãªãƒãƒ¼ã‚«ãƒ«ã§ã®ãƒ¦ãƒ¼ã‚¶åãƒ»ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ã‚ˆã‚‹èªè¨¼ã‹ã‚‰ã€OpenIDã‚„OAuthã‚’åˆ©ç”¨ã—ãŸèªè¨¼ã‚‚ã‚«ãƒãƒ¼ã—ã¦ã„ã¾ã™ã€‚ãã‚Œãžã‚Œã®èªè¨¼ã®æ–¹å¼ã¯strategyã¨ã—ã¦é¸æŠžã™ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã€ç°¡å˜ã«èªè¨¼ã«é–¢ã™ã‚‹å®Ÿè£…ã‚’è¿½åŠ ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚OpenID/OAuthã§èªè¨¼ã‚’è¡Œã†å ´åˆã®strategyã¯ã€ãƒ¡ã‚¸ãƒ£ãƒ¼ãªã‚µãƒ¼ãƒ“ã‚¹ã«å¯¾ã—ã¦ã®ã‚‚ã®ã¯npmã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã§ãã‚‹å½¢ã§ã™ã§ã«å¤šæ•°ç”¨æ„ã•ã‚Œã¦ã„ã¾ã™ã€‚ å…·ä½“çš„ã«ã©ã®ã‚ˆã†ãªstrategyãŒç”¨æ„ã•ã‚Œã¦ã„ã‚‹ã‹ã¯ã€ä»¥ä¸‹ã®ãƒªãƒ³ã‚¯å…ˆã‚’å‚ç…§ã—
airj12 2012/03/29
OAuth

Node.js
ãƒªãƒ³ã‚¯
å˜ãªã‚‹ OAuth 2.0 ã‚’èªè¨¼ã«ä½¿ã†ã¨ã€è»ŠãŒé€šã‚Œã‚‹ã»ã©ã®ã©ã§ã‹ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ãƒ»ãƒ›ãƒ¼ãƒ«ãŒã§ãã‚‹
In some of the feedback I have gotten on the openID Connect spec, the statement is made that Connect is too complicated. That OAuth 2.0 is all you need to do authentication. Many point to Identity Proâ€¦ è‹±èªžèªã¿ãŸããªã„ã¨ã„ã†äººã®ãŸã‚ã«ç°¡å˜ã«è§£èª¬ã™ã‚‹ã¨â€¦ OAuth 2.0 ã® implicit flow ã‚’ä½¿ã£ã¦ã€Œèªè¨¼ã€ã‚’ã—ã‚ˆã†ã¨ã™ã‚‹ã¨ã€ã¨ã£ã¦ã‚‚å¤§ããªç©´ãŒé–‹ãã¾ã™ã€‚ ã‚«ãƒƒãƒˆï¼†ãƒšãƒ¼ã‚¹ãƒˆã‚¢ã‚¿ãƒƒã‚¯ãŒå¯èƒ½ã ã‹ã‚‰ã§ã™ã€‚ OAuth èªè¨¼ï¼Ÿã¯ã€å›³ï¼‘ã®ã‚ˆã†ãªæµã‚Œã«ãªã‚Šã¾ã™ã€‚ å›³ï¼‘ OAuth èªè¨¼ï¼Ÿã®æµã‚Œ ä¸€è¦‹ã€å•é¡Œãªã•ãã†ã«è¦‹ãˆã¾ã™ã€‚ã—ã‹ã—ã€ãã‚Œã¯ã™ã¹ã¦ã®ã‚µã‚¤ãƒˆãŒã€Œè‰¯ã„ã‚µã‚¤ãƒˆã€ãªã‚‰ã°ã§ã™ã€‚ Site_A
airj12 2012/02/03
OAuth

security

èªè¨¼

èªå¯
ãƒªãƒ³ã‚¯
adakoda.com
airj12 2011/06/03
è¦ªåˆ‡

android

twitter

oauth
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2011/05/19/20110518twitter-revokes-automatic-3rd-party-dm-access-gives-users-more-details-on-app-permissions/
airj12 2011/05/19
Twitter

OAuth
ãƒªãƒ³ã‚¯
éžæŠ€è¡“è€…ã®ãŸã‚ã®OAuthèªè¨¼(?)ã¨OpenIDã®é•ã„å…¥é–€ã€2023å¹´ç‰ˆã€‘
æ˜”ã‹ã‚‰ã€ã€ŒOpenIDã¯èªè¨¼ã§OAuthã¯èªå¯ã ã€ãªã©ã¨ã„ã†ã“ã¨ãŒè¨€ã‚ã‚Œã¾ã™ã€‚ã—ã‹ã—ã€ãã®è¨€èªžã®æ„å‘³ã‚’å–ã‚Šé•ãˆã¦ã„ã‚‹æ–¹ãŒçµæ§‹å¤šã„æ°—ãŒã—ã¦ã„ã¾ã™ã€‚ã€Œã‚‚ã†OpenIDãªã‚“ã¦ã„ã‚‰ãã€‚OAuthã ã‘ã§ã„ã„ã˜ã‚ƒã‚“ã€ã¨ã„ã†ã‚ˆã†ãªè¨€èª¬ãŒã‚ˆãæµã‚Œã¦ãã‚‹ã®ãŒãã®è¨¼æ‹ ã ã¨æ€ã„ã¾ã™ã€‚OAuthèªè¨¼ã¨ã„ã†ã®ã‚‚ãã®é¡žã§ã™ãã€‚ ãã“ã§ã€ä»Šæ—¥ã¯OAuthã¨OpenIDã®é•ã„ã‚’è€ƒãˆã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ OpenIDã¯ç´¹ä»‹çŠ¶ã€OAuthã¯åˆéµ ã¾ãšã¯OpenIDã®æ¦‚è¦ã®å¾©ç¿’ã§ã™ã€‚ã€ŒOpenIDã¯èªè¨¼ã€ã¨ã„ã†è¨€è‘‰ã®å†…å®¹ã‚’ã¾ãšã¯å¾©ç¿’ã—ã¦ã¿ã¾ã—ã‚‡ã†ã€‚ ã€Œèªè¨¼ã€ã¨ã¯å¤§å¤‰åºƒã„è¨€è‘‰ã§ã„ã‚ã„ã‚ãªå ´é¢ã§ä½¿ã‚ã‚Œã¾ã™ãŒã€ã€ŒOpenIDã¯èªè¨¼ã€ã¨ã„ã†ä½¿ã„æ–¹ã®æ™‚ã¯ã€ã€ŒOpenIDã¯ã€ã„ã¾æ¥ã¦ã„ã‚‹äººã®èº«å…ƒã‚’èªè¨¼ã€ï¼ˆãƒ¦ãƒ¼ã‚¶èªè¨¼ï¼‰ã¨ã„ã†æ„å‘³ã§ã™ã€‚å›³ã«ã™ã‚‹ã¨å›³1ã®ã‚ˆã†ãªæµã‚Œã«ãªã‚Šã¾ã™ã€‚ ã“ã®ä¾‹ã§ã¯ã€æœ‰æ –ã•ã‚“ãŒãŠå®¢ã¨ã—ã¦ã‚µãƒ¼ãƒ“ã‚¹æä¾›ã‚’ã—ã¦ã„ã‚‹ã‚µã‚¤ãƒˆã§ã‚ã‚‹ä¼Š
airj12 2011/05/16
èªè¨¼ã¨èªå¯ã®é•ã„ã‚’èª¬æ˜Žã™ã‚‹æ–¹æ³•ã¨ã—ã¦

OAuth

openid
ãƒªãƒ³ã‚¯
bit.ly ã® OAuth 2.0 ã¨ã‹è‰²ã€…è©¦ã—ã¦ã¿ãŸã‚‰è‰²ã€…ã‚¢ãƒ¬ã ã£ãŸ : ã«ã½ãŸã‚“ç ”ç©¶æ‰€
ã‚ã‚‹æ—¥ã€ã†ã¡ã®ã‚µãƒ¼ãƒ“ã‚¹ã§ bit.ly ä½¿ã£ã¦ URL ã‚’çŸç¸®ã—ãŸã„ããƒ¼ãªã‚“ã¦è©±ãŒã‚ãŒã£ã¦ã€ã¾ãã€å˜ç´”ã«çŸç¸®åŒ–ã™ã‚‹ãªã‚‰ã€@shiba_yu36 ã•ã‚“ä½œã® WebService::Bitly ãªã‚“ã‹ä½¿ãˆã°ç°¡å˜ã«è‰²ã€…å‡ºæ¥ã¦ä¾¿åˆ©ã ãªãƒ¼ã£ã¦æ€ã„ã¾ã—ãŸã€‚ ã§ã€ãã£ã¨ã€ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ä½¿ã£ã¦ã„ã‚‹ã§ã‚ã‚ã†ã¯ã¦ãªãƒ€ã‚¤ã‚¢ãƒªãƒ¼ã¨ã‹è¦‹ã¦ã¿ãŸã‚‰ã€bit.ly ã®è¨å®šç”»é¢ãŒã‚ã‚‹ã‚“ã§ã™ãã€‚ è‡ªåˆ†è‡ªèº«ã® bit.ly ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä½¿ãˆã° bit.ly ã§ãƒˆãƒ©ãƒƒã‚ãƒ³ã‚°ã¨ã‹å‡ºæ¥ã‚‹ã—ä¾¿åˆ©ã ãªãƒ¼ã¨æ€ã„ã¾ã—ãŸã€‚ â€¦ã§ã‚‚ãã€ã†ã¡ã®ã‚µãƒ¼ãƒ“ã‚¹ã®åˆ©ç”¨è€…ã®æ–¹ã€…ã¯ã€ã¯ã¦ãªæ°‘ã®ã‚ˆã†ãªãƒªãƒ†ãƒ©ã‚·ãƒ¼ã®é«˜ã„ãƒ¦ãƒ¼ã‚¶ã°ã‹ã‚Šã§ã¯ãªã„ã®ã§ã™ã‚ˆã€‚ ã€Œbit.ly ã® API ã‚ãƒ¼ã€ã¨ã‹è¨€ã£ã¦ã‚‚ã€Œã¯ï¼Ÿï¼Ÿï¼Ÿï¼Ÿï¼Ÿã€ã£ã¦æ„Ÿã˜ã®æ–¹ãŒå¤§å¤šæ•°ã€‚ æ„å‘³ã‚ã‹ã‚‰ãªã„ã‚‚ã®ã‚’è¨å®šç”»é¢ã«ã¤ã‘ã‚‹ã¨ãªã£ã¡ã‚ƒã‚“å®›ã«ã‚¯ãƒ¬ãƒ¼ãƒ ãŒã„ã£ã±ã„æ¥ã¦ã—ã¾ã„ã¾ã™ã€‚ ã¨ã‚Šã‚ãˆãšã€bitly API Docum
airj12 2011/04/22
OAuth

bit.ly

è³‡æ–™
ãƒªãƒ³ã‚¯
OAuth 2.0ã§Webã‚µãƒ¼ãƒ“ã‚¹ã®åˆ©ç”¨æ–¹æ³•ã¯ã©ã†å¤‰ã‚ã‚‹ã‹ï¼ˆ1/3ï¼‰- ï¼ IT
OAuth 2.0ã§ Webã‚µãƒ¼ãƒ“ã‚¹ã®åˆ©ç”¨æ–¹æ³•ã¯ã©ã†å¤‰ã‚ã‚‹ã‹ ã‚½ãƒ¼ã‚·ãƒ£ãƒ«APIæ´»ç”¨ã«å¿…é ˆã®â€œOAuthâ€ã®åŸºç¤ŽçŸ¥è˜ æ ªå¼ä¼šç¤¾ãƒ“ãƒ¼ã‚³ãƒ³IT æœ¨æ‘ç¯¤å½¦ 2011/2/2 TwitterãŒOAuth 1.0ã‚’æŽ¡ç”¨ã—ãŸã®ã‚’çš®åˆ‡ã‚Šã«ã€ä»Šã§ã¯å¤šãã®ã‚µãƒ¼ãƒ“ã‚¹ãŒOAuth 1.0ã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚å›½å†…ã§ã‚‚ã€ä¾‹ãˆã°ã€ãƒžã‚¤ã‚¯ãƒãƒ–ãƒã‚°åž‹ã‚³ãƒ©ãƒœãƒ„ãƒ¼ãƒ«ã€ŒyouRoomã€ã€å°è¦æ¨¡ã‚°ãƒ«ãƒ¼ãƒ—å‘ã‘ã‚°ãƒ«ãƒ¼ãƒ—ã‚¦ã‚§ã‚¢ã€Œã‚µã‚¤ãƒœã‚¦ã‚ºLiveã€ã€ã€Œã¯ã¦ãªã€ã®ã„ãã¤ã‹ã®ã‚µãƒ¼ãƒ“ã‚¹ã€ã€ŒYahoo!ã‚ªãƒ¼ã‚¯ã‚·ãƒ§ãƒ³ã€ã€ãƒªã‚¢ãƒ«ã‚¿ã‚¤ãƒ ãƒ‰ãƒãƒ¼ãƒ„ãƒ¼ãƒ«ã€ŒCacooã€ãªã©ãŒOAuth 1.0ã«å¯¾å¿œã—ãŸAPIã‚’å…¬é–‹ã—ã¦ã„ã¾ã™ã€‚ ã“ã“æ•°å¹´ã§OAuthã¯ã•ã¾ã–ã¾ãªWebã‚µãƒ¼ãƒ“ã‚¹ã®ãƒªã‚½ãƒ¼ã‚¹ã‚’åˆ©ç”¨ã™ã‚‹éš›ã®èªè¨¼æ–¹å¼ã¨ã—ã¦æ™®åŠã—ã¦ãã¾ã—ãŸã€‚ã“ã‚Œã¯å¤§ããªãƒ—ãƒ¬ãƒ¼ãƒ¤ãƒ¼ãŒã‚µãƒãƒ¼ãƒˆã—ãŸã“ã¨ã‚‚ä¸€å› ã§ã™ãŒã€OAuthã®æŒã¤ä»¥ä¸‹ã®2ã¤ã®ç‰¹å¾´ã«ã‚ˆã£ã¦ã€ã€ŒOAuthã‚’ä½¿ã†ã¨ã€ã‚µãƒ¼ãƒ“ã‚¹ãƒ—ãƒãƒã‚¤
airj12 2011/02/03
ã¼ã‚“ã‚„ã‚Šã¨ã—ã‹ã‚ã‹ã£ã¦ã¾ã¸ã‚“

api

OAuth

web

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
1