RFC 8252: OAuth 2.0 for Native Apps
Internet Engineering Task Force (IETF) W. Denniss Request for Comments: 8252 Google BCP: 212 J. Bradley Updates: 6749 Ping Identity Category: Best Current Practice October 2017 ISSN: 2070-1721 OAuth 2.0 for Native Apps Abstract OAuth 2.0 authorization requests from native apps should only be made through external user-agents, primarily the user's browser. This specification details the security an
Twitterã®OAuthèªè¨¼ãªãƒœãƒƒãƒˆã‚’書ãã®ã¯ç°¡å˜ - d.aql
Twitterボットを書ãã“ã¨è‡ªä½“ã¯ã¨ã¦ã‚‚ç°¡å˜ã ã‘ã‚Œã©ã€OAuthèªè¨¼ï¼Ÿé¢å€’ãã†ï¼ã£ã¦äººãŒã„ãã†ãªã®ã§ã€å…¨ç„¶ãã‚“ãªã“ã¨ã‚‚ãªã„よã€ã¨è¨€ã†è©±ã‚’書ã„ã¦ãŠã“ã†ã¨æ€ã†ã€‚ã„ã‚ã„ã‚探ã™ã¨ã„ãらã§ã‚‚出ã¦ãã‚‹æƒ…å ±ã§ã¯ã‚ã‚‹ã®ã ã‘ã‚Œã©ã€APIã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’ライブラリã«ä»»ã›ã¦ã„ã‚‹ã®ãªã‚‰ã°ã€è¦ã™ã‚‹ã«å•é¡Œã¯ã©ã†ã‚„ã£ã¦Access Tokenã‚’å–å¾—ã™ã‚‹ã‹ã£ã¦ã“ã¨ã ã‘ã«ãªã‚‹ã¨æ€ã†ã®ã§ã€ãã‚Œã«ã¤ã„ã¦ã€‚ ã“ã“ã§ã¯Perlã®Net::Twitterを使ã£ã¦æ›¸ãã‘ã‚Œã©ã€ã©ã‚“ãªãƒ©ã‚¤ãƒ–ラリã§ã‚‚ãŸã„ã—ã¦å¤‰ã‚らãªã„ã ã‚ã†ã¨æŽ¨æ¸¬ã•ã‚Œã‚‹ã€‚ Net::Twitterã§OAuth Net::Twitter::Role::OAuthã®perldoc見ã¦ï¼ã¨è¨€ã£ãŸã‚‰å…ƒã‚‚åã‚‚ãªã„ã®ã§ï¼ˆæœ¬å½“ã«ãã‚Œã ã‘ã®è©±ã ã‘ã‚Œã©ï¼‰ã€ã‚µãƒ³ãƒ—ルコードã§ã€‚ã“れもperldocã«æ›¸ã„ã¦ã‚る。 use Net::Twitter; my $nt = Net::Twitter->n
Twitter API ã‚’ OAuth ã§èªè¨¼ã™ã‚‹ã‚¹ã‚¯ãƒªãƒ—トを 0 ã‹ã‚‰æ›¸ã„ã¦ã¿ãŸ - trial and error
ã©ã†ã‚‚。昨日もã¡ã‚‡ã£ã¨ twitter ã«è§¦ã‚Œã¾ã—ãŸãŒã€ä»Šæ—¥ã‚‚ twitter ããŸã§ã™ã€‚ å‰ã® post ã§ã€ãƒãƒ©ãƒƒã¨è§¦ã‚ŒãŸ OAuth èªè¨¼ (Oèªè¨¼èªè¨¼ã¿ãŸã„ã§ã“ã‚ã„) を使ã£ã¦ã¿ãŸããªã‚Šã€è‡ªåˆ†ã§ 0 ã‹ã‚‰æ›¸ã„ã¦è¦‹ã¾ã—ãŸã€‚ æ—¢å˜ã®ãƒ©ã‚¤ãƒ–ラリ使ãˆã°æ‰‹ã£å–ã‚Šæ—©ã„ã§ã™ãŒã€ä»•çµ„ã¿ã‚’ç†è§£ã—ãŸã‹ã£ãŸã®ã§ã€ã‚„ã£ã¦ã¿ã‚‹ã ã‘ã‚„ã£ã¦ã¿ã¾ã—ãŸã€‚ çµæžœã‹ã‚‰è¨€ã†ã¨ã€ã‚‚ã®ã™ã”ãé¢å€’ã§ã™ã€‚ã™ã”ã„時間ã‹ã‹ã‚Šã¾ã—ãŸã€‚ (僕ã®æ–‡ç« èªè§£èƒ½åŠ›ã¨ã€typo 検出能力ã¨ã€ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã‚¹ã‚ルãŒè¶³ã‚Šãªã‹ã£ãŸã ã‘ã‹ã‚‚ã—ã‚Œãªã„ã‘ã©) ã¾ã‚ã€ã“ã‚Œã®å®Ÿè£…ã«ã¤ã„ã¦ã¯ã€å„所ã§çµæ§‹è§¦ã‚Œã‚‰ã‚Œã¦ã„ã¾ã™ãŒã€ã¾ã‚話をèžã„ãŸã ã‘ã˜ã‚ƒã‚¤ãƒžã‚¤ãƒãƒ”ンã¨ã“ãªã„ã‚‚ã®ã ã£ãŸã®ã§ã™ãŒã€ã„ã–実装ã—ã¦ã¿ãŸã‚‰ã‚ˆãã‚ã‹ã‚Šã¾ã—ãŸã€‚ OAuth ã®ä»•çµ„ã¿ OAuth ã®ä»•æ§˜ã«ã¤ã„ã¦ã¯ã€oauth.net ã® Documentation ã«æ›¸ã„ã¦ã‚ã‚‹ã¨ãŠã‚Šã§ã™ã€‚ OAuth Co
OAuth Core 1.0
 This specification was obsoleted by OAuth Core 1.0 Revision A on June 24th, 2009 to address a session fixation attack. The OAuth Core 1.0 Revision A specification is being obsoleted by the proposed IETF draft draft-hammer-oauth. The draft is currently pending IESG approval before publication as an RFC. Implementers should use RFC 6749: The OAuth 2.0 Authorization Framework instead of this specif
OAuth CrossDomain JavaScript Proxy を作ã£ãŸ - snippets from shinichitomita’s journal
サービス： http://xdoauthproxy.appspot.com/ ソースコード： http://xdoauthproxy.googlecode.com/ 何ãŒã§ãã‚‹ã‹ OAuth(3-legged)ã®APIãŒJavaScriptクライアントã‹ã‚‰ç°¡å˜ã«å‘¼ã¹ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ プãƒã‚°ãƒ©ãƒ çš„ã«ã¯éžåŒæœŸã®å‘¼ã³å‡ºã—ã®ã¿ã§è¨˜è¿°ã§ãã€é¢å€’ãªæ‰‹ç¶šã（トークンã®ã‚„ã‚Šå–ã‚Šã€åŒæ„ç”»é¢ã®è¡¨ç¤ºãªã©ï¼‰ã¯ãƒ—ãƒã‚ã‚·å´ã§å®Œäº†ã—ã¾ã™ã€‚ プãƒã‚シサービスã¯Google App Engine上ã§å‹•ã„ã¦ã¾ã™ã€‚ コード例 http://xdoauthproxy.googlecode.com/svn/trunk/assets/example.html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/ht
1
ãŠçŸ¥ã‚‰ã›
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Loading...
Google Code Archive - Long-term storage for Google Code Project Hosting.
http://hueniverse.com/2008/10/beginners-guide-to-oauth-part-iv-signing-requests/
http://www.machu.jp/posts/20090801/p01/
{{#tags}}- {{label}}
{{/tags}}