[B! openid] hasegawayosukeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

hasegawayosuke id:hasegawayosuke

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (6)

ã‚¿ã‚°ã®çµžã‚Šè¾¼ã¿ã‚’è§£é™¤

openidã«é–¢ã™ã‚‹hasegawayosukeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

èªå¯ã¨èªè¨¼æŠ€è¡“ã«ã¤ã„ã¦ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã‚’æ›¸ãã¾ã—ãŸ - ngzmã®ãƒ–ãƒã‚°
èªå¯ã¨èªè¨¼æŠ€è¡“ OAuth 1.0ã€OAuth 2.0 ãŠã‚ˆã³ OpenID Connect ã«é–¢ã™ã‚‹ã‚¹ãƒ©ã‚¤ãƒ‰ã‚’ã‚¢ãƒƒãƒ—ã—ã¾ã—ãŸã€‚ ã‚¢ãƒ—ãƒªé–‹ç™ºã§çŸ¥ã£ã¦ãŠããŸã„èªè¨¼æŠ€è¡“ - OAuth 1.0 + OAuth 2.0 + OpenID Connect - from Naoki Nagazumi www.slideshare.net é–‹ç™ºã—ã¦ã„ã‚‹ Web ã‚¢ãƒ—ãƒªã§ã€OAuth 1.0 ã‚„ OAuth 2.0 ãŠã‚ˆã³ OpenID Connect ã®èªå¯ã¨èªè¨¼æŠ€è¡“ã‚’çµ„ã¿è¾¼ã‚“ã æ™‚ã«ã€ã‚ã‚Œã“ã‚Œèª¿æŸ»ã—ã¦çŸ¥ã‚Šå¾—ãŸæŠ€è¡“ã‚’ã¾ã¨ã‚ãŸã‚‚ã®ã§ã™ã€‚ 130ãƒšãƒ¼ã‚¸ãã‚‰ã„ã®åŠ›ä½œã§ã™ï¼ãœã²ã”è¦§ãã ã•ã„ã€‚ ãƒ‡ãƒ¢ ã“ã‚Œã®ãƒ‡ãƒ¢ã¯ã“ã¡ã‚‰ã«ã‚ã‚Šã¾ã™ AuthsDemo ãƒ‡ãƒ¢ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã¯ã“ã¡ã‚‰ã§ã™ã€‚ GitHub - ngzm/auths-demo: This is a demo program with using OAuth
hasegawayosuke 2018/03/30
oauth

openid

auth

security
ãƒªãƒ³ã‚¯
HTTPS ã§ã‚‚ Full URL ãŒæ¼ã‚Œã‚‹ï¼ŸOAuth ã® code ã‚‚æ¼ã‚Œã‚‹ã‚“ã˜ã‚ƒãï¼Ÿï¼Ÿ - OAuth.jp
ãªã‚“ã§ã™ã‹ã“ã‚Œã¯ï¼ New attack bypasses HTTPS protection on Macs, Windows, and Linux DHCP ã«ã¤ãªãã¨ PAC ãƒ•ã‚¡ã‚¤ãƒ«ãŒãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã•ã‚Œã¦ HTTPS ã§ã‚ã‚ã†ã¨ã‚¢ã‚¯ã‚»ã‚¹å…ˆã® Full URL ã¯æ¼ã‚Œã‚‹ã§ã™ã£ã¦ï¼Ÿ Web Proxy Autodiscovery ã§ã™ã£ã¦ï¼Ÿ ãƒãƒ§ãƒƒãƒˆãƒ‹ãƒ›ãƒ³ã‚´ãƒ‡ã‚ªãƒã‚¬ã‚¤ã‚·ãƒžã‚¹ ã£ã¦ã“ã¨ã§ã€ã¾ãã“ã‚ŒãŒå®Ÿéš›ã©ã‚Œãã‚‰ã„ç°¡å˜ã«å®Ÿç¾ã§ãã‚‹æ”»æ’ƒãƒ‘ã‚¿ãƒ¼ãƒ³ãªã®ã‹ã¯ä»–ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ¥ç•Œã®æ–¹ã€…ã«å¾Œã§èžãã¨ã—ã¦ã€ã“ã®è¨˜äº‹ã§ã‚‚è§¦ã‚Œã‚‰ã‚Œã¦ã‚‹ OpenID Connect ã¨ã‹ OAuth2 ã¸ã®å½±éŸ¿ã«ã¤ã„ã¦ã€ã¡ã‚‡ã£ã¨ã¾ã¨ã‚ã¦ãŠãã¾ã—ã‚‡ã†ã‹ã€‚ Authorization Request & Response ãŒæ¼ã‚Œã‚‹ response_mode=form_post ãªã‚“ã¦ã„ã†ã®ã‚‚ä¸€éƒ¨ã‚ã‚Šã¾ã™ãŒã€åŸºæœ¬ OAuth2 /
hasegawayosuke 2016/07/28
oauth

openid

security

https

proxy
ãƒªãƒ³ã‚¯
å˜ãªã‚‹ OAuth 2.0 ã‚’èªè¨¼ã«ä½¿ã†ã¨ã€è»ŠãŒé€šã‚Œã‚‹ã»ã©ã®ã©ã§ã‹ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ãƒ»ãƒ›ãƒ¼ãƒ«ãŒã§ãã‚‹
In some of the feedback I have gotten on the openID Connect spec, the statement is made that Connect is too complicated. That OAuth 2.0 is all you need to do authentication. Many point to Identity Proâ€¦ è‹±èªžèªã¿ãŸããªã„ã¨ã„ã†äººã®ãŸã‚ã«ç°¡å˜ã«è§£èª¬ã™ã‚‹ã¨â€¦ OAuth 2.0 ã® implicit flow ã‚’ä½¿ã£ã¦ã€Œèªè¨¼ã€ã‚’ã—ã‚ˆã†ã¨ã™ã‚‹ã¨ã€ã¨ã£ã¦ã‚‚å¤§ããªç©´ãŒé–‹ãã¾ã™ã€‚ ã‚«ãƒƒãƒˆï¼†ãƒšãƒ¼ã‚¹ãƒˆã‚¢ã‚¿ãƒƒã‚¯ãŒå¯èƒ½ã ã‹ã‚‰ã§ã™ã€‚ OAuth èªè¨¼ï¼Ÿã¯ã€å›³ï¼‘ã®ã‚ˆã†ãªæµã‚Œã«ãªã‚Šã¾ã™ã€‚ å›³ï¼‘ OAuth èªè¨¼ï¼Ÿã®æµã‚Œ ä¸€è¦‹ã€å•é¡Œãªã•ãã†ã«è¦‹ãˆã¾ã™ã€‚ã—ã‹ã—ã€ãã‚Œã¯ã™ã¹ã¦ã®ã‚µã‚¤ãƒˆãŒã€Œè‰¯ã„ã‚µã‚¤ãƒˆã€ãªã‚‰ã°ã§ã™ã€‚ Site_A
hasegawayosuke 2015/08/27
oauth

openid
ãƒªãƒ³ã‚¯
http://mixi.jp/issue_ticket.pl ã¯ OpenID server ã ã£ãŸã‚ˆ - çŸ¥ã‚‰ãªã„ã‘ã©ãã£ã¨ãã†ã€‚
mixiã®URLã«OpenIDã£ã½ã„ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ãŒãã£ã¤ã„ã¦ã‚‹ä»¶ http://blog.fkoji.com/2007/08051128.html OpenIDå¤§å¥½ããªã®ã§ã€å°‘ã—èª¿ã¹ã¦ã¿ã¾ã—ãŸ çµè«–ã‹ã‚‰è¨€ã†ã¨ã€news.mixi.jp ã¨ã‹ video.mixi.jp ã¨ã‹ã®ã€mixi.jp ã¨åˆ¥ãƒ‰ãƒ¡ã‚¤ãƒ³ã«ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’å¼•ãæ¸¡ã™ãŸã‚ã«ä½¿ã£ã¦ã‚‹ã½ã„ ã“ã®ã‚ãŸã‚Šã®è©±ã®ã‚ã¨ã€cookieã®domainæŒ‡å®šã‚’ã‚„ã‚ãŸã®ã‹ã‚‚ã—ã‚Œãªã„ http://kaede.to/~canada/doc/mixi-and-cookie ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ã‚„ã‚Šã¨ã‚Šã¯ã“ã‚“ãªæ„Ÿã˜ ãƒã‚°ã‚¤ãƒ³ã—ã¦cookieã‚‚ã‚‰ã†ï¼ˆdomainæŒ‡å®šãªã—ãªã®ã§ mixi.jp ã«ã—ã‹æ¸¡ã•ã‚Œãªã„ï¼‰ POST /login.pl HTTP/1.1 Host: mixi.jp HTTP/1.x 200 OK Set-Cookie: BF_SESSION=***
hasegawayosuke 2007/08/07
mixi

openid
ãƒªãƒ³ã‚¯
1