[B! oidc] mad-pã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

mad-p id:mad-p

oidcã«é–¢ã™ã‚‹mad-pã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (13)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚ªã‚ªã‚«ãƒŸãŒæ¥ãŸï¼šäººæ°—ã®ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã¾ãŸ1ã¤å¤§ããªè„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ãŸï¼Ÿï¼ãƒ¼CNETãŒãƒ€ãƒ¡ãƒ€ãƒ¡ãªä»¶
ã‚ªã‚ªã‚«ãƒŸãŒæ¥ãŸï¼šäººæ°—ã®ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã¾ãŸ1ã¤å¤§ããªè„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ãŸï¼Ÿï¼ãƒ¼CNETãŒãƒ€ãƒ¡ãƒ€ãƒ¡ãªä»¶ ã€ŒOpenSSLã®è„†å¼±æ€§ã€ŒHeartbleedã€ã«ç¶šãã€äººæ°—ã®ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã¾ãŸ1ã¤å¤§ããªè„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ãŸã€‚ä»Šå›žã€è„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ãŸã®ã¯ãƒã‚°ã‚¤ãƒ³ãƒ„ãƒ¼ãƒ«ã®ã€ŒOAuthã€ã¨ã€ŒOpenIDã€ã§ã€ã“ã‚Œã‚‰ã®ãƒ„ãƒ¼ãƒ«ã¯å¤šæ•°ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã¨ã€Googleã€Facebookã€Microsoftã€LinkedInã¨ã„ã£ãŸãƒ†ã‚¯ãƒŽãƒã‚¸å¤§æ‰‹ã«ä½¿ã‚ã‚Œã¦ã„ã‚‹ã€‚ã€ï¼ˆå‡ºæ‰€ï¼šOAuthã¨OpenIDã«æ·±åˆ»ãªè„†å¼±æ€§ã‹â€“Facebookãªã©å¤§æ‰‹ã‚µã‚¤ãƒˆã«å½±éŸ¿ã‚‚ï¼‰ ã‚ã®ãªãâ€¦ã€‚è‹±èªžç‰ˆã®CNETã§å‡ºã¦ã‹ã‚‰ã€ZDNetã¨ã‹Mashableã¨ã‹ã§ã™ãã«ã“ã®è¨˜äº‹ã‚’å©ãè¨˜äº‹ãŒå‡ºã¦ã€ãã®å¾Œæ—¥æœ¬èªžç‰ˆãŒä½•æ—¥ã‚‚å‡ºãªã‹ã£ãŸã®ã§ã€ã€Œã‚ãã€æ—¥æœ¬ã®CNETã¯è‰¯è˜ãŒã‚ã‚‹ãªã€ã¨æ€ã£ã¦ã„ãŸã‚‰ã€å˜ã«ã‚´ãƒ¼ãƒ«ãƒ‡ãƒ³ã‚¦ã‚£ãƒ¼ã‚¯
mad-p 2014/05/08
natã•ã‚“ã«ã‚ˆã‚‹ã€OAuth2.0ã¨ã‹OpenIDã®ãƒ—ãƒãƒˆã‚³ãƒ«ã®å•é¡Œã§ã¯ãªã„ã®ã§ã€æ¨™é¡ŒãŒé–“é•ã£ã¦ã„ã‚‹ã¨ã„ã†æŒ‡æ‘˜

covert redirect

oauth2

oidc
ãƒªãƒ³ã‚¯
äº‹å‹™å±€ãƒ–ãƒã‚°ï¼šã€ŒCovert Redirectã€ã«ã¤ã„ã¦ã® John Bradley æ°ã®è§£èª¬ - è¨‚æ£ç‰ˆ
å…ˆã»ã©ã®ç¿»è¨³è¨˜äº‹ã®åŽŸæ–‡ã¸ã®Â @miyagawa æ°ã‹ã‚‰ã®æŒ‡æ‘˜ã‚’å—ã‘ã¦ John Bradley æ°ãŒæ–°ãŸãªè¨˜äº‹ã€ŒOAuth 2 and Fragment encoding.ã€ã‚’æ›¸ã‹ã‚Œã¦ã„ã‚‹ã®ã§ã€ç¿»è¨³ã—ã¾ã™ã€‚ ãŠã…ã€ã‚ã„ã‚„ã€John ã‚„ã€‚ æ˜¨æ—¥ã¯ã‚«ãƒªãƒ•ã‚©ãƒ«ãƒ‹ã‚¢ã§é–‹å‚¬ã•ã‚Œã¦ã‚‹IDåŽ¨ã®ç¥å…¸ã€ŒInternet Identity Workshopã€ã¡ã…ã‚¤ãƒ™ãƒ³ãƒˆã§ã€IETF OAuth WG ã®ãƒ¡ãƒ³ãƒãƒ¼ãŒ Open Redirector ã®å•é¡Œã«ã¤ã„ã¦è©±ã—åˆã£ãŸã§ã€‚ æ•°å¹´å‰ JavaScript ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’æƒ³å®šã—ã¦ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã® fragment encoding ã‚’æŽ¡ç”¨ã™ã‚‹éš›ã€ã‚ã„ã‚‰ã¯ãã®é¸æŠžã«ã¤ã„ã¦ãã‚‰ãé€£æ—¥æœã¾ã§èªžã‚Šåˆã£ãŸã‚‚ã‚“ã‚„ã€‚ ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã® fragment encoding ã‚’æŽ¡ç”¨ã—ãŸç†ç”±ã¯ã„ãã¤ã‹ã‚ã‚‹: JavaScript ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒ token ã‚’å–å¾—ã™ã‚‹ãŸã‚ã«ã€ä¸€åº¦ serv
mad-p 2014/05/07
å’Œè¨³ã¯ã‚„ã£!

covert redirect

oauth2

security

oidc
ãƒªãƒ³ã‚¯
Implicit Flow ã§ã¯ Covert Redirect ã§ Token æ¼ã‚Œã‚‹ã - OAuth.jp
ã“ã®è¨˜äº‹ã¯ã€å…ˆã»ã©æ›¸ã„ãŸã“ã¡ã‚‰ã®è¨˜äº‹ã®è¨‚æ£ç‰ˆã§ã™ã€‚ è¨˜äº‹ã«å…¥ã‚‹å‰ã«ã€ã¾ãšã¯å…¨ã‚·ãƒ³ã‚¬ãƒãƒ¼ãƒ«ã«ãŠè©«ã³ç”³ã—ä¸Šã’ã¾ã™m m ã•ã¦ã€Covert Redirect ã«ã¤ã„ã¦ã®èª¬æ˜Žã¯â€¦è¶…çµ¶å–ã‚Šæ¶ˆã—ç·šã¯ã„ã‚Šã¾ãã£ã¦ã‚‹å‰ã®è¨˜äº‹ã‚’èªã‚“ã§ãã ã•ã„ã€ã§ã„ã„ã§ã—ã‚‡ã†ã‹ï¼Ÿ ã§ã€è¨‚æ£åˆ†ã ã‘ä»¥ä¸‹ã«ã€‚ Fragment Handling in Redirect å®®å·ã•ã‚“ãŒè¨˜äº‹ã«ã—ã¦ã¾ã™ãã€‚ è‹±èªžã ã‘ã©ã€‚ ã§ã€ã¾ãè¦ã™ã‚‹ã«ã€(Modern Browser ã¯) 30x ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆæ™‚ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆå…ƒã«ä»˜ã„ã¦ãŸ URL fragment ã‚’ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆå…ˆã«ã‚‚å¼•ã£ä»˜ã‘ã‚‹ã€ã¨ã€‚ fragment ã¯ server-side ã«ã¯é€ã‚‰ã‚Œãªã„ã‘ã©ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚µã‚¤ãƒ‰ã§ã¯ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆå…ˆã«å¼•ãç¶™ãŒã‚Œã‚‹ã€ã¨ã€‚ è©¦ã—ã« http://www.idcon.org/#foobar ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ã€http://idcon.org/#fooba
mad-p 2014/05/07
è¨‚æ£è¨˜äº‹ã€‚fragmentã¯æ”»æ’ƒè€…ã®ã‚µãƒ¼ãƒãƒ¼ã«ã¯é€ã‚‰ã‚Œãªã„ãŒã€ãã“ã‹ã‚‰htmlã‚’èªã‚€ä»¥ä¸Šã€JSä»•è¾¼ã¾ã‚Œã¦ãƒˆãƒ¼ã‚¯ãƒ³æŠœã‹ã‚Œã‚‹

covert redirect

oauth

security

openid

oidc
ãƒªãƒ³ã‚¯
OAuth 2.0 ã®è„†å¼±æ€§ (!?) "Covert Redirect" ã¨ã¯ - OAuth.jp
è¨‚æ£ ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆæ™‚ã® fragment ã®æ‰±ã„ã‚’å‹˜é•ã„ã—ã¦ã„ãŸãŸã‚ã€æœ¬è¨˜äº‹å…¨ä½“è¨‚æ£ã—ã¾ã™ã€‚ ç´°ã‹ãè¨‚æ£ã„ã‚Œã¦ã‚‹ã¨åˆ†ã‘ã‚ã‹ã‚“ãªããªã£ã¦ããŸã‚“ã§ã€æ–°ã—ã„è¨˜äº‹æ›¸ãã¾ã—ãŸã€‚ ã‚´ãƒ¼ãƒ«ãƒ‡ãƒ³ã‚¦ã‚£ãƒ¼ã‚¯ã¾ã£ãŸã ãªã‹ã« Twitter ã§æµ·å¤–ã® ID åŽ¨ã‹ã‚‰è¢‹ã ãŸãã«ã‚ã£ã¦ãŸã®ã§ã€ã‚‚ã†ã“ã®å•é¡Œã¯ç‰‡ä»˜ã„ãŸã ã‚ã†ã¨ã™ã£ã‹ã‚Šæ²¹æ–ã—ã¦ãŸã€ŒCovert Redirectã€ã®ä»¶ã§ã™ãŒã€æ—¥æœ¬ã§ã‚‚ã‚´ãƒ¼ãƒ«ãƒ‡ãƒ³ã‚¦ã‚£ãƒ¼ã‚¯æ˜Žã‘ã¦ãƒã‚ºã‚Šã ã—ãŸã®ã§ã€ä¸€æ—¦å•é¡Œã‚’æ•´ç†ã—ãŸæ–¹ãŒã‚ˆã•ãã†ã§ã™ãã€‚ äº‹ã®ç™ºç«¯ Wang Jing ã•ã‚“ã¦ã„ã†ã‚·ãƒ³ã‚¬ãƒãƒ¼ãƒ«ã®å¤§å¦é™¢ç”ŸãŒã€ã“ã‚“ãªã‚µã‚¤ãƒˆã‚’å…¬é–‹ã™ã‚‹ã¨å…±ã« CNet ã¯ã˜ã‚å„ç¨®ãƒ¡ãƒ‡ã‚£ã‚¢ãŒå–ã‚Šä¸Šã’ãŸã®ãŒã€ãƒã‚ºã‚Šã ã—ãŸç™ºç«¯ã®ã‚ˆã†ã§ã™ã€‚ å‰æçŸ¥è˜ OAuth 2.0 ã‚„ OpenID Connect ã ã‘ã§ãªãã€OAuth 1.0 ã‚„ OpenID 1.0/2.0 ã‚„ SAML ãªã‚“ã‹ã§ã‚‚ã€2ã¤ã®ã‚µãƒ¼ãƒ“ã‚¹ã®é–“ã§ãƒªãƒ€
mad-p 2014/05/07
å•é¡Œã‚’ã‚ã‹ã‚Šã‚„ã™ãæ•´ç†ã™ã‚‹è¨˜äº‹! ãªã„ã™

security

covert redirect

oauth2

oauth

oidc

openid
ãƒªãƒ³ã‚¯
äº‹å‹™å±€ãƒ–ãƒã‚°ï¼šã€ŒCovert Redirectã€ã«ã¤ã„ã¦ã® John Bradley æ°ã®è§£èª¬ï¼ˆè¿½è¨˜ã‚ã‚Šï¼‰
è¿½è¨˜ (5/7 20:30): æœ¬æ–‡ä¸ã«ã€Œã¾ã¨ã‚‚ãªãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ã§ã‚ã‚Œã°ã€ãã®ãƒ•ãƒ©ã‚°ãƒ¡ãƒ³ãƒˆã‚’ URI ã®ä¸€éƒ¨ã«ã™ã‚‹ã‚ˆã†ãªã“ã¨ã¯ãªã„ã‹ã‚‰ã€ã‚ªãƒ¼ãƒ—ãƒ³ãƒ»ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ã‚¿ãƒ¼ã«ã¯é€ã‚‰ã‚Œãªã„ã€‚ã€ã¨ã‚ã‚Šã¾ã™ãŒã€å°‘ãªãã¨ã‚‚ Chrome ã¨ Firefox ã¯ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆæ™‚ã« URI ãƒ•ãƒ©ã‚°ãƒ¡ãƒ³ãƒˆã‚’ãã®ã¾ã¾ä¿ã¤ (i.e. ä¸ååˆ†ãª redirect_uri ãƒã‚§ãƒƒã‚¯ & ã‚ªãƒ¼ãƒ—ãƒ³ãƒ»ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ã‚¿ãƒ¼ & ã‚¤ãƒ³ãƒ—ãƒªã‚·ãƒƒãƒˆãƒ»ãƒ•ãƒãƒ¼ã®å ´åˆã€ã‚¢ã‚¯ã‚»ã‚¹ãƒ»ãƒˆãƒ¼ã‚¯ãƒ³å…¥ã‚Šã® URI ãƒ•ãƒ©ã‚°ãƒ¡ãƒ³ãƒˆã‚’ã€ãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ãŒãã®ã¾ã¾ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆå…ˆã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ç”¨ã„ã‚‹) ã¨ã®ã“ã¨ã§ã™ã€‚ç¶šå ±ãŒã‚ã‚Šæ¬¡ç¬¬è¿½è¨˜ã—ã¾ã™ã€‚ è¿½è¨˜2 (5/7 23:50): John Bradley æ°è‡ªèº«ã«ã‚ˆã‚‹ãƒ•ã‚©ãƒãƒ¼ã‚¢ãƒƒãƒ—ã‚’è¨³ã—ã¾ã—ãŸã€‚ Covert Redirect and its real impact on OAuth and OpenID Connect ã‚’ã€ã¨
mad-p 2014/05/07
John Bradleyã®è§£èª¬ã®å’Œè¨³ã€‚ã‚ã‚ŠãŒã¨ã†

oauth2

oidc

covert redirect

security
ãƒªãƒ³ã‚¯
Covert Redirect and its real impact on OAuth and OpenID Connect
A Ph.D. Student in Mathematics by the name of Wang Jing discovered and publicized Open Redirectors at Relying party websites this morning ....
mad-p 2014/05/07
John Bradleyã«ã‚ˆã‚‹è§£èª¬ã€‚OAuth2ã¨OIDCã«é–¢ã—ã¦ã¯æ—¢çŸ¥ã®è„†å¼±æ€§ã§ã‚ã‚ŠRFC6819ã®4.2.4ã§å¯¾ç–ãŒæ˜Žè¨˜ã•ã‚Œã¦ã„ã‚‹ã€‚å¯¾ç–ã‚’ã¡ã‚ƒã‚“ã¨ã—ã¦ã„ãªã„Facebookã®å•é¡Œã€‚ãƒ‡ãƒ¢ã¯ã‚¢ãƒ‰ãƒ¬ã‚¹ãƒãƒ¼ã‹ã‚‰ãƒ¦ãƒ¼ã‚¶ã—ã‹çŸ¥ã‚‰ãªã„æƒ…å ±ã‚’ã‚³ãƒ”ãƒšã—ã¦ã„ã‚‹ãªã©ä½œç‚ºçš„

covert redirect

oauth

openid

oidc

security

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
GoogleãŒãƒã‚°ã‚¤ãƒ³èªè¨¼ã‚’å¼·åŒ–ã€OAuth 2.0ã®æŽ¡ç”¨ä¿ƒã™
ç±³Googleã¯4æœˆ23æ—¥ã€2014å¹´ä¸‹åŠæœŸä»¥é™ã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒWebãƒ–ãƒ©ã‚¦ã‚¶ã‚„ãƒ‡ãƒã‚¤ã‚¹ã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‹ã‚‰Googleã«ãƒã‚°ã‚¤ãƒ³ã™ã‚‹éš›ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ã‚’æ®µéšŽçš„ã«å¼·åŒ–ã™ã‚‹ã¨ç™ºè¡¨ã—ãŸã€‚ Googleã§ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ¬ãƒ™ãƒ«ã§2æ®µéšŽèªè¨¼ãªã©ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¼·åŒ–ç–ã‚’æä¾›ã™ã‚‹ã¨ã¨ã‚‚ã«ã€é–‹ç™ºè€…å‘ã‘ã«ã¯ã€ŒGoogle Sign-Inã€ãªã©ã®ãƒ„ãƒ¼ãƒ«ã‚’æä¾›ã—ã€Google APIã§èªè¨¼ãƒ—ãƒãƒˆã‚³ãƒ«ã®ã€ŒOAuth 2.0ã€ã‚’ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã€‚ ä»Šå›žã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ã®å¼·åŒ–ã¯ã€æœ¬æ¥ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã—ã‹ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ãƒã‚°ã‚¤ãƒ³ã§ããªã„ã“ã¨ã‚’ç¢ºå®Ÿã«ã™ã‚‹ã®ãŒç›®çš„ã€‚ãƒ¦ãƒ¼ã‚¶ãƒ¼åã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’Googleã«é€ä¿¡ã—ã¦ã„ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯ã€èªè¨¼ã«OAuth 2.0ã‚’æŽ¡ç”¨ã™ã‚‹ã‚ˆã†é–‹ç™ºè€…ã«ä¿ƒã—ãŸã€‚ Googleã¯ã€ã€ŒOAuth 2.0ã‚’ä½¿ã‚ãªã‘ã‚Œã°ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒãã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ãŸã‚ã«ã€è¿½åŠ ã®æ‰‹é †ã‚’è¦æ±‚ã•ã‚Œã‚‹ã‚ˆã†ã«ãªã‚‹ã€ã¨
mad-p 2014/04/24
OpenID Connectèªè¨¼ + OAuth2.0èªå¯ã€‚ã€ŒOpenID Connectã€ã£ã¦åå‰ãŒã‚‚ã£ã¨å‰é¢ã«å‡ºã¦ã‚‚ã„ã„ã‚ˆã

èªè¨¼

oauth

oidc

google
ãƒªãƒ³ã‚¯
æœ€æ–°ã®OpenAMã‚’å°Žå…¥ã—ã¦OpenID Connect Serverã¨Clientã‚’å®Ÿè£…ã™ã‚‹(å‰å¤œ) | å¤©ä¸ŠTENGAå”¯æˆ‘ç‹¬å°Š
æ˜¨æ—¥ã€æ¬¡ä¸–ä»£ãƒ•ã‚§ãƒ‡ãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ãƒ—ãƒãƒˆã‚³ãƒ«ã§ã‚ã‚‹OpenID ConnectãŒé‚ã«ã‚³ãƒŸãƒƒãƒˆã—ãŸã‚ˆã†ã ã€‚ ç”»åƒã¯å¤§å¥½ããªè¥¿å³¶äºœå¸Œã¡ã‚ƒã‚“ã«ãƒ¯ã‚·ã®è‚¡é–“ãŒã‚³ãƒŸãƒƒãƒˆã—ãŸçž¬é–“ã‚’æ‰ãˆãŸã‚‚ã®ã§ã‚ã‚‹ã€‚ ãã‚Œã«ä¼´ã„ã‹ã©ã†ã‹ã¯åˆ†ã‹ã‚‰ã‚“ãŒã€OpenAMã«ã‚‚æ¨™æº–ã§OpenID Connectã®æ©Ÿèƒ½ãŒå°Žå…¥ã•ã‚ŒãŸæ¨¡æ§˜ã€‚ ãã“ã§ä»Šå›žã¯ã€å»‰ä¾¡ã§ä½“é¨“ã§ãã‚‹OSSã‚’åˆ©ç”¨ã—ã¦OpenID Connectã®ã‚µãƒ¼ãƒã‚µã‚¤ãƒ‰ã®æ§‹ç¯‰æ‰‹é †ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚µã‚¤ãƒ‰ã®å®Ÿè£…ã‚µãƒ³ãƒ—ãƒ«ã‚’ç´¹ä»‹ã™ã‚‹ã€‚ ã„ããªã‚Šã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã®æ‰‹é †ã‹ã‚‰ãƒ–ãƒƒã“ã‚“ã§ã„ãã®ã‚‚å¤šå°‘å‘³æ°—ãªã„ã®ã§ã€ã¾ãšã¯ãƒ“ã‚¸ãƒ§ãƒŠãƒªãƒ¼ã‹ã‚‰ã ã€‚ -èªè¨¼èªå¯é€£æºã¨ã¯ä½•ãªã®ã‹- ã‚‚ã—ã“ã‚“ãªè³ªå•ã‚’å—ã‘ãŸã‚‰ãªã‚“ã¦ç”ãˆã‚‹ã ã‚ã†ã‹ï¼Ÿ ã€Œå®‰å¿ƒå®‰å…¨ã®ãƒã‚°ã‚¤ãƒ³ã‚·ã‚¹ãƒ†ãƒ ã‚’æ§‹ç¯‰ã™ã‚‹ã«ã¯ã€ã©ã†ã™ã‚Œã°ã‚ˆã„ã§ã™ã‹ï¼Ÿã€ ã“ã®ã”æ™‚ä¸–ã€æ¨¡ç¯„è§£ç”ã¯æ±ºã¾ã£ã¦ã„ã‚‹ã€ã€Œè‡ªåˆ†ã§ãƒã‚°ã‚¤ãƒ³ã‚·ã‚¹ãƒ†ãƒ ã‚’ä½œã‚‰ãªã„ã“ã¨ã€ã ã€‚ å¤šãã®æ–¹ãŒã”å˜çŸ¥ã®ã¨ãŠã‚Šã€ã‚¤ãƒ³ã‚¿
mad-p 2014/03/25
openid

oidc
ãƒªãƒ³ã‚¯
http://techcrunch.com/2014/02/26/openid-foundation-launches-openid-connect-identity-protocol-with-support-from-google-microsoft-others/
mad-p 2014/02/26
OpenID Connectã¤ã„ã«å‡ºãŸ

openid

oidc
ãƒªãƒ³ã‚¯
12/17(ç«)ã€ã€Œãƒ¦ãƒ¼ã‚¶ãƒ¼ã¨ã‚·ã‚¹ãƒ†ãƒ ã‚’ç¹‹ãã€Œèªè¨¼ã€ã‚’çŸ¥ã‚ã†ï¼ ã€œOpenID Connectã€œã€ã«å‚åŠ ã—ã¾ã—ãŸã€‚ #devlove - ãƒŸãƒƒã‚·ãƒ§ãƒ³ãŸã¶ã‚“Possible
ã¯ã˜ã‚ã« æ˜¨æ—¥ã¯ã€Œæ¸‹è°·ï¼šVOYAGE GROUPã€ã§é–‹å‚¬ã•ã‚ŒãŸDevLOVEå‹‰å¼·ä¼šã€Œãƒ¦ãƒ¼ã‚¶ãƒ¼ã¨ã‚·ã‚¹ãƒ†ãƒ ã‚’ç¹‹ãã€Œèªè¨¼ã€ã‚’çŸ¥ã‚ã†ï¼ ã€œOpenID Connectã€œã€ã«å‚åŠ ã—ã¾ã—ãŸã€‚ ç¾åœ¨å¾“äº‹ã—ã¦ã„ã‚‹ä»•äº‹ãŒæœ‰æ–™ã®æºå¸¯ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®é–‹ç™ºãƒ»é‹ç”¨ã¨ã„ã†ã“ã¨ã‚‚ã‚ã£ã¦ã€ã‚ãƒ£ãƒªã‚¢ã¨ã®èªè¨¼å‡¦ç†ã¯å¿…ãšé–¢ã‚ã‚‹ã®ã§ã™ãŒã€ã©ã†ã‚‚é›£ã—éŽãŽã¦åˆ†ã‹ã‚‰ãªã„ã“ã¨ãŒå¤šãâ€¦ã€‚ã¡ã‚‡ã£ã¨ã§ã‚‚å–ã£ã¤ãæ˜“ãã—ãŸã„ã€ç†è§£ã‚’æ·±ã‚ãŸã„ã¨æ€ã„ã€å‚åŠ ã—ãŸã®ãŒå‹•æ©Ÿã§ã™ã€‚è‡ªåˆ†ã§ã‚µãƒ¼ãƒ“ã‚¹ã‚’ä½œã‚‹ã«ã—ã¦ã‚‚çµ¶å¯¾ã«å¿…è¦ã«ãªã‚‹çŸ¥è˜ã§ã™ã—ãã€‚ å½“æ—¥ã®ãƒ„ã‚¤ãƒ¼ãƒˆã¯ã“ã¡ã‚‰ã€‚ 2013/12/17 ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¨ã‚·ã‚¹ãƒ†ãƒ ã‚’ç¹‹ãã€Œèªè¨¼ã€ã‚’çŸ¥ã‚ã†ï¼ ï½žOpenID Connectï½ž #devlove - Togetterã¾ã¨ã‚ ãªãœOpenID ConnectãŒå¿…è¦ã¨ãªã£ãŸã®ã‹ã€ãã®æ´å²çš„èƒŒæ™¯ æœ€åˆã¯å·¥è—¤é”é›„ã•ã‚“ã‹ã‚‰ã€èªè¨¼å‡¦ç†ã®èƒŒæ™¯ã¨æ´å²ã‚’è§£èª¬ã—ã¦é ‚ãã¾ã—ãŸã€‚ä»¥ä¸‹ã€è´è¬›æ™‚ã®ãƒ¡ãƒ¢ã§ã™
mad-p 2013/12/18
ã†ãƒ¼ã‚€ã€ã‚„ã¯ã‚Šé›£ã—ã„ã®ã‹â€¦

openid

oauth2

oidc
ãƒªãƒ³ã‚¯
ãªãœOpenID ConnectãŒå¿…è¦ã¨ãªã£ãŸã®ã‹ã€ãã®æ´å²çš„èƒŒæ™¯
Prepared for #DevLOVE http://devlove.doorkeeper.jp/events/7419 Read less
mad-p 2013/12/18
ã“ã‚Œã‹ã‚‰ã®Webã‚µãƒ¼ãƒ“ã‚¹ã‚’æ”¯ãˆã‚‹ã€ŒOpenID Connectã€ã®ç‹™ã„ãŒã‚ˆãã‚ã‹ã‚‹

openid

oauth

oidc
ãƒªãƒ³ã‚¯
äº‹å‹™å±€ãƒ–ãƒã‚°ï¼šOpenID 2.0 ã‹ã‚‰ OpenID Connect ã¸ã®ç§»è¡Œã®ãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ @ Google (è¿½è¨˜ã‚ã‚Š)
Google ãŒ RP (ãƒªãƒ©ã‚¤ãƒ³ã‚°ãƒ»ãƒ‘ãƒ¼ãƒ†ã‚£) ã«è¿”å´ã™ã‚‹ã€Œãƒ¦ãƒ¼ã‚¶ãƒ¼è˜åˆ¥åã€ã¯ã€åŒä¸€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã§ã‚ã£ã¦ã‚‚ã€åˆ©ç”¨ã™ã‚‹ API ã«ã‚ˆã£ã¦ç•°ãªã‚Šã¾ã™ã€‚ãŸã¨ãˆã° OpenID 2.0 ã§ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼è˜åˆ¥åã¯ "https://www.google.com/accounts/o8/id?id=Apt0atlGwa...." ã®ã‚ˆã†ãªå€¤ã§ã™ãŒã€OAuth 2.0 / OpenID Connect ã§ã¯ "10016824261..." ã¨ãªã‚Šã¾ã™ã€‚ ã“ã®ãµãŸã¤ã®å€¤ã«ã¯é–¢é€£æ€§ãŒç„¡ãã€å¾“æ¥ã‹ã‚‰ OpenID 2.0 RP ã¨ã—ã¦ Google ã® ID ã‚’å—ã‘å…¥ã‚Œã¦ã„ãŸ Web ã‚µã‚¤ãƒˆ (ã“ã‚Œã¾ã§ "OpenID ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼è˜åˆ¥å" ã‚’å–å¾—ãƒ»ä¿æŒã—ã¦ã„ã‚‹) ã«ãŠã„ã¦ã¯ã€OAuth 2.0 / OpenID Connect ã«ç§»è¡Œã™ã‚‹ã«ã‚ãŸã£ã¦ã®èª²é¡Œã¨ãªã£ã¦ã„ã¾ã—ãŸã€‚ ã“ã‚Œã«å¯¾ã— Google ã¯ã€OpenI
mad-p 2013/12/09
openid

oauth2

oidc
ãƒªãƒ³ã‚¯
OpenID Connectã®Self-Issued OP(OIDC SIOP)ã®è©± - r-weblife
ãŠã¯ã‚ˆã†ã”ã–ã„ã¾ã™ã€ritouã§ã™ã€‚ OpenID Connect Messagesã®ä»•æ§˜ã§å®šç¾©ã•ã‚Œã¦ã‚‹Self-Issued OpenID Providerã«ã¤ã„ã¦ã®ãŠè©±ã§ã™ã€‚ ã„ããªã‚Šå‚è€ƒãƒªãƒ³ã‚¯ è‹±èªžèªã‚ã‚‹äººã¯ä»•æ§˜èªã‚ã°ã‚ˆã„ã€‚ ä»•æ§˜(English) : http://openid.net/specs/openid-connect-messages-1_0.html#self_issued å‚è€ƒã«ãªã‚Šãã†ãªè³‡æ–™ by @nov : Self isssued-idp ã–ã£ãã‚Šèª¬æ˜Ž ã“ã‚“ãªæ„Ÿã˜ã§ã™ã€‚ OS(PC, ãƒ¢ãƒã‚¤ãƒ«ç«¯æœ«)ã‚„ãƒ–ãƒ©ã‚¦ã‚¶å†…ã§å‹•ä½œã—ã€openid://ã§å‘¼ã³å‡ºã•ã‚Œã‚‹ ãƒ¦ãƒ‹ãƒ¼ã‚¯ãªRSAã‚„ECDSAã¨ã‹ã®private/publicãªéµãƒšã‚¢ã‚’ç”Ÿæˆã—ã¦å®‰å…¨ã«ç®¡ç†ã™ã‚‹ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆ(Webã‚µãƒ¼ãƒ“ã‚¹ã‚„ã‚¢ãƒ—ãƒª)ã‹ã‚‰ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘ãŸã‚‰ç½²åä»˜ã®ID Tokenã‚’è¿”ã™ ã¨ã„ã†ã¨ã“ã‚ã§ã™ã€‚
mad-p 2013/07/18
ã‚ã‹ã‚Šã‚„ã™ã„è§£èª¬

openid

oidc

*security
ãƒªãƒ³ã‚¯
1