OpenID 2.0 ã«ãŠã‘ã‚‹ Covert Redirect 㨠RP Discovery - OAuth.jpã•ã¦ã€OAuth 2.0 & OpenID Connect ã«ãŠã‘ã‚‹ Covert Redirect ã®å•é¡Œ ã«ã¤ã„ã¦ã¯ã¾ã¨ã‚ãŸã®ã§ã€æ¬¡ã¯ OpenID 2.0 ã«ã¤ã„ã¦ã§ã™ã€‚ ã„ã„ã§ã™ã‹ã€OpenID Connect ã§ã¯ãªãã€OpenID 2.0 ã§ã™ã‚ˆã€‚å¤ã„æ–¹ã§ã™ã€‚æ‡ã‹ã—ã„ã§ã™ãã€OpenID Authentication 2.0 – Final。 ãã†ã„ãˆã°ã€OpenID Foundation Japan ã®ç¿»è¨³ WG ã‚’ç«‹ã¡ä¸Šã’ã¦ã€ä¸€ç•ªæœ€åˆã«ç¿»è¨³ã—ãŸã®ãŒ OpenID Authentication 2.0 㮠日本語訳ã§ã—ãŸã…(é ã„ç›® ã¨ã€æ˜”話ã¯ãã‚Œãらã„ã«ã—ã¦ã€æœ¬é¡Œã«å…¥ã‚Šã¾ã—ょã†ã€‚ ã¾ãšã¯ Covert Redirect 発生æ¡ä»¶ã«ã¤ã„㦠OpenID 2.0 ã§ã¯ã€ãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ‘ラメータ㯠query ã«å¼•ã£ä»˜ã„ã¦ãã¾ã™ã€‚fragment ã¯ä½¿ã„ã¾ã›ã‚“。 ãªã®ã§ã€open r
Covert Redirect is not new but.. A risk analysis and recommendations
OAuth 2 and Fragment encoding.
Implicit Flow ã§ã¯ Covert Redirect 㧠Token æ¼ã‚Œã‚‹ã - OAuth.jp
OAuth 2.0 ã®è„†å¼±æ€§ (!?) "Covert Redirect" ã¨ã¯ - OAuth.jp
OAuthã¨OpenIDã«æ·±åˆ»ãªè„†å¼±æ€§ã‹--Facebookãªã©å¤§æ‰‹ã‚µã‚¤ãƒˆã«å½±éŸ¿ã‚‚
Covert Redirect and its real impact on OAuth and OpenID Connect
http://tetraph.com/covert_redirect/oauth2_openid_covert_redirect.html
http://tetraph.com/covert_redirect/
最新ã®OpenAMã‚’å°Žå…¥ã—ã¦OpenID Connect Serverã¨Clientを実装ã™ã‚‹(å‰å¤œ) | 天上TENGA唯我独尊
http://techcrunch.com/2014/02/26/openid-foundation-launches-openid-connect-identity-protocol-with-support-from-google-microsoft-others/
12/17(ç«)ã€ã€Œãƒ¦ãƒ¼ã‚¶ãƒ¼ã¨ã‚·ã‚¹ãƒ†ãƒ を繋ã「èªè¨¼ã€ã‚’知ã‚ã†ï¼ 〜OpenID Connect〜ã€ã«å‚åŠ ã—ã¾ã—ãŸã€‚ #devlove - ミッションãŸã¶ã‚“Possible
ãªãœOpenID ConnectãŒå¿…è¦ã¨ãªã£ãŸã®ã‹ã€ãã®æ´å²çš„背景
事務局ブãƒã‚°ï¼šOpenID 2.0 ã‹ã‚‰ OpenID Connect ã¸ã®ç§»è¡Œã®ãƒ—ラクティス @ Google (追記ã‚ã‚Š)
OpenID Connectã®Self-Issued OP(OIDC SIOP)ã®è©± - r-weblife
idcon 16レãƒãƒ¼ãƒˆ - mad-pã®æ—¥è¨˜
開発コストや技術リスクを考ãˆãªã„「上æµè¨è¨ˆã€ãŒã‚·ã‚¹ãƒ†ãƒ ã®è¤‡é›‘化ã¨å¤§è¦æ¨¡ãªéšœå®³ã®åŽŸå› ã¨ãªã£ã¦ã„ã‚‹ã®ã§ã¯ï¼Ÿ - é”人プãƒã‚°ãƒ©ãƒžãƒ¼ã‚’目指ã—ã¦
OpenID Summit Tokyo #openid_tokyo
éžæŠ€è¡“者ã®ãŸã‚ã®ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£å…¥é–€
éžæŠ€è¡“者ã®ãŸã‚ã®OAuthèªè¨¼(?)ã¨OpenIDã®é•ã„入門ã€2023年版】
{{#tags}}- {{label}}
{{/tags}}