[B! oauth] nikkoroã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

nikkoro id:nikkoro

oauthã«é–¢ã™ã‚‹nikkoroã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (16)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

WebSocketã§OAuth 2.0ã‚’ä½¿ã£ã¦ã¿ãŸ - OAuth.jp
WebSocket Serverã§ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ã¨ã‹ã€WebSocket Serverã®è£ã«Railsãªã‚Šã®APIãŒã‚ã£ã¦Node.jsã‹ã‚‰ãã®APIå©ãè¦‹ãŸã„ãªã®ã¯ãã‚Œãªã‚Šã«ã‚ã‚Šãã†ãªã®ã«ã€ã‚ã‚“ã¾ã‚µãƒ³ãƒ—ãƒ«ã‚³ãƒ¼ãƒ‰çš„ãªã‚‚ã®ãŒè¦‹å½“ãŸã‚‰ãªã‹ã£ãŸã®ã§ã€è‡ªåˆ†ã§æ›¸ã„ã¦ã¿ãŸã®ã‚’ã“ã“ã«å…¬é–‹ã™ã‚‹ã“ã¨ã«ã—ã¾ã™ã€‚ ClientãŒWebSocket Serverã«ã¤ãªãæ™‚ã€http://socket.example.com/?access_token=*** ã¿ãŸã„ãªURLã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã€Serverã¯ãã®Tokenå…ƒã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’èªè¨¼ã—ã¦ã€ãã®å¾ŒsocketãŒã¤ãªãŒã£ã¦ã‚‹é–“ã¯Node.jsãŒãã®tokenä½¿ã£ã¦è£ã®Rails APIã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã€ã¨ã„ã†ä½¿ã„æ–¹ã‚’ã—ã¦ã¾ã™ã€‚ Access Tokenã®ä¿å˜å…ˆã«MySQLä½¿ã£ã¦ã‚‹ã®ã¯ã‚ãã¾ã§Railså´ã§ãã£ã¡ã®ãŒæ‰‹ã£å–ã‚Šæ—©ã‹ã£ãŸã‹ã‚‰ã§ã€ã“ã“ã¯Redisã§ã‚‚MongoD
nikkoro 2012/09/11
oauth
ãƒªãƒ³ã‚¯
RFCã¨ãªã£ãŸã€ŒOAuth 2.0ã€â€•â€•ãã®è¦ç‚¹ã¯ï¼Ÿ
RFCã¨ãªã£ãŸã€ŒOAuth 2.0ã€â€•â€•ãã®è¦ç‚¹ã¯ï¼Ÿï¼šãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£æŠ€è¡“æœ€æ–°å‹•å‘ï¼ˆ2ï¼‰ï¼ˆ1/2 ãƒšãƒ¼ã‚¸ï¼‰ ã„ã¾Webã®ä¸–ç•Œã§ã¯ã€ã•ã¾ã–ã¾ãªWebã‚µãƒ¼ãƒ“ã‚¹ãŒæä¾›ã™ã‚‹ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã¨ã€ã‚µãƒ¼ ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ãŒæä¾›ã™ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒAPIã‚’ä¸å¿ƒã«çµã³ä»˜ãã€ä¸€ç¨®ã®ã€ŒAPIã‚¨ã‚³ãƒŽãƒŸãƒ¼ã€ã‚’å½¢æˆã—ã¦ã„ã¾ã™ã€‚ã“ã®é€£è¼‰ã§ã¯ã€ãã“ã§é‡è¦ãªå½¹å‰²ã‚’æžœãŸã™ã€Œãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã€ã«ã¤ã„ã¦ç†è§£ã‚’æ·±ã‚ã¦ã„ãã¾ã™ã€‚ å†ã³ã€ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã®ä¸–ç•Œã¸ã‚ˆã†ã“ã å‰å›žã€Œã€ŽOAuthã€ã®åŸºæœ¬å‹•ä½œã‚’çŸ¥ã‚‹ã€ã§ã¯OAuthã®ä»•æ§˜ãŒã©ã†ã„ã†ã‚‚ã®ã‹ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã—ãŸã€‚ä»Šå›žã¯å¼•ãç¶šãã€ OAuth 1.0ã¨OAuth 2.0ã®é•ã„ OAuth 2.0ã‚’ã‚»ã‚ãƒ¥ã‚¢ã«ä½¿ã†ãŸã‚ã«çŸ¥ã£ã¦ãŠãã¹ãã“ã¨ ã«ã¤ã„ã¦è¿°ã¹ã¦ã„ãã¾ã™ã€‚ OAuth 1.0ã¨OAuth 2.0ã®é•ã„ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚¿ã‚¤ãƒ—ã®å®šç¾© OAuth 2.0ã§ã¯ã€O
nikkoro 2012/09/11
oauth
ãƒªãƒ³ã‚¯
Google APIs Client Library for Java: now with OAuth 2.0
By Yaniv Inbar, Google APIs Client Team During Google I/O 2011, we announced a major milestone by releasing the Beta version of the open source Google APIs Client Library for Java. This release included service-specific libraries and samples for Google APIs, built on our new client library generation infrastructure. Since that version 1.4 launch, weâ€™ve been comforta ble enough with the stability an
nikkoro 2011/12/17
oauth

API
ãƒªãƒ³ã‚¯
Facebook PHP SDKãŒ3.1.1ã«ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ï¼ˆOAuth 2.0ï¼‰
Facebookã®PHP SDKãŒ3.1.1ã«ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã•ã‚Œã¾ã—ãŸã€‚OAuth 2.0é–¢é€£ã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã§ã™ã€‚ Migrating to OAuth 2.0 update: PHP SDK v.3.1.1 ï¼‘ï¼Žã‚µãƒ³ãƒ—ãƒ«ãƒ—ãƒã‚°ãƒ©ãƒ ã¨ã„ã†ã“ã¨ã§ã€PHP SDK 3.1.1ã‚’ä½¿ã£ãŸã‚µãƒ³ãƒ—ãƒ«ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’å¼•ç”¨ã—ã¾ã™ã€‚ã“ã®ãƒ—ãƒã‚°ãƒ©ãƒ ã¯JavaScript SDKã¨é€£æºã—ã¦å‹•ä½œã—ã¾ã™ã€‚ <?php require 'facebook.php'; $facebook = new Facebook(array( 'appId' => 'YOUR_APP_ID', 'secret' => 'YOUR_APP_SECRET', )); // See if there is a user from a cookie $user = $facebook->getUser(); if ($user) { tr
nikkoro 2011/12/16
PHP

oauth
ãƒªãƒ³ã‚¯
The OAuth 2.0 Protocol
The OAuth 2.0 Protocol draft-ietf-oauth-v2-10 Abstract ã“ã‚Œã¯OAuth 2.0ãƒ—ãƒãƒˆã‚³ãƒ«ã®ä»•æ§˜æ›¸ã§ã‚ã‚‹. Status of this Memo This Internet-Draft is submitted in full conformance with the provisions of BCPÂ 78 and BCPÂ 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is
nikkoro 2011/10/27
OAuth
ãƒªãƒ³ã‚¯
æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æŠ€è¡“å‹•å‘èª¿æŸ»ï¼ˆ2010 å¹´ä¸ŠæœŸï¼‰ï¼šIPA ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
æœ¬å ±å‘Šã§ã¯ 2010 å¹´ä¸ŠåŠæœŸã®ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ç®¡ç†æŠ€è¡“ã«é–¢ã™ã‚‹å‹•å‘ã¨ã—ã¦ã€User Managed Access [1] ã®å‹•ãã‚’æ¦‚è¦³ã™ã‚‹ã€‚ 2.1 èƒŒæ™¯ åˆ†æ•£ç’°å¢ƒã«ãŠã‘ã‚‹ã‚¢ã‚¯ã‚»ã‚¹ç®¡ç†ã¯ã€å¤ãã¦æ–°ã—ã„èª²é¡Œã§ã‚ã‚‹ã€‚çµ„ç¹”ã‚„ä¼æ¥ã®å†…éƒ¨ã€ã‚ã‚‹ã„ã¯ä¿¡é ¼é–¢ä¿‚ã®ã‚ã‚‹çµ„ç¹”é–“ã§ã¯ã€ãƒãƒªã‚·ãƒ¼ã«åŸºã¥ã„ã¦ã©ã®ã‚ˆã†ãªã‚¢ã‚¯ã‚»ã‚¹ã‚’è¨±å¯ã™ã‚‹ã‹ã‚’åˆ¤æ–ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã‚’PDPï¼ˆPolicy Decision Pointï¼šãƒãƒªã‚·ãƒ¼æ±ºå®šç‚¹ï¼‰ã€PDPã®åˆ¤æ–ã«åŸºã¥ã„ã¦å®Ÿéš›ã«ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã‚’å®Ÿè¡Œã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã‚’PEPï¼ˆPolicy Enforcement Pointï¼šãƒãƒªã‚·ãƒ¼å®Ÿè¡Œç‚¹ï¼‰ã¨ã—ã€ã‚¢ã‚¯ã‚»ã‚¹ç®¡ç†ã®å¤§å…ƒã‚’ PDP ã«é›†ç´„ã™ã‚‹ã“ã¨ãŒä¸€èˆ¬çš„ã§ã‚ã£ãŸã€‚ã—ã‹ã—ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãƒ»ã‚µãƒ¼ãƒ“ã‚¹åŒå£«ã® Web API ã«ã‚ˆã‚‹ç–Žçµåˆãªé€£æºã«å¯¾ã—ã¦ã¯ã€ã“ã®ã‚ˆã†ãªæ—§æ¥ã®ä¸å¤®é›†æ¨©çš„ãªãƒ¢ãƒ‡ãƒ«ã‚’ãã®ã¾ã¾å½“ã¦ã¯ã‚ã‚‹ã“ã¨ãŒé›£ã—ã„å ´åˆã‚‚å°‘ãªããªã„ã€‚ Web API ã«ã‚ˆã‚‹ã‚¤
nikkoro 2011/10/27
oauth
ãƒªãƒ³ã‚¯
Code â€” OAuth
OAuth Providers Open Source Authentik a12n-server Casdoor Glewlwyd Omejdn Keycloak OAuth.io ORY Hydra oidc-provider SimpleLogin Spring Authorization Server SSQ signon WSO2 Identity Server ZITADEL boruta Commercial Asgardeo Auth0 Authress cidaas Clerk Corbado Curity Identity Server Descope ForgeRock FusionAuth LoginRadius Okta PingId Red Hat Single Sign-On Stytch ZITADEL Cloud IBM Cloud App ID Rela
nikkoro 2011/09/08
oauth
ãƒªãƒ³ã‚¯
http://www.machu.jp/posts/20110722/p01/
nikkoro 2011/07/27
oauth

OpenID

security
ãƒªãƒ³ã‚¯
NECã€IDæ´»ç”¨åŸºç›¤ã‚½ãƒ•ãƒˆã€ŒNC7000-3Aã€ã‚’å¼·åŒ–ã€OAuthå¯¾å¿œã®æ–°è£½å“ãªã©
nikkoro 2011/04/15
oauth

OpenID

NEC
ãƒªãƒ³ã‚¯
OAuth 2.0ã§Webã‚µãƒ¼ãƒ“ã‚¹ã®åˆ©ç”¨æ–¹æ³•ã¯ã©ã†å¤‰ã‚ã‚‹ã‹ï¼ˆ1/3ï¼‰- ï¼ IT
OAuth 2.0ã§ Webã‚µãƒ¼ãƒ“ã‚¹ã®åˆ©ç”¨æ–¹æ³•ã¯ã©ã†å¤‰ã‚ã‚‹ã‹ ã‚½ãƒ¼ã‚·ãƒ£ãƒ«APIæ´»ç”¨ã«å¿…é ˆã®â€œOAuthâ€ã®åŸºç¤ŽçŸ¥è˜ æ ªå¼ä¼šç¤¾ãƒ“ãƒ¼ã‚³ãƒ³IT æœ¨æ‘ç¯¤å½¦ 2011/2/2 TwitterãŒOAuth 1.0ã‚’æŽ¡ç”¨ã—ãŸã®ã‚’çš®åˆ‡ã‚Šã«ã€ä»Šã§ã¯å¤šãã®ã‚µãƒ¼ãƒ“ã‚¹ãŒOAuth 1.0ã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚å›½å†…ã§ã‚‚ã€ä¾‹ãˆã°ã€ãƒžã‚¤ã‚¯ãƒãƒ–ãƒã‚°åž‹ã‚³ãƒ©ãƒœãƒ„ãƒ¼ãƒ«ã€ŒyouRoomã€ã€å°è¦æ¨¡ã‚°ãƒ«ãƒ¼ãƒ—å‘ã‘ã‚°ãƒ«ãƒ¼ãƒ—ã‚¦ã‚§ã‚¢ã€Œã‚µã‚¤ãƒœã‚¦ã‚ºLiveã€ã€ã€Œã¯ã¦ãªã€ã®ã„ãã¤ã‹ã®ã‚µãƒ¼ãƒ“ã‚¹ã€ã€ŒYahoo!ã‚ªãƒ¼ã‚¯ã‚·ãƒ§ãƒ³ã€ã€ãƒªã‚¢ãƒ«ã‚¿ã‚¤ãƒ ãƒ‰ãƒãƒ¼ãƒ„ãƒ¼ãƒ«ã€ŒCacooã€ãªã©ãŒOAuth 1.0ã«å¯¾å¿œã—ãŸAPIã‚’å…¬é–‹ã—ã¦ã„ã¾ã™ã€‚ ã“ã“æ•°å¹´ã§OAuthã¯ã•ã¾ã–ã¾ãªWebã‚µãƒ¼ãƒ“ã‚¹ã®ãƒªã‚½ãƒ¼ã‚¹ã‚’åˆ©ç”¨ã™ã‚‹éš›ã®èªè¨¼æ–¹å¼ã¨ã—ã¦æ™®åŠã—ã¦ãã¾ã—ãŸã€‚ã“ã‚Œã¯å¤§ããªãƒ—ãƒ¬ãƒ¼ãƒ¤ãƒ¼ãŒã‚µãƒãƒ¼ãƒˆã—ãŸã“ã¨ã‚‚ä¸€å› ã§ã™ãŒã€OAuthã®æŒã¤ä»¥ä¸‹ã®2ã¤ã®ç‰¹å¾´ã«ã‚ˆã£ã¦ã€ã€ŒOAuthã‚’ä½¿ã†ã¨ã€ã‚µãƒ¼ãƒ“ã‚¹ãƒ—ãƒãƒã‚¤
nikkoro 2011/02/05
oauth

security

API
ãƒªãƒ³ã‚¯
PECLã®oAuthã‚¨ã‚¯ã‚¹ãƒ†ãƒ³ã‚·ãƒ§ãƒ³ã‚’ä½¿ã£ã¦PHPã§Twitterã«ãƒã‚°ã‚¤ãƒ³ã™ã‚‹ã‚µãƒ³ãƒ—ãƒ«ä¾‹:phpspoté–‹ç™ºæ—¥èªŒ
Complete oAuth script for Twitter and LinkedIn using PECL oAuth Extension The Storyteller PECLã®oAuthã‚¨ã‚¯ã‚¹ãƒ†ãƒ³ã‚·ãƒ§ãƒ³ã‚’ä½¿ã£ã¦PHPã§Twitterã«ãƒã‚°ã‚¤ãƒ³ã™ã‚‹ã‚µãƒ³ãƒ—ãƒ«ä¾‹ãŒå…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ PECLã«oAuthã®ã‚¨ã‚¯ã‚¹ãƒ†ãƒ³ã‚·ãƒ§ãƒ³ãŒå…¬é–‹ã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ã§ã€ãã‚Œã‚’ä½¿ã£ã¦Twitterã‚„Linkedinã«ãƒã‚°ã‚¤ãƒ³ã™ã‚‹ã‚µãƒ³ãƒ—ãƒ«ãƒ—ãƒã‚°ãƒ©ãƒ ã§ã™ã€‚ Yahoo!Japan ã‚‚ oAuth ã«å¯¾å¿œã—ã¦ã„ã¦ã€ã‚µãƒ¼ãƒ“ã‚¹ã«å¤§æ‰‹ã‚µã‚¤ãƒˆã®ãƒã‚°ã‚¤ãƒ³ã‚’ä½¿ã„ãŸã„å ´åˆã«ä½¿ãˆã¾ã™ãã€‚ æ‹¡å¼µã‚’ä½¿ã£ã¦ç°¡å˜ã«ã§ãã‚‹ã®ã¯ã„ã„ã®ã§ã™ãŒã€ãã‚Œã§ã‚‚çµæ§‹ã‚µãƒ³ãƒ—ãƒ«ã‚’çµ„ã‚€ã®ã¯å¤§å¤‰ã®ã‚ˆã†ã§ã€ã“ã®ã‚µãƒ³ãƒ—ãƒ«ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’å‚è€ƒã«ä½œã‚Œã°oAuthéƒ¨åˆ†ã¯æ¯”è¼ƒçš„é€Ÿæ”»ã§ä½œã£ã¦ã—ã¾ãˆãã†ã€‚ ã‚¨ã‚¯ã‚¹ãƒ†ãƒ³ã‚·ãƒ§ãƒ³ãªã®ã§PEARãªã©ã«æ¯”ã¹ã¦é€Ÿåº¦ã‚‚å‡ºã‚‹ã®ã§ã€PEARã‚’ä½¿ã£ã¦ã„
nikkoro 2010/05/02
oauth

twitter

php
ãƒªãƒ³ã‚¯
sdn-project.net
nikkoro 2010/05/02
oauth

twitter

php
ãƒªãƒ³ã‚¯
PHPã§Twitter APIã®OAuthã‚’ä½¿ã†æ–¹æ³•ã¾ã¨ã‚
ã“ã®è¨˜äº‹ä»¥é™ Twitter API ã®ä»•æ§˜ãŒå¤‰ã‚ã£ã¦ãŠã‚Šã€ã“ã®ã¾ã¾ã§ã¯æ£ã—ãæ©Ÿèƒ½ã—ãªã„å ´åˆãŒã‚ã‚‹ã¨æ€ã„ã¾ã™ã€‚è¿‘ã„ã†ã¡ã«ä»Šã®ã‚„ã‚Šæ–¹ã‚’æ›¸ãã®ã§ã€ãã‚Œã¾ã§å‚è€ƒç¨‹åº¦ã«ã”è¦§ãã ã•ã„ã€‚ Twitter API ã® OAuth ã§ã²ã¨ã¨ãŠã‚Šã‚„ã£ã¦ã¿ãŸã€‚ å¿˜ã‚Œãªã„ã‚ˆã†ã«ãƒ¡ãƒ¢ã€‚ å¤§é›‘æŠŠãªæµã‚Œ Twitter ã«ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ç™»éŒ²ã™ã‚‹ã€‚ Consumer Key ã¨ Consumer secret ã‚’å–å¾—ã™ã‚‹ã€‚ ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒˆãƒ¼ã‚¯ãƒ³ã‚’å–å¾—ã™ã‚‹ã€‚ èªè¨¼ç”¨ URL ã‚’å–å¾—ã™ã‚‹ã€‚ ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‹ã‚‰æ‰¿èªã‚’å—ã‘ã‚‹ï¼ˆbot ã®å ´åˆã¯è‡ªåˆ†ã§ã‚„ã‚‹ï¼‰ã€‚ ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã‚’å–å¾—ã™ã‚‹ã€‚ API ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã€‚ ä»¥ä¸‹ã€ã‚„ã£ãŸä½œæ¥ã®æ‰‹é †ã§ã™ã€‚ äº‹å‰æº–å‚™ HTTP_OAuth ã‚’ä½¿ãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ OAuth ã®é€šä¿¡éƒ¨åˆ†ãã®ã‚‚ã®ã¯ PEAR ã® HTTP_OAuth ã‚’ä½¿ã†ã“ã¨ã«ã—ãŸã®ã§ ã“ã‚Œã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ã€‚ ä¸€ç•ªã‚ã‚“ã©ãã•ã„éƒ¨åˆ†ã‚’
nikkoro 2010/01/15
OAuth

api

Identity
ãƒªãƒ³ã‚¯
OAuthã¨å‘¨è¾ºæŠ€è¡“ã®å‹‰å¼·ä¼š â€” ã‚ã‚Šãˆã‚‹ãˆã‚Šã‚
OAuthã®å…¸åž‹çš„ã‚·ãƒŠãƒªã‚ª userãŒconsumer(Webä¸Šã®ã‚µãƒ¼ãƒ“ã‚¹)ã‚’åˆ©ç”¨ userã¯SP(åˆ¥ã®Webä¸Šã®ã‚µãƒ¼ãƒ“ã‚¹)ã«ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’æŒã£ã¦ã„ã‚‹ SPã¯ä¸€èˆ¬ã«SNSã§ã€userãŒSPä¸Šã«è“„ç©ã—ãŸæƒ…å ±(å€‹äººãƒ—ãƒãƒ•ã‚¡ã‚¤ãƒ«ã‚„å‹é”ãƒªã‚¹ãƒˆãªã©)ã¯åŽŸå‰‡çš„ã«SPã®å¤–éƒ¨ã«éžå…¬é–‹ consumerã¯ã€userã«è¨±å¯ã‚’å¾—ã¦ã€SPä¸Šã®æƒ…å ±ã‚’å–å¾—ã™ã‚‹ ãŸã ã—ã€userã¯consumerã«SPã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯æ•™ãˆãªã„ OAuth 1.0aã®å‹•ä½œã‚·ãƒ¼ã‚±ãƒ³ã‚¹ è¡¨è¨˜æ³• ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¨ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã®åŒºåˆ¥ã¯è‡ªæ˜Žã§ã™ãŒã€ã²ã¨ã‚ã§åˆ†ã‹ã‚‹ã‚ˆã†ã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ --> ã€ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã¯ ==> ã«ã—ã¦ã„ã¾ã™ã€‚ ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚„ãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒšã‚¢ã®ä¸Šã«æ›¸ã„ã¦ã‚ã‚‹æ•°å—ã¯OAuth1.0aã‚¹ãƒšãƒƒã‚¯ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ç•ªå·ã§ã™ã€‚ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã‚„ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã®å†…å®¹ã¯ã‚¹ãƒšãƒƒã‚¯ã®è©²å½“ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã‚’å‚ç…§ã—ã¦ãã ã•ã„ã€‚ ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚„ãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒšã‚¢ã®ä¸‹ã«æ›¸ã„ã¦ã‚ã‚‹æ–‡å—åˆ—ã¯
nikkoro 2009/12/05
oauth

security
ãƒªãƒ³ã‚¯
OAuthé–¢é€£ãƒˆãƒ”ãƒƒã‚¯ã‚ãƒ£ãƒƒãƒã‚¢ãƒƒãƒ— : Y!ã¯1.0ã‚¯ãƒãƒ¼ã‚ºã€Gã¯anonymous OAuthã‚’å®Ÿè£… - r-weblife
â– Yahoo! Incã®OAuthãŒRev Aã®ã¿ã«ãªã‚‹ Yahoo!Incã¯ä»Šã¾ã§ã€4æœˆã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å•é¡ŒãŒè¦‹ã¤ã‹ã£ãŸéš›ã«ä¸€æ™‚çš„ã«OAuthã®ã‚·ã‚¹ãƒ†ãƒ ã‚’æ¢ã‚ã¾ã—ãŸãŒã€ãã®å¾Œã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«è¦å‘Šç”»é¢ã‚’å‡ºã™ã‚‚ã®ã®å‹•ä½œã¯ã™ã‚‹ã‚ˆã†ã«æˆ»ã—ã¦ã„ã¾ã—ãŸã€‚ ã‚ˆã£ã¦ã€OAuth Core 1.0ã¨ãã®å•é¡ŒãŒä¿®æ£ã•ã‚ŒãŸä»•æ§˜ã®OAuth Core 1.0aã®ä¸¡æ–¹ã®ä»•æ§˜ã§OAuthã‚’åˆ©ç”¨ã§ãã‚‹çŠ¶æ…‹ã«ãªã£ã¦ã„ãŸã®ã§ã™ã€‚ ã“ã‚Œã¯æ—¢ã«OAuth Core 1.0ã‚’åˆ©ç”¨ã—ã¦ã„ãŸã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¸ã®é…æ…®ã ã£ãŸã®ã ã¨æ€ã‚ã‚Œã¾ã™ãŒã€11/9ã«OAuth Core 1.0ã®ã»ã†ã®ä»•æ§˜ã§ã¯OAuthã®å‡¦ç†ãŒã§ããªããªã‚‹ã‚ˆã†ã§ã™ã€‚ http://developer.yahoo.net/blog/archives/2009/11/reminder_we_are.html http://developer.yahoo.net/foru
nikkoro 2009/11/08
google

oauth
ãƒªãƒ³ã‚¯
ã‚°ãƒ¼ã‚°ãƒ«ã€OAuthã‚’ã‚¬ã‚¸ã‚§ãƒƒãƒˆãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã«æŽ¡ç”¨
æ–‡ï¼šDavid Meyer ï¼ˆZDNet.co.ukï¼‰Â ç¿»è¨³æ ¡æ£ï¼šç·’æ–¹äº®ã€ç¦å²¡æ´‹ä¸€ 2008-11-21 12:34 Googleã¯ã€ã‚¦ã‚§ãƒ–ã«ãŠã„ã¦ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ã‚’åˆ¶å¾¡ã—ã¤ã¤APIã‚¢ã‚¯ã‚»ã‚¹æ¨©ã‚’å§”è²ã§ãã‚‹ã‚ˆã†ã«ã™ã‚‹ã‚ªãƒ¼ãƒ—ãƒ³ãªæ¨™æº–OAuthã‚’ã€åŒç¤¾ã®ã‚¬ã‚¸ã‚§ãƒƒãƒˆãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã«æŽ¡ç”¨ã—ãŸã€‚ OAuthã¯ã€ã‚ã‚‹ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã«è‡ªåˆ†ã®å€‹äººæƒ…å ±ã‚’ç½®ã„ã¦ã„ã‚‹äººãŒã€ãƒ‡ãƒ¼ã‚¿ã‚’ã»ã‹ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚„ã‚¬ã‚¸ã‚§ãƒƒãƒˆã¨å…±æœ‰ã™ã‚‹æ¨©é™ã‚’ãã®ã‚µã‚¤ãƒˆã«ä»˜ä¸Žã™ã‚‹ä»•çµ„ã¿ã‚’æä¾›ã™ã‚‹ã€‚OAuthã¯ã“ã®å…±æœ‰ã‚’ã€æœ€åˆã®ã‚µã‚¤ãƒˆãŒå…±æœ‰ã‚’å—ã‘ã‚‹ã‚µã‚¤ãƒˆã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®IDã‚’æ˜Žã‹ã™å¿…è¦æ€§ãªã—ã«å®Ÿç¾ã§ãã‚‹ã€‚ Googleã¯6æœˆã€ã€ŒGoogle Data APIã€ã®ãƒ‡ãƒ¼ã‚¿å…±æœ‰ã«OAuthã‚’æŽ¡ç”¨ã™ã‚‹ã“ã¨ã‚’ç™ºè¡¨ã—ãŸã€‚ãã—ã¦ç±³å›½æ™‚é–“11æœˆ18æ—¥ã€ä»Šåº¦ã¯OAuthã‚’ã€ŒGoogle Gadgetsã€ã§æŽ¡ç”¨ã™ã‚‹ã“ã¨ã‚’æ˜Žã‚‰ã‹ã«ã—ãŸã€‚Google Gadgetsã¯ãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—
nikkoro 2008/11/28
OpenID

oauth
ãƒªãƒ³ã‚¯
1