[B! oauth] reponã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

repon id:repon

oauthã«é–¢ã™ã‚‹reponã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (9)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

HTTPS ã§ã‚‚ Full URL ãŒæ¼ã‚Œã‚‹ï¼ŸOAuth ã® code ã‚‚æ¼ã‚Œã‚‹ã‚“ã˜ã‚ƒãï¼Ÿï¼Ÿ - OAuth.jp
ãªã‚“ã§ã™ã‹ã“ã‚Œã¯ï¼ New attack bypasses HTTPS protection on Macs, Windows, and Linux DHCP ã«ã¤ãªãã¨ PAC ãƒ•ã‚¡ã‚¤ãƒ«ãŒãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã•ã‚Œã¦ HTTPS ã§ã‚ã‚ã†ã¨ã‚¢ã‚¯ã‚»ã‚¹å…ˆã® Full URL ã¯æ¼ã‚Œã‚‹ã§ã™ã£ã¦ï¼Ÿ Web Proxy Autodiscovery ã§ã™ã£ã¦ï¼Ÿ ãƒãƒ§ãƒƒãƒˆãƒ‹ãƒ›ãƒ³ã‚´ãƒ‡ã‚ªãƒã‚¬ã‚¤ã‚·ãƒžã‚¹ ã£ã¦ã“ã¨ã§ã€ã¾ãã“ã‚ŒãŒå®Ÿéš›ã©ã‚Œãã‚‰ã„ç°¡å˜ã«å®Ÿç¾ã§ãã‚‹æ”»æ’ƒãƒ‘ã‚¿ãƒ¼ãƒ³ãªã®ã‹ã¯ä»–ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ¥ç•Œã®æ–¹ã€…ã«å¾Œã§èžãã¨ã—ã¦ã€ã“ã®è¨˜äº‹ã§ã‚‚è§¦ã‚Œã‚‰ã‚Œã¦ã‚‹ OpenID Connect ã¨ã‹ OAuth2 ã¸ã®å½±éŸ¿ã«ã¤ã„ã¦ã€ã¡ã‚‡ã£ã¨ã¾ã¨ã‚ã¦ãŠãã¾ã—ã‚‡ã†ã‹ã€‚ Authorization Request & Response ãŒæ¼ã‚Œã‚‹ response_mode=form_post ãªã‚“ã¦ã„ã†ã®ã‚‚ä¸€éƒ¨ã‚ã‚Šã¾ã™ãŒã€åŸºæœ¬ OAuth2 /
repon 2016/07/28
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

oauth

https
ãƒªãƒ³ã‚¯
ç°¡å˜Sinatraï¼WebAPIãƒ»OAuthèªè¨¼ã‚’ä½¿ã£ã¦ã¿ã‚ˆã† - è§’å¹¸ä¸€éƒŽ | type IT Academy
Rubyã§ç°¡å˜ã€ãƒžãƒƒã‚·ãƒ¥ã‚¢ãƒƒãƒ—ã‚µãƒ¼ãƒ“ã‚¹ã‚’å…¬é–‹ã—ã¦ã¿ã‚ˆã†ï¼Â Â - ç¬¬2å›ž - ç°¡å˜Sinatraï¼WebAPIãƒ»OAuthèªè¨¼ã‚’ä½¿ã£ã¦ã¿ã‚ˆã† ç¬¬1å›žç›®ã ã£ãŸå‰å›žã¯ã€ã€ŒRubyè¨€èªžã€ã¨ã¯ä½•ã‹ã€ãã—ã¦Ruby Frameworkã§ã‚ã‚‹ã€ŒSinatraã€ã¨ã¯ä½•ã‹ã«ã¤ã„ã¦ãŠè©±ã—ãŸå¾Œã€ç°¡å˜ã«ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã®ä»•æ–¹ã«ã¤ã„ã¦ãŠä¼ãˆã—ã¾ã—ãŸã€‚ ç¬¬2å›žç›®ã¨ãªã‚‹ä»Šå›žã¯ã€ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã§ã‚ã‚‹ã€ŒRubygemsã€ã¨ã€å‰å›žå¦ã‚“ã ã€ŒRubyã€ã¨ã€ŒSinatraã€ã‚’åˆ©ç”¨ã—ã¦ã€WebAPIã‚„OAuthèªè¨¼ã®åˆ©ç”¨æ–¹æ³•ã‚’ãŠè©±ã—ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ ã¾ãŸè¨˜äº‹ã§ã¯Twitter APIã‚’åˆ©ç”¨ã—ã¦ã€OAuthèªè¨¼ã‹ã‚‰Twitterã®æ©Ÿèƒ½ã‚’ä½¿ãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ã¾ã§ã®æµã‚Œã‚’ãŠä¼ãˆã—ã¾ã™ã€‚ å¾³å³¶å¤§å¦åœ¨å¦ä¸ã‹ã‚‰ãƒ•ãƒªãƒ¼ãƒ©ãƒ³ã‚¹ã¨ã—ã¦iPhoneã‚¢ãƒ—ãƒªã‚’è¤‡æ•°ãƒªãƒªãƒ¼ã‚¹ã€ç´¯è¨ˆ200ä¸‡DLè¶…ã€‚ æ–°å’ã¨ã—ã¦å…¥ç¤¾ã—ãŸæ¥½å¤©ã‚’2010å¹´æœ«ã«é€€è·å¾Œã€Cyber
repon 2015/03/06
WebAPI

sinatra

oauth
ãƒªãƒ³ã‚¯
pocket APIã§webã‚µãƒ¼ãƒ“ã‚¹ã‚’ä½œã‚ŠãŸã„å…¨ã¦ã®äººã«å‘ã‘ã¦æ›¸ãã¾ã—ãŸ
repon 2015/02/20
pocket

api

oauth
ãƒªãƒ³ã‚¯
Ruby on Rails, Deviseã‚’ä½¿ã£ã¦èªè¨¼æ©Ÿèƒ½ã‚’å®Ÿè£…ã—ã¦ã¿ã‚‹
æ‰‹é †ã¯Deviseé–‹ç™ºå…ƒã®GitHubã«æ›¸ã„ã¦ã‚ã‚‹ã€‚è‹±èªžã ã‘ã©ã‚³ãƒžãƒ³ãƒ‰ã¨ã‹ã‚³ãƒ¼ãƒ‰èªã‚ã°å¤§ä½“ã§ãã‚‹ https://github.com/plataformatec/devise æ—¥æœ¬èªžãŒè‰¯ã„ã‹ãŸã¯ã“ã£ã¡ã‚’èªã‚€ãŒã„ã„ã•ï¼ http://d.hatena.ne.jp/babie/20100729/1280381392 ç’°å¢ƒ Mac OS X 10.7.5 Lion ruby 1.9.3 Rails 3.2.12 mysql 5.1.66 ã‚„ã£ã¦ã¿ã‚‹ã€‚ç™¾èžã¯ä¸€è¦‹ã«ã—ã‹ãš GemFileã«ä¸‹è¨˜ã‚’è¿½åŠ ã—ã¦bundle installã™ã‚‹ã€‚ã¡ãªã¿ã«GemFileã¯ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆãƒ«ãƒ¼ãƒˆã«é…ç½®ã•ã‚Œã¦ã„ã‚‹ã€‚
repon 2013/06/27
rails

ruby

oauth
ãƒªãƒ³ã‚¯
http://www.machu.jp/posts/20100606/p01/
repon 2012/10/25
rack

twitter

oauth
ãƒªãƒ³ã‚¯
è‡ªç¤¾ã‚µãƒ¼ãƒ“ã‚¹ã®æ©Ÿèƒ½ã‚’ç°¡å˜ã«APIã§æä¾›å‡ºæ¥ã¦ã—ã¾ã†ï¼gem doorkeeperãŒå‡„ã„ã€‚ - @camelmasaã®é–‹ç™ºæ—¥è¨˜
è‡ªç¤¾ã‚µãƒ¼ãƒ“ã‚¹ã«APIã‚’å®Ÿè£…ã™ã‚‹äº‹ã£ã¦ã‚ã¾ã‚Šãªã„ã§ã™ã‚ˆãã€‚ kamadoã®ãƒ—ãƒãƒ€ã‚¯ãƒˆã‚‚ç¾åœ¨ã¯APIã¯å…¬é–‹ã—ã¦ã¾ã›ã‚“ã€‚ ã‚‚ã—æä¾›ã™ã‚‹ã®ã§ã‚ã‚Œã°ã€ç°¡æ˜“çš„ãªæ–¹æ³•ã§ã™ãŒã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ†ãƒ¼ãƒ–ãƒ«ã«tokenã‚«ãƒ©ãƒ ã‚’è¿½åŠ ã—ã¦ã€APIç”¨ã®ãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚’ä½œæˆã™ã‚‹â€¦ã¨ã„ã†æ–¹æ³•ãŒè€ƒãˆã‚‰ã‚Œã‚‹ã¨æ€ã„ã¾ã™ã€‚ ã—ã‹ã—ã€ãã®å®Ÿè£…æ™‚é–“ã§ã‚ˆã‚Šè‰¯ã„APIãŒå®Ÿè£…å‡ºæ¥ã‚‹ã¨ã—ãŸã‚‰ç´ æ™´ã‚‰ã—ã„ã§ã™ã‚ˆãã€‚ ãã“ã§ç´¹ä»‹ã—ãŸã„ã®ãŒgem doorkeeperã§ã™ã€‚ æ—¥æœ¬èªžã®è¨˜äº‹ãŒè¦‹å½“ãŸã‚‰ãªã‹ã£ãŸã®ã§è¨˜äº‹ã«ã—ã¾ã—ãŸã€‚ github https://github.com/applicake/doorkeeper gem doorkeeperã£ã¦ã©ã‚“ãªæ©Ÿèƒ½ãŒã‚ã‚‹ã®ã‹ï¼Ÿ ç°¡å˜ã«èª¬æ˜Žã™ã‚‹ã¨ã€ ãƒ»ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ç®¡ç†æ©Ÿèƒ½ ãƒ»ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®æ‰¿èªç®¡ç† ãƒ»ã‚¹ã‚³ãƒ¼ãƒ—ã®è¨å®š ã„ã£ã¦ã—ã¾ãˆã°ã€Facebook API(ã«è¿‘ã„å®Ÿè£…)ãã®ã¾ã¾å®Ÿè£…å‡ºæ¥ã¾ã™ã€‚ ã—ã‹ã‚‚OAu
repon 2012/10/06
ruby

ã‚µãƒ¼ãƒ“ã‚¹

oauth

gem
ãƒªãƒ³ã‚¯
RFCã¨ãªã£ãŸã€ŒOAuth 2.0ã€â€•â€•ãã®è¦ç‚¹ã¯ï¼Ÿ
RFCã¨ãªã£ãŸã€ŒOAuth 2.0ã€â€•â€•ãã®è¦ç‚¹ã¯ï¼Ÿï¼šãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£æŠ€è¡“æœ€æ–°å‹•å‘ï¼ˆ2ï¼‰ï¼ˆ1/2 ãƒšãƒ¼ã‚¸ï¼‰ ã„ã¾Webã®ä¸–ç•Œã§ã¯ã€ã•ã¾ã–ã¾ãªWebã‚µãƒ¼ãƒ“ã‚¹ãŒæä¾›ã™ã‚‹ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã¨ã€ã‚µãƒ¼ ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ãŒæä¾›ã™ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒAPIã‚’ä¸å¿ƒã«çµã³ä»˜ãã€ä¸€ç¨®ã®ã€ŒAPIã‚¨ã‚³ãƒŽãƒŸãƒ¼ã€ã‚’å½¢æˆã—ã¦ã„ã¾ã™ã€‚ã“ã®é€£è¼‰ã§ã¯ã€ãã“ã§é‡è¦ãªå½¹å‰²ã‚’æžœãŸã™ã€Œãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã€ã«ã¤ã„ã¦ç†è§£ã‚’æ·±ã‚ã¦ã„ãã¾ã™ã€‚ å†ã³ã€ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã®ä¸–ç•Œã¸ã‚ˆã†ã“ã å‰å›žã€Œã€ŽOAuthã€ã®åŸºæœ¬å‹•ä½œã‚’çŸ¥ã‚‹ã€ã§ã¯OAuthã®ä»•æ§˜ãŒã©ã†ã„ã†ã‚‚ã®ã‹ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã—ãŸã€‚ä»Šå›žã¯å¼•ãç¶šãã€ OAuth 1.0ã¨OAuth 2.0ã®é•ã„ OAuth 2.0ã‚’ã‚»ã‚ãƒ¥ã‚¢ã«ä½¿ã†ãŸã‚ã«çŸ¥ã£ã¦ãŠãã¹ãã“ã¨ ã«ã¤ã„ã¦è¿°ã¹ã¦ã„ãã¾ã™ã€‚ OAuth 1.0ã¨OAuth 2.0ã®é•ã„ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚¿ã‚¤ãƒ—ã®å®šç¾© OAuth 2.0ã§ã¯ã€O
repon 2012/09/12
OAuth

OAuth2.0

æŠ€è¡“è§£èª¬

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
ã€ŒOAuthã€ã®åŸºæœ¬å‹•ä½œã‚’çŸ¥ã‚‹
ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã®ä¸–ç•Œã¸ã‚ˆã†ã“ã ã¯ã˜ã‚ã¾ã—ã¦ã€OpenID Foundation Japanã§ã‚¨ãƒãƒ³ã‚¸ã‚§ãƒªã‚¹ãƒˆã‚’ã—ã¦ã„ã‚‹Novã§ã™ã€‚ ã“ã®é€£è¼‰ã§ã¯ã€åƒ•ã‚’å«ã‚OpenID Foundation Japanã«ã‹ã‹ã‚ã‚‹ãƒ¡ãƒ³ãƒãƒ¼ã§ã€OpenID Connectã‚„OAuthãªã©ã®ã€Œãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ï¼ˆDigital Identityï¼‰ã€ã«ã‹ã‹ã‚ã‚‹æŠ€è¡“ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¦ã„ãã¾ã™ã€‚ APIã‚¨ã‚³ãƒŽãƒŸãƒ¼æ™‚ä»£ã®ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ ä¸–ç•Œä¸ã§9å„„äººã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’æŠ±ãˆã‚‹ã€ŒFacebookã€ã‚„5å„„äººã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’æŒã¤ã€ŒTwitterã€ãªã©ã€å·¨å¤§ãªã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚°ãƒ©ãƒ•ã‚’æŒã¤ã‚µãƒ¼ãƒ“ã‚¹ãŒã€æ—¥ã€…ãã®å˜åœ¨æ„Ÿã‚’å¢—ã—ã¦ã„ã¾ã™ã€‚æ—¥æœ¬ã§ã‚‚ã€ã‚°ãƒªãƒ¼ã‚„ãƒ¢ãƒã‚²ãƒ¼ãªã©ãŒãã‚Œãžã‚Œã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚²ãƒ¼ãƒ ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã‚’å…¬é–‹ã—ã€å›½å†…ã«ä¸€æ°—ã«å·¨å¤§ãªã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚²ãƒ¼ãƒ å¸‚å ´ã‚’ä½œã‚Šä¸Šã’ã¾ã—ãŸã€‚æœ€è¿‘ã§ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼æ•°ãŒ5000ä¸‡äººã‚’çªç ´ã—ã€ãƒ—ãƒ©ãƒƒãƒˆ
repon 2012/08/28
api

oauth

èªè¨¼
ãƒªãƒ³ã‚¯
8åˆ†21ç§’ã§åˆ†ã‹ã‚‹Rubyã¨OAuthã«ã‚ˆã‚‹TwitterAPIã®ä½¿ã„æ–¹ï¼ˆå‹•ç”»ï¼‰ - æ˜¼ãƒ¡ã‚·ç‰©èªž
Twitter APIã®BASICèªè¨¼ã¯è¿‘ã€…å»ƒæ¢ã•ã‚Œã€ä»Šå¾Œã¯OAuth/xAuthã«ã‚·ãƒ•ãƒˆã•ã‚Œã¾ã™ã€‚ æ··ä¹±ã—ã¦ã„ã‚‹é–‹ç™ºè€…ã‚‚å¤šã„ã¨æ€ã†ã®ã§ã€ä»Šå›žã¯OAuthå¯¾å¿œãªTwitterBotã‚’ä½œã‚‹ã“ã¨ã‚’å‰æã«ã—ã¦ã€ãã®ç°¡å˜ãªã‚„ã‚Šæ–¹ã‚’å‹•ç”»ã«æ’®ã£ã¦ã¿ã¾ã—ãŸã€‚ã‚¹ã‚¯ãƒªãƒ¼ãƒ³ã‚ãƒ£ã‚¹ãƒˆã¨ã„ã†ã‚„ã¤ã§ã™ã€‚ å‹•ç”»ã®å†…å®¹ Twitter Botã‚’ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¨ã—ã¦twitter.comã«ç™»éŒ² Consumer Key, Consumer Secret ã‚’å–å¾— Twitter Botã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®Access Token, Access Secretã‚’å–å¾— Rubyã§Twitter Botã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ç™ºè¨€ã•ã›ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’ä½œæˆ ç™ºè¨€æˆåŠŸ è£œè¶³ï¼šAccessTokenç™ºè¡Œã«ä½¿ç”¨ã—ãŸã‚¹ã‚¯ãƒªãƒ—ãƒˆ å‹•ç”»ã®ä¸ã§ã€AccessTokenã®ç™ºè¡Œã«ã€ä¿ºãŒæ›¸ã„ãŸã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’ä½¿ã£ã¦ã„ã¾ã™ã€‚ ã“ã‚Œã§ã™ã€‚ http://gist.github.c
repon 2011/08/10
twitter

ruby

oauth

api

bot
ãƒªãƒ³ã‚¯
1