[B! oauth] tecklã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

teckl id:teckl

oauthã«é–¢ã™ã‚‹tecklã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (12)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ç‰¹å®šã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’è¨±å¯ã—ã¦ã„ã‚‹ Twitter ãƒ¦ãƒ¼ã‚¶ãƒ¼ã® Token Credentials ã‚’å…¥æ‰‹ã™ã‚‹æ”»æ’ƒ - ã²ã ã¾ã‚Šã‚½ã‚±ãƒƒãƒˆã¯å£Šã‚Œãªã„
æ€ªã—ã„ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’è¨±å¯ã—ã¦ã„ãªã„ã®ã«å‹æ‰‹ã« twitter ã§ DM ãŒé€ä¿¡ã•ã‚Œã¦ã„ãŸ ä½•ã‚„ã‚‰ Twitter ã§å‹æ‰‹ã« DM ãŒé€ã‚‰ã‚Œã‚‹ã¨ã„ã†äº‹æ¡ˆãŒç™ºç”Ÿã—ã¦ã„ãŸæ¨¡æ§˜ã€‚ èª¿æŸ»ã®çµæžœã€ã‚ã‚‹ web ãƒšãƒ¼ã‚¸ã«ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸã ã‘ã§ã€Twitter ã® token credentials ãŒæ”»æ’ƒè€…ã«çŸ¥ã‚‰ã‚Œã¦ã—ã¾ã† *1 ã¨ã„ã†ã“ã¨ãŒã‚ã‹ã£ãŸã‚‰ã—ã„ã€‚ ä¸‹è¨˜ãƒšãƒ¼ã‚¸ã«ã¾ã¨ã‚ã‚‰ã‚Œã¦ã„ãŸã®ã ã‘ã©ãƒ‘ãƒƒã¨èªã‚“ã§ã™ãã«ã¯æ”»æ’ƒæ‰‹æ³•ã‚’ç†è§£ã§ããªã‹ã£ãŸã®ã§ã€ã„ã‚ã„ã‚è€ƒãˆãŸã“ã¨ã‚’æ›¸ãæ®‹ã—ã¦ãŠãã€‚ ã€Œã¡ã‚‡ã£ã¨ã“ã‚Œã¿ã¦ãã‚Œãªã„ã€ã¨urlã‚’é€ã‚‹ã‚¹ãƒ‘ãƒ DMã®è§£æžã¨è§£èª¬ - Togetter ç°¡æ½”ãªè§£èª¬ãŒä»¥ä¸‹ã®è¨˜äº‹ã«ã‚ã£ãŸã®ã§ã€ç°¡æ½”ãªèª¬æ˜Žã§ç†è§£ã§ãã‚‹äººã¯ä¸‹è¨˜è¨˜äº‹å‚ç…§ã€‚ gist:5053810 (DMè¸ã‚“ã ã ã‘ã§ã‚¢ãƒ¬ãªä»¶ã¯Twitterã®OAuthå®Ÿè£…ãŒã‚¯â—‹ã ã¨æ€ã†) ã€æ‹¡æ•£å¸Œæœ›ã€‘twitterã®æ–°åž‹ã‚¦ã‚¤ãƒ«ã‚¹ãŒãƒ¤ãƒã„ URLè¸ã‚“ã
teckl 2014/02/04
twitter

oauth

security
ãƒªãƒ³ã‚¯
Twitterã®OAuthã®å•é¡Œã®è£œè¶³ã¨ã‹
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
teckl 2014/02/04
twitter

security

mala

oauth
ãƒªãƒ³ã‚¯
Twitterã®OAuthã®å•é¡Œã¾ã¨ã‚
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
teckl 2014/02/04
ã‚¦ãƒ›

twitter

oauth

security

mala
ãƒªãƒ³ã‚¯
Web API è¨è¨ˆã®ãƒ™ã‚¹ãƒˆãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹é›† "Web API Design - Crafting Interfaces that Developers Love" - ãƒ•ãƒªãƒ¼ãƒ•ã‚©ãƒ¼ãƒ ãƒ•ãƒªãƒ¼ã‚¯ã‚¢ã‚¦ãƒˆ
ç§»è»¢ã—ã¾ã—ãŸ http://please-sleep.cou929.nu/20130121.html
teckl 2013/07/03
ã“ã‚Œã¯ç´ æ™´ã‚‰ã—ã„ã¾ã¨ã‚

api

url

rest

oauth

design
ãƒªãƒ³ã‚¯
OAuthã®èªè¨¼ã«WebViewã‚’ä½¿ã†ã®ã¯ã‚„ã‚ã‚ˆã†
Androidã‹ã‚‰Twitterã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ãŸã‚ã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã¨ã—ã¦ï¼ŒTwitter4JãŒæœ‰åã§ã™ï¼Ž ã“ã‚Œã‚’ä½¿ã£ã¦ã¿ã‚ˆã†ã¨ï¼Œã€ŒAndroid Twitter4Jã€ã¨æ¤œç´¢ã™ã‚‹ã¨ èªè¨¼ã«WebViewã‚’ä½¿ã£ãŸä¾‹ãŒãŸãã•ã‚“å‡ºã¦ãã¾ã™ï¼Ž ãƒ»ãƒ»ãƒ»ã„ã‚„ï¼Œã¡ã‚‡ã£ã¨ã¾ã¦ï¼Ž ãã‚Œã¯ã¡ã‚‡ã£ã¨ã¾ãšã„ã ã‚ã†ï¼Ž ãã†ã„ã†ã‚ã‘ã§ã‚‚ã†ã¡ã‚‡ã£ã¨è³¢ã„æ–¹æ³•ã‚’æŽ¢ã—ã¦ã¿ã¾ã—ãŸï¼Ž ä½•ãŒã¾ãšã„ã®ã• ã€ŒAndroid Twitter4Jã€ã¨æ¤œç´¢ã™ã‚‹ã¨ï¼Œä¸Šä½ã«ã“ã‚“ãªãƒšãƒ¼ã‚¸ãŒå‡ºã¦ãã¾ã™ï¼Ž Twitter4jã‚’ä½¿ã£ã¦OAuthèªè¨¼ã‚’ã‚¢ãƒ—ãƒªå†…ã§è¡Œã†æ–¹æ³• Twitter4j-2.2.xã‚’ä½¿ã£ãŸOAuthèªè¨¼ã®ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ä¾‹ twitter4jã§ãƒ„ã‚¤ãƒ¼ãƒˆã™ã‚‹ Android+Twitter4Jã§OAuthã™ã‚‹ãŸã‚ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ ä¸Šã®ã‚µã‚¤ãƒˆã§ã¯æ¬¡ã®æ§˜ã¯æ–¹æ³•ã‚’ã¨ã£ã¦ã„ã¾ã™ï¼Ž ã‚¢ãƒ—ãƒªå†…ã«WebViewã‚’è²¼ã‚Šä»˜ã‘ WebViewã§Twitterã®èªè¨¼ç”»é¢
teckl 2013/01/18
ãªã‚‹ã»ã©ã€ç¢ºã‹ã«URLå‡ºãªã„ã®ã¯æ€–ã„ãª

oauth

twitter

security

webview
ãƒªãƒ³ã‚¯
OAuth 2.0ã‚’ä½¿ã†ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãªAndroidã‚¢ãƒ—ãƒªã®ä½œã‚Šæ–¹ ï¼ˆ1/3ï¼‰ - ï¼ IT
ãƒã‚¤ãƒ†ã‚£ãƒ–ã‚¢ãƒ—ãƒªã§å®Ÿè·µï¼ mixi Graph APIæ´»ç”¨æ³• OAuth 2.0ã‚’ä½¿ã† ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãªAndroidã‚¢ãƒ—ãƒªã®ä½œã‚Šæ–¹ æ ªå¼ä¼šç¤¾ãƒŸã‚¯ã‚·ã‚£ ã‚·ã‚¹ãƒ†ãƒ æœ¬éƒ¨ æŠ€è¡“éƒ¨ ãŸã‚“ã½ã½ã‚°ãƒ«ãƒ¼ãƒ— è—¤å´Ž å‹æ¨¹ ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã‚µãƒ¼ãƒ“ã‚¹é–‹ç™ºéƒ¨ é¶´åŽŸ ç¿”å¤¢ 2011/3/30 æœ€è¿‘ã‚ˆãè€³ã«ã™ã‚‹ã€ŒOAuthã€ã¨ã¯ã€mixiã€Facebookã€Twitterãªã©ã®å¤–éƒ¨ã‚µãƒ¼ãƒ“ã‚¹ã¨è‡ªã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’é€£æºã™ã‚‹ãŸã‚ã®æŠ€è¡“ã§ã™ã€‚ ã€Œã‚¯ãƒ©ã‚¦ãƒ‰ã€ã€Œã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã€ã¨ã„ã†ã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰ãŒå«ã°ã‚Œã¦ã„ã‚‹æ˜¨ä»Šã§ã¯ã€ã“ã†ã„ã£ãŸé€£æºã‚’ã„ã‹ã«ã†ã¾ãè¡Œã†ã‹ã¨ã„ã†ã“ã¨ãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ä½“é¨“ã‚’å‘ä¸Šã•ã›ã‚‹éµã¨ãªã‚Šã¾ã™ã€‚ ç‰¹ã«ã€Œã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã€ã‚’å–ã‚Šå…¥ã‚Œã‚‹ã“ã¨ã¯ä»¥ä¸‹ã®ã‚ˆã†ãªç‚¹ã§ãƒ¡ãƒªãƒƒãƒˆãŒã‚ã‚‹ã¨è€ƒãˆã‚‰ã‚Œã¾ã™ã€‚ ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚°ãƒ©ãƒ•ã‚’æ´»ç”¨ã—ã¦ã€ã‚¢ãƒ—ãƒªã‚’ãƒã‚¤ãƒ©ãƒ«ãƒ»ãƒžãƒ¼ã‚±ãƒ†ã‚£ãƒ³ã‚°ã§ãã‚‹ ç¾å®Ÿã®äººé–“é–¢ä¿‚ã‚’ãƒ™ãƒ¼ã‚¹ã«ã—ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ä½“é¨“ï¼ˆUXï¼‰ã‚’æä¾›ã—ã€ç¶™ç¶šçš„ã«ã‚¢ãƒ—ãƒªã‚’ä½¿ã£
teckl 2012/12/20
oauth

2.0

mixi

oauth2.0
ãƒªãƒ³ã‚¯
The OAuth 2.0 Protocol
The OAuth 2.0 Protocol draft-ietf-oauth-v2-10 Abstract ã“ã‚Œã¯OAuth 2.0ãƒ—ãƒãƒˆã‚³ãƒ«ã®ä»•æ§˜æ›¸ã§ã‚ã‚‹. Status of this Memo This Internet-Draft is submitted in full conformance with the provisions of BCPÂ 78 and BCPÂ 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is
teckl 2012/12/12
ãŠãŠã€æ—¥æœ¬èªžè¨³ãŒ

oauth

oauth2

reference

document
ãƒªãƒ³ã‚¯
Oauth 2.0 server side best practice
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
teckl 2012/12/12
oauth

oauth2

security

server
ãƒªãƒ³ã‚¯
OAuth 2.0 Implicit Flowã‚’ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ã«åˆ©ç”¨ã™ã‚‹éš›ã®ãƒªã‚¹ã‚¯ã¨å¯¾ç–æ–¹æ³•ã«ã¤ã„ã¦ #idcon - r-weblife
ãŠã¯ã‚ˆã†ã”ã–ã„ã¾ã™ã€ritouã§ã™ã€‚ ä»Šå›žã¯ã€ä¸€éƒ¨ã§å…ˆé€±è©±é¡Œãªã‚Šã¾ã—ãŸOAuth 2.0ã®Implicit Flowã«ã¤ã„ã¦ã®ã‚¨ãƒ³ãƒˆãƒªã«ãªã‚Šã¾ã™ã€‚ (2012/2/7 ã„ã‚ã„ã‚ã¨ä¿®æ£ã—ã¾ã—ãŸã€‚) å˜ãªã‚‹ OAuth 2.0 ã‚’èªè¨¼ã«ä½¿ã†ã¨ã€è»ŠãŒé€šã‚Œã‚‹ã»ã©ã®ã©ã§ã‹ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ãƒ»ãƒ›ãƒ¼ãƒ«ãŒã§ãã‚‹ | @_Nat Zone Thread Safe: The probl em with OAuth for Authentication. ä»Šå›žã¯ä»¥ä¸‹ã®å†…å®¹ã«ã¤ã„ã¦æ•´ç†ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ OAuth 2.0ã®ã©ã®æ©Ÿèƒ½ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ãŒã‚ã‚‹ã®ã‹ èª°ãŒæ”»æ’ƒè€…ã«ãªã‚Œã‚‹ã®ã‹ å¯¾ç– OAuth 2.0 Implicit Flowã¨ã¯ OAuth 2.0ã§ã¯ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ãƒ¼ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒä¿è·ãƒªã‚½ãƒ¼ã‚¹ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©é™ã‚’å¾—ã‚‹ãŸã‚ã®ã„ãã¤ã‹ã®ãƒ•ãƒãƒ¼ãŒå®šç¾©ã•ã‚Œã¦ã„ã¾ã™ã€‚ (ä»•æ§˜ä¸ã§ã¯Flowã‚„Grant Type
teckl 2012/12/11
oauth

security

openid

oauth2
ãƒªãƒ³ã‚¯
ã€ŒOAuthã€ã®åŸºæœ¬å‹•ä½œã‚’çŸ¥ã‚‹
ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã®ä¸–ç•Œã¸ã‚ˆã†ã“ã ã¯ã˜ã‚ã¾ã—ã¦ã€OpenID Foundation Japanã§ã‚¨ãƒãƒ³ã‚¸ã‚§ãƒªã‚¹ãƒˆã‚’ã—ã¦ã„ã‚‹Novã§ã™ã€‚ ã“ã®é€£è¼‰ã§ã¯ã€åƒ•ã‚’å«ã‚OpenID Foundation Japanã«ã‹ã‹ã‚ã‚‹ãƒ¡ãƒ³ãƒãƒ¼ã§ã€OpenID Connectã‚„OAuthãªã©ã®ã€Œãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ï¼ˆDigital Identityï¼‰ã€ã«ã‹ã‹ã‚ã‚‹æŠ€è¡“ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¦ã„ãã¾ã™ã€‚ APIã‚¨ã‚³ãƒŽãƒŸãƒ¼æ™‚ä»£ã®ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ ä¸–ç•Œä¸ã§9å„„äººã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’æŠ±ãˆã‚‹ã€ŒFacebookã€ã‚„5å„„äººã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’æŒã¤ã€ŒTwitterã€ãªã©ã€å·¨å¤§ãªã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚°ãƒ©ãƒ•ã‚’æŒã¤ã‚µãƒ¼ãƒ“ã‚¹ãŒã€æ—¥ã€…ãã®å˜åœ¨æ„Ÿã‚’å¢—ã—ã¦ã„ã¾ã™ã€‚æ—¥æœ¬ã§ã‚‚ã€ã‚°ãƒªãƒ¼ã‚„ãƒ¢ãƒã‚²ãƒ¼ãªã©ãŒãã‚Œãžã‚Œã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚²ãƒ¼ãƒ ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã‚’å…¬é–‹ã—ã€å›½å†…ã«ä¸€æ°—ã«å·¨å¤§ãªã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚²ãƒ¼ãƒ å¸‚å ´ã‚’ä½œã‚Šä¸Šã’ã¾ã—ãŸã€‚æœ€è¿‘ã§ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼æ•°ãŒ5000ä¸‡äººã‚’çªç ´ã—ã€ãƒ—ãƒ©ãƒƒãƒˆ
teckl 2012/12/11
oauth

openid
ãƒªãƒ³ã‚¯
Twitterã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŒãƒãƒƒã‚¯ã•ã‚ŒãŸäººãŒå¤–éƒ¨ã‚¢ãƒ—ãƒªã®ä½œè€…ã«ã‚µãƒ¼ãƒ“ã‚¹ã®å…¨åœæ¢ã‚’è¦æ±‚
ã¨ã‚ã‚‹Twitterã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŒãƒãƒƒã‚¯ã•ã‚Œã‚‹(ï¼Ÿï¼‰ â†“ Tweetã‚’ä¸€æ°—ã«æ¶ˆã™ã‚¢ãƒ—ãƒªã€Œé»’æ´å²ã‚¯ãƒªãƒ¼ãƒŠãƒ¼ã€ã®oauthèªè¨¼ãŒå‹æ‰‹ã«ã•ã‚Œã‚‹ â†“ ãƒãƒƒã‚¯ã•ã‚ŒãŸäººã®TweetãŒæ¶ˆãˆã¦ã—ã¾ã£ãŸ ç¶šãã‚’èªã‚€
teckl 2012/07/20
ä¹…ã€…ã®é¦™ã°ã—ã•ã«çœ ã‚Œãªããªã£ã¦ã—ã¾ã£ãŸâ€¦

twitter

oauth

togetter
ãƒªãƒ³ã‚¯
å˜ãªã‚‹ OAuth 2.0 ã‚’èªè¨¼ã«ä½¿ã†ã¨ã€è»ŠãŒé€šã‚Œã‚‹ã»ã©ã®ã©ã§ã‹ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ãƒ»ãƒ›ãƒ¼ãƒ«ãŒã§ãã‚‹
In some of the feedback I have gotten on the openID Connect spec, the statement is made that Connect is too complicated. That OAuth 2.0 is all you need to do authentication. Many point to Identity Proâ€¦ è‹±èªžèªã¿ãŸããªã„ã¨ã„ã†äººã®ãŸã‚ã«ç°¡å˜ã«è§£èª¬ã™ã‚‹ã¨â€¦ OAuth 2.0 ã® implicit flow ã‚’ä½¿ã£ã¦ã€Œèªè¨¼ã€ã‚’ã—ã‚ˆã†ã¨ã™ã‚‹ã¨ã€ã¨ã£ã¦ã‚‚å¤§ããªç©´ãŒé–‹ãã¾ã™ã€‚ ã‚«ãƒƒãƒˆï¼†ãƒšãƒ¼ã‚¹ãƒˆã‚¢ã‚¿ãƒƒã‚¯ãŒå¯èƒ½ã ã‹ã‚‰ã§ã™ã€‚ OAuth èªè¨¼ï¼Ÿã¯ã€å›³ï¼‘ã®ã‚ˆã†ãªæµã‚Œã«ãªã‚Šã¾ã™ã€‚ å›³ï¼‘ OAuth èªè¨¼ï¼Ÿã®æµã‚Œ ä¸€è¦‹ã€å•é¡Œãªã•ãã†ã«è¦‹ãˆã¾ã™ã€‚ã—ã‹ã—ã€ãã‚Œã¯ã™ã¹ã¦ã®ã‚µã‚¤ãƒˆãŒã€Œè‰¯ã„ã‚µã‚¤ãƒˆã€ãªã‚‰ã°ã§ã™ã€‚ Site_A
teckl 2012/02/03
å¾Œã»ã©èªã‚€

security

oauth

openid
ãƒªãƒ³ã‚¯
1