[B! oauth] teruki_miyazakiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

teruki_miyazaki id:teruki_miyazaki

oauthã«é–¢ã™ã‚‹teruki_miyazakiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

OAuth 2.0ã‚’ä½¿ã†ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãªAndroidã‚¢ãƒ—ãƒªã®ä½œã‚Šæ–¹ ï¼ˆ1/3ï¼‰ - ï¼ IT
ãƒã‚¤ãƒ†ã‚£ãƒ–ã‚¢ãƒ—ãƒªã§å®Ÿè·µï¼ mixi Graph APIæ´»ç”¨æ³• OAuth 2.0ã‚’ä½¿ã† ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãªAndroidã‚¢ãƒ—ãƒªã®ä½œã‚Šæ–¹ æ ªå¼ä¼šç¤¾ãƒŸã‚¯ã‚·ã‚£ ã‚·ã‚¹ãƒ†ãƒ æœ¬éƒ¨ æŠ€è¡“éƒ¨ ãŸã‚“ã½ã½ã‚°ãƒ«ãƒ¼ãƒ— è—¤å´Ž å‹æ¨¹ ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã‚µãƒ¼ãƒ“ã‚¹é–‹ç™ºéƒ¨ é¶´åŽŸ ç¿”å¤¢ 2011/3/30 æœ€è¿‘ã‚ˆãè€³ã«ã™ã‚‹ã€ŒOAuthã€ã¨ã¯ã€mixiã€Facebookã€Twitterãªã©ã®å¤–éƒ¨ã‚µãƒ¼ãƒ“ã‚¹ã¨è‡ªã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’é€£æºã™ã‚‹ãŸã‚ã®æŠ€è¡“ã§ã™ã€‚ ã€Œã‚¯ãƒ©ã‚¦ãƒ‰ã€ã€Œã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã€ã¨ã„ã†ã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰ãŒå«ã°ã‚Œã¦ã„ã‚‹æ˜¨ä»Šã§ã¯ã€ã“ã†ã„ã£ãŸé€£æºã‚’ã„ã‹ã«ã†ã¾ãè¡Œã†ã‹ã¨ã„ã†ã“ã¨ãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ä½“é¨“ã‚’å‘ä¸Šã•ã›ã‚‹éµã¨ãªã‚Šã¾ã™ã€‚ ç‰¹ã«ã€Œã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã€ã‚’å–ã‚Šå…¥ã‚Œã‚‹ã“ã¨ã¯ä»¥ä¸‹ã®ã‚ˆã†ãªç‚¹ã§ãƒ¡ãƒªãƒƒãƒˆãŒã‚ã‚‹ã¨è€ƒãˆã‚‰ã‚Œã¾ã™ã€‚ ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚°ãƒ©ãƒ•ã‚’æ´»ç”¨ã—ã¦ã€ã‚¢ãƒ—ãƒªã‚’ãƒã‚¤ãƒ©ãƒ«ãƒ»ãƒžãƒ¼ã‚±ãƒ†ã‚£ãƒ³ã‚°ã§ãã‚‹ ç¾å®Ÿã®äººé–“é–¢ä¿‚ã‚’ãƒ™ãƒ¼ã‚¹ã«ã—ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ä½“é¨“ï¼ˆUXï¼‰ã‚’æä¾›ã—ã€ç¶™ç¶šçš„ã«ã‚¢ãƒ—ãƒªã‚’ä½¿ã£
teruki_miyazaki 2012/02/23
oauth

android
ãƒªãƒ³ã‚¯
OAuth 2.0ã§Webã‚µãƒ¼ãƒ“ã‚¹ã®åˆ©ç”¨æ–¹æ³•ã¯ã©ã†å¤‰ã‚ã‚‹ã‹ï¼ˆ1/3ï¼‰- ï¼ IT
OAuth 2.0ã§ Webã‚µãƒ¼ãƒ“ã‚¹ã®åˆ©ç”¨æ–¹æ³•ã¯ã©ã†å¤‰ã‚ã‚‹ã‹ ã‚½ãƒ¼ã‚·ãƒ£ãƒ«APIæ´»ç”¨ã«å¿…é ˆã®â€œOAuthâ€ã®åŸºç¤ŽçŸ¥è˜ æ ªå¼ä¼šç¤¾ãƒ“ãƒ¼ã‚³ãƒ³IT æœ¨æ‘ç¯¤å½¦ 2011/2/2 TwitterãŒOAuth 1.0ã‚’æŽ¡ç”¨ã—ãŸã®ã‚’çš®åˆ‡ã‚Šã«ã€ä»Šã§ã¯å¤šãã®ã‚µãƒ¼ãƒ“ã‚¹ãŒOAuth 1.0ã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚å›½å†…ã§ã‚‚ã€ä¾‹ãˆã°ã€ãƒžã‚¤ã‚¯ãƒãƒ–ãƒã‚°åž‹ã‚³ãƒ©ãƒœãƒ„ãƒ¼ãƒ«ã€ŒyouRoomã€ã€å°è¦æ¨¡ã‚°ãƒ«ãƒ¼ãƒ—å‘ã‘ã‚°ãƒ«ãƒ¼ãƒ—ã‚¦ã‚§ã‚¢ã€Œã‚µã‚¤ãƒœã‚¦ã‚ºLiveã€ã€ã€Œã¯ã¦ãªã€ã®ã„ãã¤ã‹ã®ã‚µãƒ¼ãƒ“ã‚¹ã€ã€ŒYahoo!ã‚ªãƒ¼ã‚¯ã‚·ãƒ§ãƒ³ã€ã€ãƒªã‚¢ãƒ«ã‚¿ã‚¤ãƒ ãƒ‰ãƒãƒ¼ãƒ„ãƒ¼ãƒ«ã€ŒCacooã€ãªã©ãŒOAuth 1.0ã«å¯¾å¿œã—ãŸAPIã‚’å…¬é–‹ã—ã¦ã„ã¾ã™ã€‚ ã“ã“æ•°å¹´ã§OAuthã¯ã•ã¾ã–ã¾ãªWebã‚µãƒ¼ãƒ“ã‚¹ã®ãƒªã‚½ãƒ¼ã‚¹ã‚’åˆ©ç”¨ã™ã‚‹éš›ã®èªè¨¼æ–¹å¼ã¨ã—ã¦æ™®åŠã—ã¦ãã¾ã—ãŸã€‚ã“ã‚Œã¯å¤§ããªãƒ—ãƒ¬ãƒ¼ãƒ¤ãƒ¼ãŒã‚µãƒãƒ¼ãƒˆã—ãŸã“ã¨ã‚‚ä¸€å› ã§ã™ãŒã€OAuthã®æŒã¤ä»¥ä¸‹ã®2ã¤ã®ç‰¹å¾´ã«ã‚ˆã£ã¦ã€ã€ŒOAuthã‚’ä½¿ã†ã¨ã€ã‚µãƒ¼ãƒ“ã‚¹ãƒ—ãƒãƒã‚¤
teruki_miyazaki 2012/02/23
OAuth

OAuth2.0
ãƒªãƒ³ã‚¯
OAuth.jp
ã„ã¾ã¾ã§ Mix-up Attack ã¯ Client ãŒ AS æ¯Žã« redirect_uri ã‚’ä½¿ã„åˆ†ã‘ã¦ã„ã‚Œã°é˜²ã’ã‚‹ã¨ä¿¡ã˜ã‚‰ã‚Œã¦ãã¾ã—ãŸãŒã€ãã‚Œã˜ã‚ƒé˜²ã’ãªã„ã‚±ãƒ¼ã‚¹ã‚‚ã‚ã‚‹ã‚ˆã£ã¦ã®ãŒ OAuth ML ã«æŠ•ç¨¿ã•ã‚Œã¾ã—ãŸã€‚ ç´°ã‹ã„è§£èª¬ã¯è‹±èªžèªã‚“ã§ã‚‚ã‚‰ã†ã¨ã—ã¦ã€ã‚·ãƒ¼ã‚±ãƒ³ã‚¹ã«ã™ã‚‹ã¨ã“ã†ã„ã†ã“ã¨ã§ã™ã€‚ Attacker AS ãŒ (Display Name ã‚„ãƒã‚´ç‰ã‚’é€šã˜ã¦) ä¸€è¦‹ Honest Client ã«è¦‹ãˆã‚‹ã‚ˆã†ãª Client (Attacker Client) ã‚’ Honest AS ã«ç™»éŒ²ã—ã¦ãŠãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ User ãŒ Attacker AS é¸ã‚“ã§ã‚‹ã®ã« Honest AS ã«é£›ã‚“ã§ Approve ã—ã¦ã—ã¾ã£ã¦ã‚‹éƒ¨åˆ†ã‚‚ã€Attacker Proxy ãŒåˆ©ç”¨å¯èƒ½ãªçŠ¶æ³ (e.g., Client ãŒ HTTP ãªã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆã§ Honest AS ã®ãƒã‚°ã‚¤ãƒ³ãƒœã‚¿ãƒ³ç‰ã‚’
teruki_miyazaki 2012/02/23
oauth
ãƒªãƒ³ã‚¯
ç¬¬4å›žã€€OAuth Service Providerã®å®Ÿè£… | gihyo.jp
æœ€çµ‚å›žã¨ãªã‚‹ä»Šå›žã¯ã€OAuth Service Providerã®å®Ÿè£…æ–¹æ³•ã«ã¤ã„ã¦ã€æ‰‹é †ã‚’è¿½ã£ã¦è§£èª¬ã—ã¾ã™ã€‚ OAuth Service ProviderãŒã™ã¹ãã“ã¨ OAuthé€£è¼‰æœ€çµ‚å›žã¯ã€OAuth Service Providerã®å®Ÿè£…ã‚’è¡Œã„ã¾ã™ã€‚Service Providerã®å½¹å‰²ã¯ã€å¤§ããä»¥ä¸‹ã®3ã¤ã«åˆ†ã‘ã‚‰ã‚Œã¾ã™ã€‚ OAuth Consumerã®ç®¡ç† OAuth Request / Access Tokenã®ç®¡ç† OAuthçµŒç”±ã®ãƒªã‚½ãƒ¼ã‚¹ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ç®¡ç† Rails OAuth Pluginã‚’ç”¨ã„ãŸOAuth Service Providerã®å®Ÿè£… Railsã§ã¯ruby-oauth gemã¨OAuth Pluginã‚’ç”¨ã„ã‚‹ã“ã¨ã§ã€ç°¡å˜ã«OAuth Service Providerã‚’å®Ÿè£…ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ä»¥ä¸‹å®Ÿè£…æ‰‹é †ã§ã™ã€‚ ruby-oauth gemã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ï¼ˆã¾ã ã®å ´
teruki_miyazaki 2012/02/23
oauth

ruby

rails
ãƒªãƒ³ã‚¯
1

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (5)

oauthã«é–¢ã™ã‚‹teruki_miyazakiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬4é€±ï¼‰

ã€Œã‚ã¨ã§èªã‚€ã€ã‚¿ã‚°ã§æŒ¯ã‚Šè¿”ã‚‹2024å¹´ ã€œä»Šå¹´ã®ã€Œã‚ã¨ã§èªã‚€ã€ã€ä»Šå¹´ã®ã†ã¡ã«ã€œ

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬3é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (5)

oauthã«é–¢ã™ã‚‹teruki_miyazakiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

OAuth 2.0ã‚’ä½¿ã†ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãªAndroidã‚¢ãƒ—ãƒªã®ä½œã‚Šæ–¹ ï¼ˆ1/3ï¼‰ - ï¼ IT

OAuth 2.0ã§Webã‚µãƒ¼ãƒ“ã‚¹ã®åˆ©ç”¨æ–¹æ³•ã¯ã©ã†å¤‰ã‚ã‚‹ã‹ï¼ˆ1/3ï¼‰- ï¼ IT

OAuth.jp

ç¬¬4å›žã€€OAuth Service Providerã®å®Ÿè£… | gihyo.jp

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬4é€±ï¼‰

ã€Œã‚ã¨ã§èª­ã‚€ã€ã‚¿ã‚°ã§æŒ¯ã‚Šè¿”ã‚‹2024å¹´ ã€œä»Šå¹´ã®ã€Œã‚ã¨ã§èª­ã‚€ã€ã€ä»Šå¹´ã®ã†ã¡ã«ã€œ

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬3é€±ï¼‰

å…¬å¼Twitter

ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (5)

oauthã«é–¢ã™ã‚‹teruki_miyazakiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

OAuth 2.0ã‚’ä½¿ã†ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãªAndroidã‚¢ãƒ—ãƒªã®ä½œã‚Šæ–¹ ï¼ˆ1/3ï¼‰ - ï¼ IT

OAuth 2.0ã§Webã‚µãƒ¼ãƒ“ã‚¹ã®åˆ©ç”¨æ–¹æ³•ã¯ã©ã†å¤‰ã‚ã‚‹ã‹ï¼ˆ1/3ï¼‰- ï¼ IT

ç¬¬4å›žã€€OAuth Service Providerã®å®Ÿè£… | gihyo.jp

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬4é€±ï¼‰

ã€Œã‚ã¨ã§èªã‚€ã€ã‚¿ã‚°ã§æŒ¯ã‚Šè¿”ã‚‹2024å¹´ ã€œä»Šå¹´ã®ã€Œã‚ã¨ã§èªã‚€ã€ã€ä»Šå¹´ã®ã†ã¡ã«ã€œ

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬3é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹