OAuth 2.0 #idit2012

•

1 gostou•1,025 visualizações

Nov Matake

Tecnologia Negócios

@nov

OpenID Foundation Japan Evangelist
OAuth.jp
Ruby Libraries
rack-oauth2
openid_connect
fb_graph

ID＆IT Management Conference 2012

Current Trend

Mobile Game Social

ID＆IT Management Conference 2012

Platform ♥ 3rd-party Developers

ID＆IT Management Conference 2012

API Integration

Access Control for APIs

ID＆IT Management Conference 2012

OAuth

No password sharing
Limited access lifetime
Expire a'er N weeks
Limited access scope
Status Update : OK
Read Inbox : NG

ID＆IT Management Conference 2012

OAuth 2.0 in Enterprize

ID＆IT Management Conference 2012

Authorization
Server
Authorize
Client Access
Access
Token
Resource
Server
Resource
Owner API
Client
Access

ID＆IT Management Conference 2012

Get Access Token

2 Response Types in Core
Code
Token
Extensions
Code + Token
and more..

ID＆IT Management Conference 2012

response_type = code
Resource Owner Client Authorization Server

Initiate

Require Approval

Approve

Code

Code
Access Token
ID＆IT Management Conference 2012

response_type = token
Resource Owner Client Authorization Server

Initiate

Require Approval

Approve

Access Token

ID＆IT Management Conference 2012

Response Type
Code Token
Secure Eﬃcient
2 HTTP request 1 HTTP request
Require Approval Both at once
Get Access Token

+ extensions
ID＆IT Management Conference 2012

♥
OpenID Connect
~ OpenID based on OAuth 2.0 ~
ID＆IT Management Conference 2012

So, why these matters?

ID＆IT Management Conference 2012

API Economy
ID＆IT Management Conference 2012

Applications
People
Streams
Access Control
Identity
Discovery
ID＆IT Management Conference 2012

デジタルアイデンティティ技術最新動向 - @IT

ID＆IT Management Conference 2012

twitter.com/nov

slideshare.net/matake

github.com/nov

openid-foundation-japan.github.com

ID＆IT Management Conference 2012

Mais conteúdo relacionado

Mais procurados

Single Sign On with OAuth and OpenIDGasperi Jerome

OpenID Connect: The new standard for connecting to your Customers, Partners, ...Salesforce Developers

Smart Card AuthenticationDan Usher

Enabling Web Apps For DoD Security via PKI/CAC Enablement (Forge.Mil case study)Richard Bullington-McGuire

Understanding OpenIDPrabath Siriwardena

CIS14: Consolidating Authorization for API and Web SSO using OpenID ConnectCloudIDSummit

Authorization The Missing Piece of the PuzzleNordic APIs

Integrated social solutions, the power and pitfalls of mashupsNordic APIs

Authentication & Authorization for Connected Mobile & Web Applications using ...Amazon Web Services

Securing online services by combining smart cards and web-based applicationsOlivier Potonniée

Mit 2014 introduction to open id connect and o-auth 2Justin Richer

Authentication and Identity with Amazon CognitoAmazon Web Services

Authentication through Claims-Based Authenticationijtsrd

Internet of Things presentationDeep Shah

OpenID Connect: An OverviewPat Patterson

OpenID Connect and Single Sign-On for BeginnersSalesforce Developers

Cloud Native Journey in Synchrony FinancialVMware Tanzu

Deep Dive on Amazon Cognito - DevDay Austin 2017Amazon Web Services

Stateless Auth using OAUTH2 & JWTMobiliya

Auth experience - vol 1.0Haggai Philip Zagury

Mais procurados (20)

Single Sign On with OAuth and OpenID

OpenID Connect: The new standard for connecting to your Customers, Partners, ...

Smart Card Authentication

Enabling Web Apps For DoD Security via PKI/CAC Enablement (Forge.Mil case study)

Understanding OpenID

CIS14: Consolidating Authorization for API and Web SSO using OpenID Connect

Authorization The Missing Piece of the Puzzle

Integrated social solutions, the power and pitfalls of mashups

Authentication & Authorization for Connected Mobile & Web Applications using ...

Securing online services by combining smart cards and web-based applications

Mit 2014 introduction to open id connect and o-auth 2

Authentication and Identity with Amazon Cognito

Authentication through Claims-Based Authentication

Internet of Things presentation

OpenID Connect: An Overview

OpenID Connect and Single Sign-On for Beginners

Cloud Native Journey in Synchrony Financial

Deep Dive on Amazon Cognito - DevDay Austin 2017

Stateless Auth using OAUTH2 & JWT

Auth experience - vol 1.0

Destaque

Whats wrong oauth_authnNov Matake

IIW 16th Report at #idconNov Matake

OAuth認証再考からのOpenID Connect #devloveNov Matake

池澤あやかと学ぼう！: はじめてのOAuthとOpenID Connect - JICS 2014Nov Matake

OPTiM StoreにおけるSCIM & OIDC活用事例 - ID&IT 2016Nov Matake

API提供におけるOAuthの役割 #apijpTatsuo Kudo

OpenID Connect 101 @ OpenID TechNight vol.11Nov Matake

デブサミ2017 【DevBooks】即売会サークル参加要項Developers Summit

デブサミ2017 公募セッション募集要項Developers Summit

Destaque (9)

Whats wrong oauth_authn

IIW 16th Report at #idcon

OAuth認証再考からのOpenID Connect #devlove

池澤あやかと学ぼう！: はじめてのOAuthとOpenID Connect - JICS 2014

OPTiM StoreにおけるSCIM & OIDC活用事例 - ID&IT 2016

API提供におけるOAuthの役割 #apijp

OpenID Connect 101 @ OpenID TechNight vol.11

デブサミ2017 【DevBooks】即売会サークル参加要項

デブサミ2017 公募セッション募集要項

Semelhante a OAuth 2.0 #idit2012

OAuth 2.0 Updates #technightNov Matake

OAuth 2.0 Updates #technight in OsakaNov Matake

[WSO2Con USA 2018] Identity APIs is the New BlackWSO2

CIS 2015 Extreme OAuth - Paul MeyerCloudIDSummit

[WSO2Con EU 2018] Identity APIs is the New BlackWSO2

2022 APIsecure_Why Assertion-based Access Token is preferred to Handle-based ...APIsecure_ Official

O auth2.0 20141003Syed Ali Raza

Enable Oauth2.0 with Sentinet API Management (Massimo Crippa @ BTUG Event)Codit

4. tmg 2010 e uag 2010Fabrizio Volpe

CIS14: Lean In: Enterprise Cloud IdentityCloudIDSummit

Who’s Knocking? Identity for APIs, Web and MobileNordic APIs

Enterprise Access Control Patterns for Rest and Web APIsCA API Management

Building an Effective Identity Management StrategyNetIQ

OAuth 101 & Secure APIs 2012 Cloud Identity SummitBrian Campbell

Open Source Identity ManagementRadovan Semancik

Synergies of Cloud Identity: Putting it All TogetherTwobo Technologies

Identity soupDavid Waite

API Security with OAuth2.0.Kellton Tech Solutions Ltd

Azure AD B2C An Introduction - DogFoodCon 2018Jeremy Gray

Microsoft Graph API Delegated PermissionsStefan Weber

Semelhante a OAuth 2.0 #idit2012 (20)

OAuth 2.0 Updates #technight

OAuth 2.0 Updates #technight in Osaka

[WSO2Con USA 2018] Identity APIs is the New Black

CIS 2015 Extreme OAuth - Paul Meyer

[WSO2Con EU 2018] Identity APIs is the New Black

2022 APIsecure_Why Assertion-based Access Token is preferred to Handle-based ...

O auth2.0 20141003

Enable Oauth2.0 with Sentinet API Management (Massimo Crippa @ BTUG Event)

4. tmg 2010 e uag 2010

CIS14: Lean In: Enterprise Cloud Identity

Who’s Knocking? Identity for APIs, Web and Mobile

Enterprise Access Control Patterns for Rest and Web APIs

Building an Effective Identity Management Strategy

OAuth 101 & Secure APIs 2012 Cloud Identity Summit

Open Source Identity Management

Synergies of Cloud Identity: Putting it All Together

Identity soup

API Security with OAuth2.0.

Azure AD B2C An Introduction - DogFoodCon 2018

Microsoft Graph API Delegated Permissions

Mais de Nov Matake

#idcon vol.29 - #fidcon WebAuthn, Next StageNov Matake

FedCM - OpenID TechNight vol.19Nov Matake

Safari (ITP) & Chrome (SameSite=Lax as default) が Federation に与える影響 - OpenID ...Nov Matake

FIDO @ LINE - #idcon vol.24Nov Matake

W3C Web Authentication - #idcon vol.24Nov Matake

NIST SP 800-63C - Federation and Assertions (FINAL)Nov Matake

NIST SP 800-63C #idcon vol.22Nov Matake

NIST SP 800-63-3 #idcon vol.22Nov Matake

ID連携入門 (実習編) - Security Camp 2016Nov Matake

ID連携概要 - OpenID TechNight vol.13Nov Matake

ミスコンとプライバシー ~ IdentityDuck誕生秘話 ~ #idconNov Matake

SAML / OpenID Connect / OAuth / SCIM 技術解説 - ID&IT 2014 #idit2014Nov Matake

FIDO alliance #idcon vol.18Nov Matake

ID & IT 2013 - OpenID Connect Hands-onNov Matake

JWT Translation #technightNov Matake

MIT-KIT Intro at #idcon satteliteNov Matake

Self isssued-idpNov Matake

Account Chooser #idit2012Nov Matake

諸外国の国民ID制度 #idcon 13thNov Matake

Mais de Nov Matake (20)

#idcon vol.29 - #fidcon WebAuthn, Next Stage

FedCM - OpenID TechNight vol.19

Safari (ITP) & Chrome (SameSite=Lax as default) が Federation に与える影響 - OpenID ...

FIDO @ LINE - #idcon vol.24

W3C Web Authentication - #idcon vol.24

NIST SP 800-63C - Federation and Assertions (FINAL)

NIST SP 800-63C #idcon vol.22

NIST SP 800-63-3 #idcon vol.22

ID連携入門 (実習編) - Security Camp 2016

ID連携概要 - OpenID TechNight vol.13

ミスコンとプライバシー ~ IdentityDuck誕生秘話 ~ #idcon

SAML / OpenID Connect / OAuth / SCIM 技術解説 - ID&IT 2014 #idit2014

FIDO alliance #idcon vol.18

ID & IT 2013 - OpenID Connect Hands-on

JWT Translation #technight

MIT-KIT Intro at #idcon sattelite

Self isssued-idp

Account Chooser #idit2012

諸外国の国民ID制度 #idcon 13th

Último

presentation ICT roal in 21st century educationjfdjdjcjdnsjd

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProduct Anonymous

08448380779 Call Girls In Diplomatic Enclave Women Seeking MenDelhi Call girls

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024The Digital Insurer

A Domino Admins Adventures (Engage 2024)Gabriella Davis

Axa Assurance Maroc - Insurer Innovation Award 2024The Digital Insurer

Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUK Journal

🐬 The future of MySQL is Postgres 🐘RTylerCroy

08448380779 Call Girls In Friends Colony Women Seeking MenDelhi Call girls

Strategies for Landing an Oracle DBA Job as a FresherRemote DBA Services

Artificial Intelligence: Facts and MythsJoaquim Jorge

Boost Fertility New Invention Ups Success Rates.pdfsudhanshuwaghmare1

Scaling API-first – The story of a global engineering organizationRadu Cotescu

2024: Domino Containers - The Next Step. News from the Domino Container commu...Martijn de Jong

08448380779 Call Girls In Greater Kailash - I Women Seeking MenDelhi Call girls

04-2024-HHUG-Sales-and-Marketing-Alignment.pptxHampshireHUG

Driving Behavioral Change for Information Management through Data-Driven Gree...Enterprise Knowledge

GenAI Risks & Security Meetup 01052024.pdflior mazor

[2024]Digital Global Overview Report 2024 Meltwater.pdfhans926745

Exploring the Future Potential of AI-Enabled Smartphone Processorsdebabhi2

OAuth 2.0 #idit2012

1. OAuth 2.0

2. @nov OpenID Foundation Japan Evangelist OAuth.jp Ruby Libraries rack-oauth2 openid_connect fb_graph ID＆IT Management Conference 2012

3. ID＆IT Management Conference 2012

4. Current Trend Mobile Game Social ID＆IT Management Conference 2012

5. Platform ♥ 3rd-party Developers ID＆IT Management Conference 2012

6. API Integration Access Control for APIs ID＆IT Management Conference 2012

7. OAuth No password sharing Limited access lifetime Expire a'er N weeks Limited access scope Status Update : OK Read Inbox : NG ID＆IT Management Conference 2012

8. OAuth 2.0 in Enterprize ID＆IT Management Conference 2012

9. ID＆IT Management Conference 2012

10. Authorization Server Authorize Client Access Access Token Resource Server Resource Owner API Client Access ID＆IT Management Conference 2012

11. Authorization Server Authorize Client Access Access Token Resource Server Resource Owner API Client Access ID＆IT Management Conference 2012

12. Authorization Server Authorize Client Access Access Token Resource Server Resource Owner API Client Access ID＆IT Management Conference 2012

13. Get Access Token 2 Response Types in Core Code Token Extensions Code + Token and more.. ID＆IT Management Conference 2012

14. response_type = code Resource Owner Client Authorization Server Initiate Require Approval Approve Code Code Access Token ID＆IT Management Conference 2012

15. response_type = token Resource Owner Client Authorization Server Initiate Require Approval Approve Access Token ID＆IT Management Conference 2012

16. Response Type Code Token Secure Eﬃcient 2 HTTP request 1 HTTP request Require Approval Both at once Get Access Token + extensions ID＆IT Management Conference 2012

17. ♥ OpenID Connect ~ OpenID based on OAuth 2.0 ~ ID＆IT Management Conference 2012

18. ID＆IT Management Conference 2012

19. So, why these matters? ID＆IT Management Conference 2012

20. Social ID＆IT Management Conference 2012

21. Cloud ID＆IT Management Conference 2012

22. API Economy ID＆IT Management Conference 2012

23. Applications People Streams Access Control Identity Discovery ID＆IT Management Conference 2012

24. デジタルアイデンティティ技術最新動向 - @IT ID＆IT Management Conference 2012

25. twitter.com/nov slideshare.net/matake github.com/nov openid-foundation-japan.github.com ID＆IT Management Conference 2012

OAuth 2.0 #idit2012

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Destaque

Destaque (9)

Semelhante a OAuth 2.0 #idit2012

Semelhante a OAuth 2.0 #idit2012 (20)

Mais de Nov Matake

Mais de Nov Matake (20)

Último

Último (20)

OAuth 2.0 #idit2012