1. OAuth 2.0

2. @nov
OpenID Foundation Japan Evangelist
OAuth.jp
Ruby Libraries
rack-oauth2
openid_connect
fb_graph
ID＆IT Management Conference 2012

3. ID＆IT Management Conference 2012

4. Current Trend
Mobile Game Social
ID＆IT Management Conference 2012

5. Platform ♥ 3rd-party Developers
ID＆IT Management Conference 2012

6. API Integration
Access Control for APIs
ID＆IT Management Conference 2012

7. OAuth
No password sharing
Limited access lifetime
Expire a'er N weeks
Limited access scope
Status Update : OK
Read Inbox : NG
ID＆IT Management Conference 2012

8. OAuth 2.0 in Enterprize
ID＆IT Management Conference 2012

9. ID＆IT Management Conference 2012

10. Authorization
Server
Authorize
Client Access
Access
Token
Resource
Server
Resource
Owner API
Client
Access
ID＆IT Management Conference 2012

11. Authorization
Server
Authorize
Client Access
Access
Token
Resource
Server
Resource
Owner API
Client
Access
ID＆IT Management Conference 2012

12. Authorization
Server
Authorize
Client Access
Access
Token
Resource
Server
Resource
Owner API
Client
Access
ID＆IT Management Conference 2012

13. Get Access Token
2 Response Types in Core
Code
Token
Extensions
Code + Token
and more..
ID＆IT Management Conference 2012

14. response_type = code
Resource Owner Client Authorization Server
Initiate
Require Approval
Approve
Code
Code
Access Token
ID＆IT Management Conference 2012

15. response_type = token
Resource Owner Client Authorization Server
Initiate
Require Approval
Approve
Access Token
ID＆IT Management Conference 2012

16. Response Type
Code Token
Secure Efficient
2 HTTP request 1 HTTP request
Require Approval Both at once
Get Access Token
+ extensions
ID＆IT Management Conference 2012

17. ♥
OpenID Connect
~ OpenID based on OAuth 2.0 ~
ID＆IT Management Conference 2012

18. ID＆IT Management Conference 2012

19. So, why these matters?
ID＆IT Management Conference 2012

20. Social
ID＆IT Management Conference 2012

21. Cloud
ID＆IT Management Conference 2012

22. API Economy
ID＆IT Management Conference 2012

23. Applications
People
Streams
Access Control
Identity
Discovery
ID＆IT Management Conference 2012

24. デジタルアイデンティティ技術最新動向 - @IT
ID＆IT Management Conference 2012

25. twitter.com/nov
slideshare.net/matake
github.com/nov
openid-foundation-japan.github.com
ID＆IT Management Conference 2012