Everything OAuth

Editor's Notes

4. Authorization - used most of the time Authentication - 2 legged OAuth, “sign in with twitter”, no to be confused with OpenID Built as an Open Protocol on top of already existing solutions (Amazon,Yahoo)
5. Blaine Cook from twitter, Chris Messina, David Recordon,Larry Halff from magnolia and others
6. RFC only published in April 2010
7. Authorization - used most of the time Authentication - 2 legged OAuth, “sign in with twitter”, no to be confused with OpenID Built as an Open Protocol on top of already existing solutions (Amazon,Yahoo)
8. Authorization - used most of the time Authentication - 2 legged OAuth, “sign in with twitter”, no to be confused with OpenID Built as an Open Protocol on top of already existing solutions (Amazon,Yahoo)
23. Example from twitter connections settings
24. Example from facebook where you can revoke apps and also individual permissions
25. Example from facebook where you can revoke apps and also individual permissions
34. Let’s see an example (next slide)
39. OOB = Out of Band aka PIN OAuth
51. Consumer sends along info about service provider and asks to verify credentials
53. OAuthpocalypse happened on August 31st 2010
56. Prevents man-in-the-middle attack
63. SAML: Security Assertion Markup Language