Openid & Oauth: An Introduction

Loading...

Flash Player 9 (or above) is needed to view presentations.
We have detected that you do not have it on your computer. To install it, go here.

2 comments

Comments 1 - 2 of 2 previous next Post a comment

Post a comment
Embed Video
Edit your comment Cancel

9 Favorites & 2 Groups

Openid & Oauth: An Introduction - Presentation Transcript

  1. OpenID & Oauth Open Standards for Authentication and Authorization (An introduction)
  2. The Open Web
    • Unencumbered, Cross-Platform Standards
    • Open Source / Free Software Implementations
    • No Single-Vendor "Lock-In”
    • Distributed Extensibility
    http://developer.mozilla.org/presentations/sxsw2007/the_open_web/
  3. OpenID is…
    • Lightweight
    • Distributed
    • User-Centric (not Site-Centric)
  4. OpenID is also…
    • Built on web standards
    • DNS/HTTP/SSL
    • Diffie-Hellman (PKI)
  5. History
    • 2005: Developed by Brad Fitzpatrick, Creator of LiveJournal
    • 2006: Delegation, XRI support, extensions: OpenID 2.0
    • 2007: OpenID Foundation
    • 2008: More than 13,000 Consuming Sites
    http://en.wikipedia.org/wiki/OpenID#History
  6. OpenID In The Wild
  7. A Solution For…
    • Maintaining Usernames
    • Password Overload (insecurity)
    • Site-centric Identity
  8. Basics
    • An OpenID is a URL
      • http://redmonk.net
    • Provider
      • http://myopenid.com
    • Relying Parties
    • Delegation
      • http://redmonk.myopenid.com
  9. The Dance (Conversation)
  10. DEMO
    • LiveJournal User
    • Ma.gnolia
    • One-Time Authentication
    • Persistent Authentication
  11. The “Open” in OpenID
    • Delegation support is required
    • <link rel=“openid.delegate” />
    • Multiple accounts, multiple Providers
    • No Lock-in
  12. Q & A
  13. Oauth is…
    • “ OAuth is like a valet key for all your web services .  A valet key lets you give a valet the ability to park your car, but not the ability to get into the trunk or drive more than 2 miles or redline the RPMs on your high end German automobile.  In the same way, an OAuth key lets you give a web agent the ability to check your web mail but NOT the ability to pretend to be you and send mail to everybody in your address book.”
    • http://journals.aol.com/panzerjohn/abstractioneer/entries/2007/09/21/oauth-your-valet-key-for-the-web/1550
  14. Authentication
    • Similar to:
    • AuthSub (Google)
    • BBAuth (Yahoo)
    • Flickr Auth
    • OpenAuth (AOL)
  15. API Level
    • Application To Application
    • “ Agency”
  16. Basics
    • User
    • Service Provider
    • Consumer
    • Protected Resources
    • Tokens
    http://oauth.net/documentation/getting-started
  17. The Dance (Conversation)
    • (Developed from: http:// oauth.net/core/diagram.png )
  18. Who’s Supporting Oauth?
    • Google
    • FireEagle (Yahoo)
    • Ma.gnolia
    • Amazon
    • Flickr
    • Digg
    • And more…
  19. Q & A
  20. Sources
    • http://www.slideshare.net/daveman692/open-id-overview-seoul-july-2007
    • http://en.wikipedia.org/wiki/Diffie-Hellman_key_exchange
    • http://en.wikipedia.org/wiki/OpenID#History
    • http://wiki.openid.net/
    • http://openid.net
    • http://oauth.net
    • http://journals.aol.com/panzerjohn/abstractioneer/entries/2007/09/21/oauth-your-valet-key-for-the-web/1550
    • http://oauth.net/core/diagram.png
    • http://www.slideshare.net/leahculver/oauth-open-api-authentication
    • http://www.slideshare.net/daveman692/open-platforms-in-web-20
  21. Your Host
    • Steve Ivy
    • [email_address]
    • Open Standards, Open Source Agitator
    • http://redmonk.net/
  22.  

+ Steve IvySteve Ivy, 2 years ago

custom

3905 views, 9 favs, 3 embeds more stats

Open Standards for Authentication and Authorizatio more

More info about this document

CC Attribution-NonCommercial-NoDerivs LicenseCC Attribution-NonCommercial-NoDerivs LicenseCC Attribution-NonCommercial-NoDerivs License

Go to text version

  • Total Views 3905
    • 3818 on SlideShare
    • 87 from embeds
  • Comments 2
  • Favorites 9
  • Downloads 82
Most viewed embeds
  • 50 views on http://redmonk.net
  • 33 views on https://intranet.optaros.com
  • 4 views on http://pierrebsas.blogspot.com

more

All embeds
  • 50 views on http://redmonk.net
  • 33 views on https://intranet.optaros.com
  • 4 views on http://pierrebsas.blogspot.com

less

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate. If needed, use the feedback form to let us know more details.

Cancel
File a copyright complaint
Having problems? Go to our helpdesk?

Categories

Groups / Events