Slideshow Transcript

1. Slide 1: OpenID & Oauth Open Standards for Authentication and Authorization (An introduction)
2. Slide 2: The Open Web • Unencumbered, Cross-Platform Standards • Open Source / Free Software Implementations • No Single-Vendor \"Lock-In” • Distributed Extensibility http://developer.mozilla.org/presentations/sxsw2007/the_open_web/
3. Slide 3: OpenID is… • Lightweight • Distributed • User-Centric (not Site-Centric)
4. Slide 4: OpenID is also… Built on web standards DNS/HTTP/SSL Diffie-Hellman (PKI)
5. Slide 5: History 2005: Developed by Brad Fitzpatrick, Creator of LiveJournal 2006: Delegation, XRI support, extensions: OpenID 2.0 2007: OpenID Foundation 2008: More than 13,000 Consuming Sites http://en.wikipedia.org/wiki/OpenID#History
6. Slide 6: OpenID In The Wild
7. Slide 7: A Solution For… • Maintaining Usernames • Password Overload (insecurity) • Site-centric Identity
8. Slide 8: Basics • An OpenID is a URL – http://redmonk.net • Provider – http://myopenid.com • Relying Parties • Delegation – http://redmonk.myopenid.com
9. Slide 9: The Dance (Conversation)
10. Slide 10: DEMO • LiveJournal User • Ma.gnolia • One-Time Authentication • Persistent Authentication
11. Slide 11: The “Open” in OpenID • Delegation support is required <link rel=“openid.delegate” /> • Multiple accounts, multiple Providers • No Lock-in
12. Slide 12: Q&A
13. Slide 13: Oauth is… “OAuth is like a valet key for all your web services. A valet key lets you give a valet the ability to park your car, but not the ability to get into the trunk or drive more than 2 miles or redline the RPMs on your high end German automobile. In the same way, an OAuth key lets you give a web agent the ability to check your web mail but NOT the ability to pretend to be you and send mail to everybody in your address book.” http://journals.aol.com/panzerjohn/abstractioneer/entries/2007/09/21/oauth-your-
14. Slide 14: Authentication Similar to: • AuthSub (Google) • BBAuth (Yahoo) • Flickr Auth • OpenAuth (AOL)
15. Slide 15: API Level • Application To Application • “Agency”
16. Slide 16: Basics • User • Service Provider • Consumer • Protected Resources • Tokens http://oauth.net/documentation/getting-started
17. Slide 17: The Dance (Conversation) (Developed from: http://oauth.net/core/diagram.png)
18. Slide 18: Who’s Supporting Oauth? Google FireEagle (Yahoo) Ma.gnolia Amazon Flickr Digg And more…
19. Slide 19: Q&A
20. Slide 20: Sources http://www.slideshare.net/daveman692/open-id-overview-seoul-july-2007 http://en.wikipedia.org/wiki/Diffie-Hellman_key_exchange http://en.wikipedia.org/wiki/OpenID#History http://wiki.openid.net/ http://openid.net http://oauth.net http://journals.aol.com/panzerjohn/abstractioneer/entries/2007/09/21/oauth-your-valet-key-fo http://oauth.net/core/diagram.png http://www.slideshare.net/leahculver/oauth-open-api-authentication http://www.slideshare.net/daveman692/open-platforms-in-web-20
21. Slide 21: Your Host Steve Ivy steveivy@gmail.com Open Standards, Open Source Agitator http://redmonk.net/