OAuth 2.0 & OpenID Connect #MA7

•

7 likes•3,000 views

This document discusses OAuth 2.0 and OpenID Connect for accessing APIs. It provides an overview of how OAuth 2.0 allows clients to obtain access tokens to access protected resources from an authorization server, including the steps to obtain an authorization code and exchange it for an access token. It then introduces OpenID Connect as an identity layer on top of OAuth 2.0 that provides authentication as well as authorization and allows clients to verify the identity of the resource owner. The document promotes OpenID Connect as an improvement over traditional OpenID that supports API access and a better user experience.

@nov

OpenID Foundation Japan Evangelist
OAuth.jp
Ruby Libraries
rack-oauth2
openid_connect
fb_graph

#MA7 Mashup Caravan & Meetup in Kyoto

Platform 3rd-party Developers

#MA7 Mashup Caravan & Meetup in Kyoto

API Integration

Access Control for APIs

#MA7 Mashup Caravan & Meetup in Kyoto

NG
#MA7 Mashup Caravan & Meetup in Kyoto

OAuth 1.0 OAuth 2.0

#MA7 Mashup Caravan & Meetup in Kyoto

OAuth 1.0 in Japanese
ju.mp/oauth1_ja

#MA7 Mashup Caravan & Meetup in Kyoto

Authorization
Server
Authorize
Client Access
Access
Token
Resource
Server
Resource
Owner API
Client
Access

#MA7 Mashup Caravan & Meetup in Kyoto

Get Access Token
Resource Owner Client Authorization Server

Initiate

Require Approval

Approve

Code

Code
Access Token
#MA7 Mashup Caravan & Meetup in Kyoto

Get Access Token
Resource Owner Client Authorization Server

client_id=...&
Initiate response_type=code&
redirect_uri=https://...&
scope=...
Require Approval

Approve

Code

Code
Access Token
#MA7 Mashup Caravan & Meetup in Kyoto

Get Access Token
Resource Owner Client Authorization Server

Initiate

Require Approval

code=...&
Approve client_id=...&
client_secret=...&
grant_type=authorization_code&
Code
redirect_uri=https://...

Code
Access Token
#MA7 Mashup Caravan & Meetup in Kyoto

Get Access Token
Resource Owner Client Authorization Server

Initiate

Require Approval

Approve

[NOTE] Facebook API returns access token in Code
x-www-form-urlencoded

Code
Access Token
#MA7 Mashup Caravan & Meetup in Kyoto

Access APIs

#MA7 Mashup Caravan & Meetup in Kyoto

OpenID is dead!?
Poor UX? URL as identiﬁer?
#MA7 Mashup Caravan & Meetup in Kyoto

Lack of API access!?
You need “stream access”, don’t you?
#MA7 Mashup Caravan & Meetup in Kyoto

OpenID Connect
~ OpenID based on OAuth 2.0 ~
#MA7 Mashup Caravan & Meetup in Kyoto

connect-rp.heroku.com

#MA7 Mashup Caravan & Meetup in Kyoto

ref.) slideshare.net/oid4/openidconnect-nat
#MA7 Mashup Caravan & Meetup in Kyoto

OpenID AsiaPac Technology Summit
in Tokyo, Japan December 1, 2011

#MA7 Mashup Caravan & Meetup in Kyoto

twitter.com/nov

slideshare.net/matake

github.com/nov

openid-foundation-japan.github.com

#MA7 Mashup Caravan & Meetup in Kyoto

John Bradley, Senior Technical Architect, Ping Identity OAuth 2.0 is the future of API Security, allowing software clients to request and use access tokens to access necessary APIs rather than caching and replaying usernames and passwords on every API fetch. John Bradley will explain the OAuth 2.0 protocol from top to bottom. Response types, authorization codes, front-channel vs. back-channel architecture decisions, security considerations and best practices will all be discussed. If you want to really understand OAuth, this session will dig deep.

Incorporating OAuth: How to integrate OAuth into your mobile app

Nordic APIs

OAuth Claims Ontology: Using Claims in OAuth and How They Relate to Scopes

Nordic APIs

In this presentation, Travis Spencer, CEO of Curity and expert in OAuth, will explain what claims are. He will demonstrate their useful, and show them in the context of the various actors and flows involved in an OAuth-based system. He will go on to explain how they related to the ever-confusing idea of scopes. His presentation will conclude with an explanation of how claims an be used to increase privacy, enhance security, improve UX, and serve in creating more fine-grained access control systems. Attendees will leave with a better understanding of what OAuth scopes are, the role of claims in API security, and how to authorize access using these concepts when building APIs.

個人情報保護法改正とビッグデータ利活用

Harumichi Yuasa

Introducing SAML 2.0 Protocol: Security and Performance

Amin Saqi

In this document we review the security and performance of the Security Assertion Markup Language (SAML) 2.0 protocol. SAML is an OASIS standard and defines a framework for exchanging security information between online business partners. It defines a common XML framework for exchanging security assertions between entities to define, enhance, and maintain a standard XML-based framework for creating and exchanging authentication and authorization information.

Dataporten intro (workshop with Difi)

Andreas Åkre Solberg

2016年にニューヨーク州金融サービス局（NYDFS）が提案した金融サービス企業に対するレギュレーションの日本語訳です。原文：http://www.dfs.ny.gov/legal/regulations/proposed/rp500t.pdf 本文は、2016年12月にパブリック・コメントを反映した修正版を翻訳しました。なお、訳者は翻訳・法律家の専門家ではなく、大体の意図を把握するために作成したので、利用については自己責任でご利用ください。

CIS14: An Overview of FIDO's Universal Factor (UAF) Specifications

CloudIDSummit

海外事例にみるヘルスデータ利活用とＩＴリスク管理

Eiji Sasahara, Ph.D., MBA 笹原英司

CIS14: Working with OAuth and OpenID Connect

CloudIDSummit

OpenID Connect - Nat Sakimura at OpenID TechNight #7OpenID Foundation Japan

Introduction to FIDO Authentication

FIDO Alliance

ビッグデータ時代の個人情報保護法改正のあり方

OpenID Foundation Japan

健康医療分野の海外サイバーセキュリティ最新動向

Eiji Sasahara, Ph.D., MBA 笹原英司

[LDAPCon 2015] The OpenID Connect Protocol

Clément OUDOT

OpenID Connect is a new Single Sign On protocol, built on top of OAuth 2.0. Led by OpenID foundation, he very different form OpenID 1.0 and OpenID 2.0, now marked as obsoletes. This paper will let you discover this new standard, by first explaining what is OAuth 2.0 and why it is not an identity protocol. Then the OpenID Connect protocol will be described, and to conclude, we will do a comparison with the other main SSO standard which is SAML.

『データ解析におけるプライバシー保護』勉強会

MITSUNARI Shigeo

医療分野におけるブロックチェーンの可能性と適用領域

Eiji Sasahara, Ph.D., MBA 笹原英司

医療分野のブロックチェーン利用とセキュリティ

Eiji Sasahara, Ph.D., MBA 笹原英司

CSA Japan Congress 2016 日時：2016年11月22日（火）03:25pm - 03:40pm 公演者：WGリーダー　笹原英司講演概要：金融以外の分野で、最もブロックチェーン活用が期待されているのが健康医療。概念実装（PoC）から、クラウドを利用したサービス構築、AIなど高度分析技術の導入へと進む中、直面するセキュリティ課題を考察します。

Google Case Study: Becoming Unphisable: Towards Simpler, Stronger Authenticat...

FIDO Alliance

OpenID Connect: An Overview

Pat Patterson

SAML / OpenID Connect / OAuth / SCIM 技術解説 - ID&IT 2014 #idit2014Nov Matake

Fido U2F Protocol by Ather Ali

OWASP Delhi

トランザクションの設計と進化

Kumazaki Hiroki

トランザクションをSerializableにする4つの方法

Kumazaki Hiroki

Introduction to SAML 2.0

Mika Koivisto

OAuth 2.0 & OpenID Connect @ OpenSource Conference 2011 Tokyo #osc11tkNov Matake

OAuth 2.0 Updates #technight

Nov Matake

OAuth 2.0 Updates #technight in OsakaNov Matake

Viewers also liked

ニューヨーク州金融サービス局　金融サービス企業に対するサイバーセキュリティ規制

Tomohisa Ishikawa, CISSP, CSSLP, CISA, CISM, CFE

CIS14: An Overview of FIDO's Universal Factor (UAF) Specifications

CloudIDSummit

海外事例にみるヘルスデータ利活用とＩＴリスク管理

Eiji Sasahara, Ph.D., MBA 笹原英司

CIS14: Working with OAuth and OpenID Connect

CloudIDSummit

OpenID Connect - Nat Sakimura at OpenID TechNight #7OpenID Foundation Japan

Introduction to FIDO Authentication

FIDO Alliance

ビッグデータ時代の個人情報保護法改正のあり方

OpenID Foundation Japan

健康医療分野の海外サイバーセキュリティ最新動向

Eiji Sasahara, Ph.D., MBA 笹原英司

[LDAPCon 2015] The OpenID Connect Protocol

Clément OUDOT

『データ解析におけるプライバシー保護』勉強会

MITSUNARI Shigeo

医療分野におけるブロックチェーンの可能性と適用領域

Eiji Sasahara, Ph.D., MBA 笹原英司

医療分野のブロックチェーン利用とセキュリティ

Eiji Sasahara, Ph.D., MBA 笹原英司

Google Case Study: Becoming Unphisable: Towards Simpler, Stronger Authenticat...

FIDO Alliance

OpenID Connect: An Overview

Pat Patterson

SAML / OpenID Connect / OAuth / SCIM 技術解説 - ID&IT 2014 #idit2014Nov Matake

Fido U2F Protocol by Ather Ali

OWASP Delhi

トランザクションの設計と進化

Kumazaki Hiroki

トランザクションをSerializableにする4つの方法

Kumazaki Hiroki

Introduction to SAML 2.0

Mika Koivisto

Viewers also liked (19)

ニューヨーク州金融サービス局　金融サービス企業に対するサイバーセキュリティ規制

CIS14: An Overview of FIDO's Universal Factor (UAF) Specifications

海外事例にみるヘルスデータ利活用とＩＴリスク管理

CIS14: Working with OAuth and OpenID Connect

OpenID Connect - Nat Sakimura at OpenID TechNight #7

Introduction to FIDO Authentication

ビッグデータ時代の個人情報保護法改正のあり方

健康医療分野の海外サイバーセキュリティ最新動向

[LDAPCon 2015] The OpenID Connect Protocol

『データ解析におけるプライバシー保護』勉強会

医療分野におけるブロックチェーンの可能性と適用領域

医療分野のブロックチェーン利用とセキュリティ

Google Case Study: Becoming Unphisable: Towards Simpler, Stronger Authenticat...

OpenID Connect: An Overview

SAML / OpenID Connect / OAuth / SCIM 技術解説 - ID&IT 2014 #idit2014

Fido U2F Protocol by Ather Ali

トランザクションの設計と進化

トランザクションをSerializableにする4つの方法

Introduction to SAML 2.0

Similar to OAuth 2.0 & OpenID Connect #MA7

OAuth 2.0 & OpenID Connect @ OpenSource Conference 2011 Tokyo #osc11tkNov Matake

OAuth 2.0 Updates #technight

Nov Matake

OAuth 2.0 Updates #technight in OsakaNov Matake

JHipster and Okta - JHipster Virtual Meetup December 2020

Matt Raible

YouTube video: https://www.youtube.com/watch?v=ym-OPn4e_nQ When I first started working at Okta, I refactored JHipster's OAuth support to move from authentication on the client to the server, leveraging Spring Security. This allowed for easier client integration since we didn't need to worry about finding an OIDC client for each frontend framework. Fast forward four years and JHipster's OAuth 2.0 and OIDC support is first-class! It uses Keycloak in a Docker container by default, but it's easy to switch to another identity provider (IdP) thanks to Spring Boot. Other blueprints like Micronaut, Quarkus, Node.js, and .NET support OAuth and OIDC too! This presentation explains what OAuth 2.0 and OIDC is, gives an overview of JHipster’s OAuth implementation, and provides three quick demos with Keycloak, the Okta CLI, and Heroku. See https://developer.okta.com/blog/tags/jhipster for Okta + JHipster tutorials and screencasts! 邏 You also might enjoy my What the Heck is OAuth? blog post: https://developer.okta.com/blog/2017/06/21/what-the-heck-is-oauth

OAuth using PHP5

Nurulazrad Murad

Enterprise Access Control Patterns for REST and Web APIs Gluecon 2011, Franco...

CA API Management

2022 APIsecure_Why Assertion-based Access Token is preferred to Handle-based ...

APIsecure_ Official

Why Assertion-based Access Token is preferred to Handle-based one?

Hitachi, Ltd. OSS Solution Center.

CIS 2015 Extreme OAuth - Paul Meyer

CloudIDSummit

OAuth 2.0 (RFC 6749/50) is a delegated authorization framework that makes requesting access for and authenticating as a client to an API as easy as getting a token and using a token. This session will explore the different OAuth flows in the spec as will as discuss extensions such as the JWT assertion flow and SAML bearer extension, and will also discuss security mitigations needed to use the protocol safely.

O auth2.0 guide

Dilip Mohapatra

Saas webinar-dec6-01Paul Madsen

What the Heck is OAuth and OIDC - UberConf 2018

Matt Raible

OAuth is not an API or a service: it is an open standard for authorization and any developer can implement it. OAuth is a standard that applications can use to provide client applications with “secure delegated access”. OAuth works over HTTPS and authorizes devices, APIs, servers, and applications with access tokens rather than credentials, which we will go over in depth below. OpenID Connect (OIDC) is built on top of the OAuth 2.0 protocol. It allows clients to verify the identity of the user and to obtain their basic profile information. This session covers how OAuth 2.0 and OIDC work, when to use them, and frameworks/services that simplify authentication. Blog: https://developer.okta.com/blog/2017/06/21/what-the-heck-is-oauth Online Tools: - https://oauth.com/playground - https://oauthdebugger.com - https://oidcdebugger.com Never Build Auth Again → https://developer.okta.com

Making Sense of API Access Control

CA API Management

Chief Architect Francois Lascelles presentation from Gluecon 2012. Are you ready to provide APIs that reach out to mobile applications, APIs that connect your applications to the cloud, APIs that connect your applications with your business partners? Recent trends and standards are creating a new generation of API-focused identity patterns. Learn how to: • Apply API access control patterns with existing identity infrastructure • Support emerging standards such as OAuth, Open ID Connect • Empower developers to create APIs that reach out to your organisation’s target audience

OAuth 2.0 #idit2012Nov Matake

Protecting your APIs with Doorkeeper and OAuth 2.0

Mads Toustrup-Lønne

Implementing OAuth

leahculver

Securing APIs with OAuth 2.0

Kai Hofstetter

OAuth 2.0 and Mobile Devices: Is that a token in your phone in your pocket or...

Brian Campbell

What the Heck is OAuth and OIDC - Denver Developer Identity Workshop 2020

Matt Raible

OAuth is not an API or a service: it is an open standard for authorization and any developer can implement it. OAuth is a standard that applications can use to provide client applications with “secure delegated access”. OAuth works over HTTPS and authorizes devices, APIs, servers, and applications with access tokens rather than credentials, which we will go over in-depth below. OpenID Connect (OIDC) is built on top of the OAuth 2.0 protocol. It allows clients to get the identity of the user and to obtain their basic profile information. This session covers how OAuth 2.0 and OIDC work, when to use them, and frameworks/services that simplify authentication. Blog: https://developer.okta.com/blog/2017/06/21/what-the-heck-is-oauth Online Tools: - https://oauth.com/playground - https://oauthdebugger.com - https://oidcdebugger.com Never Build Auth Again → https://developer.okta.com

RBAC in Azure Kubernetes Service AKS

Emad Alashi

Similar to OAuth 2.0 & OpenID Connect #MA7 (20)

OAuth 2.0 & OpenID Connect @ OpenSource Conference 2011 Tokyo #osc11tk

OAuth 2.0 Updates #technight

OAuth 2.0 Updates #technight in Osaka

JHipster and Okta - JHipster Virtual Meetup December 2020

OAuth using PHP5

Enterprise Access Control Patterns for REST and Web APIs Gluecon 2011, Franco...

2022 APIsecure_Why Assertion-based Access Token is preferred to Handle-based ...

Why Assertion-based Access Token is preferred to Handle-based one?

CIS 2015 Extreme OAuth - Paul Meyer

O auth2.0 guide

Saas webinar-dec6-01

What the Heck is OAuth and OIDC - UberConf 2018

Making Sense of API Access Control

OAuth 2.0 #idit2012

Protecting your APIs with Doorkeeper and OAuth 2.0

Implementing OAuth

Securing APIs with OAuth 2.0

OAuth 2.0 and Mobile Devices: Is that a token in your phone in your pocket or...

What the Heck is OAuth and OIDC - Denver Developer Identity Workshop 2020

RBAC in Azure Kubernetes Service AKS

Recently uploaded

The Metaverse and AI: how can decision-makers harness the Metaverse for their...

Jen Stirrup

The Metaverse is popularized in science fiction, and now it is becoming closer to being a part of our daily lives through the use of social media and shopping companies. How can businesses survive in a world where Artificial Intelligence is becoming the present as well as the future of technology, and how does the Metaverse fit into business strategy when futurist ideas are developing into reality at accelerated rates? How do we do this when our data isn't up to scratch? How can we move towards success with our data so we are set up for the Metaverse when it arrives? How can you help your company evolve, adapt, and succeed using Artificial Intelligence and the Metaverse to stay ahead of the competition? What are the potential issues, complications, and benefits that these technologies could bring to us and our organizations? In this session, Jen Stirrup will explain how to start thinking about these technologies as an organisation.

Generative AI Deep Dive: Advancing from Proof of Concept to Production

Aggregage

FIDO Alliance Osaka Seminar: Passkeys at Amazon.pdf

FIDO Alliance

zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs

Alex Pruden

This paper presents Reef, a system for generating publicly verifiable succinct non-interactive zero-knowledge proofs that a committed document matches or does not match a regular expression. We describe applications such as proving the strength of passwords, the provenance of email despite redactions, the validity of oblivious DNS queries, and the existence of mutations in DNA. Reef supports the Perl Compatible Regular Expression syntax, including wildcards, alternation, ranges, capture groups, Kleene star, negations, and lookarounds. Reef introduces a new type of automata, Skipping Alternating Finite Automata (SAFA), that skips irrelevant parts of a document when producing proofs without undermining soundness, and instantiates SAFA with a lookup argument. Our experimental evaluation confirms that Reef can generate proofs for documents with 32M characters; the proofs are small and cheap to verify (under a second). Paper: https://eprint.iacr.org/2023/1886

UiPath Test Automation using UiPath Test Suite series, part 4

DianaGray10

Welcome to UiPath Test Automation using UiPath Test Suite series part 4. In this session, we will cover Test Manager overview along with SAP heatmap. The UiPath Test Manager overview with SAP heatmap webinar offers a concise yet comprehensive exploration of the role of a Test Manager within SAP environments, coupled with the utilization of heatmaps for effective testing strategies. Participants will gain insights into the responsibilities, challenges, and best practices associated with test management in SAP projects. Additionally, the webinar delves into the significance of heatmaps as a visual aid for identifying testing priorities, areas of risk, and resource allocation within SAP landscapes. Through this session, attendees can expect to enhance their understanding of test management principles while learning practical approaches to optimize testing processes in SAP environments using heatmap visualization techniques What will you get from this session? 1. Insights into SAP testing best practices 2. Heatmap utilization for testing 3. Optimization of testing processes 4. Demo Topics covered: Execution from the test manager Orchestrator execution result Defect reporting SAP heatmap example with demo Speaker: Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP

Elevating Tactical DDD Patterns Through Object Calisthenics

Dorra BARTAGUIZ

After immersing yourself in the blue book and its red counterpart, attending DDD-focused conferences, and applying tactical patterns, you're left with a crucial question: How do I ensure my design is effective? Tactical patterns within Domain-Driven Design (DDD) serve as guiding principles for creating clear and manageable domain models. However, achieving success with these patterns requires additional guidance. Interestingly, we've observed that a set of constraints initially designed for training purposes remarkably aligns with effective pattern implementation, offering a more ‘mechanical’ approach. Let's explore together how Object Calisthenics can elevate the design of your tactical DDD patterns, offering concrete help for those venturing into DDD for the first time!

Climate Impact of Software Testing at Nordic Testing Days

Kari Kakkonen

My slides at Nordic Testing Days 6.6.2024 Climate impact / sustainability of software testing discussed on the talk. ICT and testing must carry their part of global responsibility to help with the climat warming. We can minimize the carbon footprint but we can also have a carbon handprint, a positive impact on the climate. Quality characteristics can be added with sustainability, and then measured continuously. Test environments can be used less, and in smaller scale and on demand. Test techniques can be used in optimizing or minimizing number of tests. Test automation can be used to speed up testing.

The Future of Platform Engineering

Jemma Hussein Allen

Assure Contact Center Experiences for Your Customers With ThousandEyes

ThousandEyes

Monitoring Java Application Security with JDK Tools and JFR Events

Ana-Maria Mihalceanu

By Design, not by Accident - Agile Venture Bolzano 2024

Pierluigi Pugliese

GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...

Sri Ambati

UiPath Community Day Dubai: AI at Work..

UiPathCommunity

Welcome to the first live UiPath Community Day Dubai! Join us for this unique occasion to meet our local and global UiPath Community and leaders. You will get a full view of the MEA region's automation landscape and the AI Powered automation technology capabilities of UiPath. Also, hosted by our local partners Marc Ellis, you will enjoy a half-day packed with industry insights and automation peers networking. 📕 Curious on our agenda? Wait no more! 10:00 Welcome note - UiPath Community in Dubai Lovely Sinha, UiPath Community Chapter Leader, UiPath MVPx3, Hyper-automation Consultant, First Abu Dhabi Bank 10:20 A UiPath cross-region MEA overview Ashraf El Zarka, VP and Managing Director MEA, UiPath 10:35: Customer Success Journey Deepthi Deepak, Head of Intelligent Automation CoE, First Abu Dhabi Bank 11:15 The UiPath approach to GenAI with our three principles: improve accuracy, supercharge productivity, and automate more Boris Krumrey, Global VP, Automation Innovation, UiPath 12:15 To discover how Marc Ellis leverages tech-driven solutions in recruitment and managed services. Brendan Lingam, Director of Sales and Business Development, Marc Ellis

FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf

FIDO Alliance

RESUME BUILDER APPLICATION Project for students

KAMESHS29

A tale of scale & speed: How the US Navy is enabling software delivery from l...

sonjaschweigert1

Rapid and secure feature delivery is a goal across every application team and every branch of the DoD. The Navy’s DevSecOps platform, Party Barge, has achieved: - Reduction in onboarding time from 5 weeks to 1 day - Improved developer experience and productivity through actionable findings and reduction of false positives - Maintenance of superior security standards and inherent policy enforcement with Authorization to Operate (ATO) Development teams can ship efficiently and ensure applications are cyber ready for Navy Authorizing Officials (AOs). In this webinar, Sigma Defense and Anchore will give attendees a look behind the scenes and demo secure pipeline automation and security artifacts that speed up application ATO and time to production. We will cover: - How to remove silos in DevSecOps - How to build efficient development pipeline roles and component templates - How to deliver security artifacts that matter for ATO’s (SBOMs, vulnerability reports, and policy evidence) - How to streamline operations with automated policy checks on container images

Le nuove frontiere dell'AI nell'RPA con UiPath Autopilot™

UiPathCommunity

In questo evento online gratuito, organizzato dalla Community Italiana di UiPath, potrai esplorare le nuove funzionalità di Autopilot, il tool che integra l'Intelligenza Artificiale nei processi di sviluppo e utilizzo delle Automazioni. 📕 Vedremo insieme alcuni esempi dell'utilizzo di Autopilot in diversi tool della Suite UiPath: Autopilot per Studio Web Autopilot per Studio Autopilot per Apps Clipboard AI GenAI applicata alla Document Understanding 👨‍🏫👨‍💻 Speakers: Stefano Negro, UiPath MVPx3, RPA Tech Lead @ BSP Consultant Flavio Martinelli, UiPath MVP 2023, Technical Account Manager @UiPath Andrei Tasca, RPA Solutions Team Lead @NTT Data

SAP Sapphire 2024 - ASUG301 building better apps with SAP Fiori.pdf

Peter Spielvogel

Building better applications for business users with SAP Fiori. • What is SAP Fiori and why it matters to you • How a better user experience drives measurable business benefits • How to get started with SAP Fiori today • How SAP Fiori elements accelerates application development • How SAP Build Code includes SAP Fiori tools and other generative artificial intelligence capabilities • How SAP Fiori paves the way for using AI in SAP apps

Transcript: Selling digital books in 2024: Insights from industry leaders - T...

BookNet Canada

The publishing industry has been selling digital audiobooks and ebooks for over a decade and has found its groove. What’s changed? What has stayed the same? Where do we go from here? Join a group of leading sales peers from across the industry for a conversation about the lessons learned since the popularization of digital books, best practices, digital book supply chain management, and more. Link to video recording: https://bnctechforum.ca/sessions/selling-digital-books-in-2024-insights-from-industry-leaders/ Presented by BookNet Canada on May 28, 2024, with support from the Department of Canadian Heritage.

Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...

SOFTTECHHUB

The choice of an operating system plays a pivotal role in shaping our computing experience. For decades, Microsoft's Windows has dominated the market, offering a familiar and widely adopted platform for personal and professional use. However, as technological advancements continue to push the boundaries of innovation, alternative operating systems have emerged, challenging the status quo and offering users a fresh perspective on computing. One such alternative that has garnered significant attention and acclaim is Nitrux Linux 3.5.0, a sleek, powerful, and user-friendly Linux distribution that promises to redefine the way we interact with our devices. With its focus on performance, security, and customization, Nitrux Linux presents a compelling case for those seeking to break free from the constraints of proprietary software and embrace the freedom and flexibility of open-source computing.

Recently uploaded (20)

The Metaverse and AI: how can decision-makers harness the Metaverse for their...

Generative AI Deep Dive: Advancing from Proof of Concept to Production

FIDO Alliance Osaka Seminar: Passkeys at Amazon.pdf

zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs

UiPath Test Automation using UiPath Test Suite series, part 4

Elevating Tactical DDD Patterns Through Object Calisthenics

Climate Impact of Software Testing at Nordic Testing Days

The Future of Platform Engineering

Assure Contact Center Experiences for Your Customers With ThousandEyes

Monitoring Java Application Security with JDK Tools and JFR Events

By Design, not by Accident - Agile Venture Bolzano 2024

GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...

UiPath Community Day Dubai: AI at Work..

FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf

RESUME BUILDER APPLICATION Project for students

A tale of scale & speed: How the US Navy is enabling software delivery from l...

Le nuove frontiere dell'AI nell'RPA con UiPath Autopilot™

SAP Sapphire 2024 - ASUG301 building better apps with SAP Fiori.pdf

Transcript: Selling digital books in 2024: Insights from industry leaders - T...

Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...

OAuth 2.0 & OpenID Connect #MA7

1. OAuth 2.0 & OpenID Connect

2. @nov OpenID Foundation Japan Evangelist OAuth.jp Ruby Libraries rack-oauth2 openid_connect fb_graph #MA7 Mashup Caravan & Meetup in Kyoto

3. Platform 3rd-party Developers #MA7 Mashup Caravan & Meetup in Kyoto

4. API Integration Access Control for APIs #MA7 Mashup Caravan & Meetup in Kyoto

5. NG #MA7 Mashup Caravan & Meetup in Kyoto

6. #MA7 Mashup Caravan & Meetup in Kyoto

7. OAuth 1.0 OAuth 2.0 #MA7 Mashup Caravan & Meetup in Kyoto

8. OAuth 1.0 in Japanese ju.mp/oauth1_ja #MA7 Mashup Caravan & Meetup in Kyoto

9. #MA7 Mashup Caravan & Meetup in Kyoto

10. Authorization Server Authorize Client Access Access Token Resource Server Resource Owner API Client Access #MA7 Mashup Caravan & Meetup in Kyoto

11. Get Access Token Resource Owner Client Authorization Server Initiate Require Approval Approve Code Code Access Token #MA7 Mashup Caravan & Meetup in Kyoto

12. Get Access Token Resource Owner Client Authorization Server client_id=...& Initiate response_type=code& redirect_uri=https://...& scope=... Require Approval Approve Code Code Access Token #MA7 Mashup Caravan & Meetup in Kyoto

13. Get Access Token Resource Owner Client Authorization Server Initiate Require Approval Approve Code Code Access Token #MA7 Mashup Caravan & Meetup in Kyoto

14. Get Access Token Resource Owner Client Authorization Server Initiate Require Approval Approve Code Code Access Token #MA7 Mashup Caravan & Meetup in Kyoto

15. Get Access Token Resource Owner Client Authorization Server Initiate Require Approval code=...& Approve client_id=...& client_secret=...& grant_type=authorization_code& Code redirect_uri=https://... Code Access Token #MA7 Mashup Caravan & Meetup in Kyoto

16. Get Access Token Resource Owner Client Authorization Server Initiate Require Approval Approve [NOTE] Facebook API returns access token in Code x-www-form-urlencoded Code Access Token #MA7 Mashup Caravan & Meetup in Kyoto

17. Access APIs #MA7 Mashup Caravan & Meetup in Kyoto

18. #MA7 Mashup Caravan & Meetup in Kyoto

19. #MA7 Mashup Caravan & Meetup in Kyoto

20. OpenID is dead!? Poor UX? URL as identiﬁer? #MA7 Mashup Caravan & Meetup in Kyoto

21. Lack of API access!? You need “stream access”, don’t you? #MA7 Mashup Caravan & Meetup in Kyoto

22. OpenID Connect ~ OpenID based on OAuth 2.0 ~ #MA7 Mashup Caravan & Meetup in Kyoto

23. connect-rp.heroku.com #MA7 Mashup Caravan & Meetup in Kyoto

24. ref.) slideshare.net/oid4/openidconnect-nat #MA7 Mashup Caravan & Meetup in Kyoto

25. #MA7 Mashup Caravan & Meetup in Kyoto

26. OpenID AsiaPac Technology Summit in Tokyo, Japan December 1, 2011 #MA7 Mashup Caravan & Meetup in Kyoto

27. twitter.com/nov slideshare.net/matake github.com/nov openid-foundation-japan.github.com #MA7 Mashup Caravan & Meetup in Kyoto

OAuth 2.0 & OpenID Connect #MA7

Recommended

Recommended

More Related Content

Viewers also liked

Viewers also liked (19)

Similar to OAuth 2.0 & OpenID Connect #MA7

Similar to OAuth 2.0 & OpenID Connect #MA7 (20)

More from Nov Matake

More from Nov Matake (20)

Recently uploaded

Recently uploaded (20)

OAuth 2.0 & OpenID Connect #MA7