SlideShare a Scribd company logo
OAuth
Autentificare Client-Side


Andrei Verdeș
Bogdan Lefter
OAuth
   (Open Authentification) este un standard
    web de autentificare
   Permite partajarea resurselor private intre
    diferite aplicatii web
   Prerogativele utilizatorului nu sunt
    impărtite, aplicatiile web partajând doar
    tokenuri de securitate.
   Fiecare token garantează acces catre:
           O aplicatie web specifica
           Reusrse specifice
           Pentru o perioada definita de timp
OAuth vs OpenID
 Amandoua     apartin domniului general de
  securitate, autentificare si autorizare
 Amandoua sunt standarde web open
 Amandoua se concentreaza pe
  decentralizare
 Amandoua implica redirectari de browser
  de la websiteul pe care incercati sa il
  folositi
OAuth vs OpenID
 OpenID    ofera un singur id de login pentru
  mai multe siteuri
 OAuth autorizeaza o aplicatie web sa
  acceseze date private de pe alte
  website-uri
 Cu OpenID nu exista ideea ca doua
  aplicatii web sa partajeze date
 Cu OAuth anumita infomatie detinuta pe
  un website poate fi partajata cu alt
  website
OAuth @ Twitter.com
 Pe data de 30 August 2010 Twitter.com a
  inchis definitiv Basic Auth
 Daca detii un cont de twitter poti deveni
  dezvoltator :
    1.   Intra pe http://dev.twitter.com
    2.   Click “Your apps”
    3.   Click “Create new application”
    4.   Et voila!
OAuth @ Twitter.com
 Parametri   inregistrati
    API key
    Consumer key
    Consume secret
    Request token URL:
     https://api.twitter.com/oauth/request_token
    Access token URL:
     https://api.twitter.com/oauth/access_token
    Authorize URL:
     https://api.twitter.com/oauth/authorize
OAuth @ Twitter.com
 Pentru facilitarea autentificarii twitter vine
 cu ceva nou. Si anume utilitarul
 @anywhere care genereaza o biblioteca
 javascript in functie de cheia
 consumatorului(obtinuta in urma crearii
 unei aplicatii twitter ) si apeland functiile
 din aceasta biblioteca faciliteaza accesul
 la resurse
OAuth @ Twitter flow

More Related Content

Featured

2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by Hubspot2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by Hubspot
Marius Sescu
 
Everything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPTEverything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPT
Expeed Software
 
Product Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage EngineeringsProduct Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage Engineerings
Pixeldarts
 
How Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental HealthHow Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental Health
ThinkNow
 
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdfAI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
marketingartwork
 
Skeleton Culture Code
Skeleton Culture CodeSkeleton Culture Code
Skeleton Culture Code
Skeleton Technologies
 
PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024
Neil Kimberley
 
Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)
contently
 
How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024
Albert Qian
 
Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsSocial Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie Insights
Kurio // The Social Media Age(ncy)
 
Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024
Search Engine Journal
 
5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary
SpeakerHub
 
ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd
Clark Boyd
 
Getting into the tech field. what next
Getting into the tech field. what next Getting into the tech field. what next
Getting into the tech field. what next
Tessa Mero
 
Google's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search IntentGoogle's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search Intent
Lily Ray
 
How to have difficult conversations
How to have difficult conversations How to have difficult conversations
How to have difficult conversations
Rajiv Jayarajah, MAppComm, ACC
 
Introduction to Data Science
Introduction to Data ScienceIntroduction to Data Science
Introduction to Data Science
Christy Abraham Joy
 
Time Management & Productivity - Best Practices
Time Management & Productivity -  Best PracticesTime Management & Productivity -  Best Practices
Time Management & Productivity - Best Practices
Vit Horky
 
The six step guide to practical project management
The six step guide to practical project managementThe six step guide to practical project management
The six step guide to practical project management
MindGenius
 
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
RachelPearson36
 

Featured (20)

2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by Hubspot2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by Hubspot
 
Everything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPTEverything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPT
 
Product Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage EngineeringsProduct Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage Engineerings
 
How Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental HealthHow Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental Health
 
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdfAI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
 
Skeleton Culture Code
Skeleton Culture CodeSkeleton Culture Code
Skeleton Culture Code
 
PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024
 
Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)
 
How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024
 
Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsSocial Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie Insights
 
Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024
 
5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary
 
ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd
 
Getting into the tech field. what next
Getting into the tech field. what next Getting into the tech field. what next
Getting into the tech field. what next
 
Google's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search IntentGoogle's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search Intent
 
How to have difficult conversations
How to have difficult conversations How to have difficult conversations
How to have difficult conversations
 
Introduction to Data Science
Introduction to Data ScienceIntroduction to Data Science
Introduction to Data Science
 
Time Management & Productivity - Best Practices
Time Management & Productivity -  Best PracticesTime Management & Productivity -  Best Practices
Time Management & Productivity - Best Practices
 
The six step guide to practical project management
The six step guide to practical project managementThe six step guide to practical project management
The six step guide to practical project management
 
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
 

Web authentication & authorization

  • 2. OAuth  (Open Authentification) este un standard web de autentificare  Permite partajarea resurselor private intre diferite aplicatii web  Prerogativele utilizatorului nu sunt impărtite, aplicatiile web partajând doar tokenuri de securitate.  Fiecare token garantează acces catre:  O aplicatie web specifica  Reusrse specifice  Pentru o perioada definita de timp
  • 3. OAuth vs OpenID  Amandoua apartin domniului general de securitate, autentificare si autorizare  Amandoua sunt standarde web open  Amandoua se concentreaza pe decentralizare  Amandoua implica redirectari de browser de la websiteul pe care incercati sa il folositi
  • 4. OAuth vs OpenID  OpenID ofera un singur id de login pentru mai multe siteuri  OAuth autorizeaza o aplicatie web sa acceseze date private de pe alte website-uri  Cu OpenID nu exista ideea ca doua aplicatii web sa partajeze date  Cu OAuth anumita infomatie detinuta pe un website poate fi partajata cu alt website
  • 5.
  • 6. OAuth @ Twitter.com  Pe data de 30 August 2010 Twitter.com a inchis definitiv Basic Auth  Daca detii un cont de twitter poti deveni dezvoltator : 1. Intra pe http://dev.twitter.com 2. Click “Your apps” 3. Click “Create new application” 4. Et voila!
  • 7. OAuth @ Twitter.com  Parametri inregistrati  API key  Consumer key  Consume secret  Request token URL: https://api.twitter.com/oauth/request_token  Access token URL: https://api.twitter.com/oauth/access_token  Authorize URL: https://api.twitter.com/oauth/authorize
  • 8. OAuth @ Twitter.com  Pentru facilitarea autentificarii twitter vine cu ceva nou. Si anume utilitarul @anywhere care genereaza o biblioteca javascript in functie de cheia consumatorului(obtinuta in urma crearii unei aplicatii twitter ) si apeland functiile din aceasta biblioteca faciliteaza accesul la resurse
  • 9.