Downloaded 282 times
![Your Host Steve Ivy [email_address] Open Standards, Open Source Agitator http://redmonk.net/](https://image.slidesharecdn.com/openidoauth2-1211249318193808-9/75/Openid-Oauth-An-Introduction-21-2048.jpg)
Uploaded bySteve Ivy
Openid & Oauth: An Introduction
OpenID and OAuth are open standards for authentication and authorization on the web. OpenID allows users to log into multiple websites using a single digital identity while OAuth provides applications a secure delegated access to server resources on behalf of a resource owner. Both standards use open web technologies like HTTP, SSL and public-key cryptography to provide user-centric and application-to-application authentication and authorization in a distributed and extensible manner without single vendor lock-in.
Openid & Oauth: An Introduction
- 1. OpenID & OauthOpen Standards for Authentication and Authorization (An introduction)
- 2. The Open WebUnencumbered, Cross-Platform Standards Open Source / Free Software Implementations No Single-Vendor "Lock-In” Distributed Extensibility http://developer.mozilla.org/presentations/sxsw2007/the_open_web/
- 3. OpenID is… LightweightDistributed User-Centric (not Site-Centric)
- 4. OpenID is also…Built on web standards DNS/HTTP/SSL Diffie-Hellman (PKI)
- 5. History 2005: Developedby Brad Fitzpatrick, Creator of LiveJournal 2006: Delegation, XRI support, extensions: OpenID 2.0 2007: OpenID Foundation 2008: More than 13,000 Consuming Sites http://en.wikipedia.org/wiki/OpenID#History
- 6. OpenID In TheWild
- 7. A Solution For…Maintaining Usernames Password Overload (insecurity) Site-centric Identity
- 8. Basics An OpenIDis a URL http://redmonk.net Provider http://myopenid.com Relying Parties Delegation http://redmonk.myopenid.com
- 9.
- 10. DEMO LiveJournal UserMa.gnolia One-Time Authentication Persistent Authentication
- 11. The “Open” inOpenID Delegation support is required <link rel=“openid.delegate” /> Multiple accounts, multiple Providers No Lock-in
- 12.
- 13. Oauth is… “OAuth is like a valet key for all your web services . A valet key lets you give a valet the ability to park your car, but not the ability to get into the trunk or drive more than 2 miles or redline the RPMs on your high end German automobile. In the same way, an OAuth key lets you give a web agent the ability to check your web mail but NOT the ability to pretend to be you and send mail to everybody in your address book.” http://journals.aol.com/panzerjohn/abstractioneer/entries/2007/09/21/oauth-your-valet-key-for-the-web/1550
- 14. Authentication Similar to:AuthSub (Google) BBAuth (Yahoo) Flickr Auth OpenAuth (AOL)
- 15. API Level ApplicationTo Application “ Agency”
- 16. Basics User ServiceProvider Consumer Protected Resources Tokens http://oauth.net/documentation/getting-started
- 17. The Dance (Conversation)(Developed from: http:// oauth.net/core/diagram.png )
- 18. Who’s Supporting Oauth?Google FireEagle (Yahoo) Ma.gnolia Amazon Flickr Digg And more…
- 19.
- 20. Sources http://www.slideshare.net/daveman692/open-id-overview-seoul-july-2007 http://en.wikipedia.org/wiki/Diffie-Hellman_key_exchangehttp://en.wikipedia.org/wiki/OpenID#History http://wiki.openid.net/ http://openid.net http://oauth.net http://journals.aol.com/panzerjohn/abstractioneer/entries/2007/09/21/oauth-your-valet-key-for-the-web/1550 http://oauth.net/core/diagram.png http://www.slideshare.net/leahculver/oauth-open-api-authentication http://www.slideshare.net/daveman692/open-platforms-in-web-20
- 21. Your Host SteveIvy [email_address] Open Standards, Open Source Agitator http://redmonk.net/
- 22.