Autentification, registration, identity
Get flash to fully experience Pearltrees
The Authoritative Guide to OAuth 1.0
OAuth Core 1.0 (also known as RFC 5849 ), the community-based specification published on December 4th, 2007 , revised June 24th, 2009 , and finalized in April 2010 is one of the fastest growing Open Web specifications. It provides a much needed solution for security web APIs without requiring users to share their usernames and passwords. This guide attempts to explain OAuth by taking a look at its history, architecture, and technical details.
OAuth is an open standard for authorization . OAuth provides a method for clients to access server resources on behalf of a resource owner (such as a different client or an end-user). It also provides a process for end-users to authorize third-party access to their server resources without sharing their credentials (typically, a username and password pair), using user-agent redirections. OAuth is a service that is complementary to, and therefore distinct from, OpenID . [ edit ] History OAuth began in November 2006 when Blaine Cook was developing the Twitter OpenID implementation.
OAuth
By Cosimo Streppone 25th January 2012: Status update API on My Opera no longer available This article is partially out of date: the status update API (see the "Get your My Opera status" section) on My Opera is no longer available.
Gentle introduction to OAuth
How to Authenticate Users With Twitter OAuth
Beginning August 16th, Twitter will no longer support the basic authentication protocol for its platform. That means the only way to authenticate users will be through a Twitter application. In this tutorial, I’ll show you how to use Twitter as your one-click authentication system, just as we did with Facebook . Step 1: Setting Up The Application
OAuth can be a tricky concept to wrap your head around at first, but with the Twitter API now requiring its use, it is something you need to understand before creating a Twitter application. This tutorial will introduce you to OAuth, and walk you through the process of creating a basic application. Introduction In this tutorial, we will be building a simple app that allows users to apply different effects to their Twitter avatar. In order to work with the Twitter API, we must use OAuth to authorize our app to make requests on the user’s behalf. Our application flow will be something like this:
Creating a Twitter OAuth Application
Introducing ‘Sign-in with Twitter’, OAuth-Style “Connect”
Yesterday Twitter released ‘Sign-in with Twitter’ , the ability to use Twitter as a delegated sign-in provider for third-party websites. The cool thing about this new feature, which is part of their OAuth API beta , is that it is completely standard OAuth . No extensions, not secret sauce, and not another proprietary provider ( yes, I’m looking at you Facebook ). It is Open done right.
Security Assertion Markup Language
Security Assertion Markup Language ( SAML , pronounced "sam-el" [ 1 ] ) is an XML -based open standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider . SAML is a product of the OASIS Security Services Technical Committee. SAML dates from 2001; the most recent update of SAML is from 2005. The single most important problem that SAML addresses is the web browser single sign-on (SSO) problem. Single sign-on solutions are abundant at the intranet level (using cookies , for example) but extending these solutions beyond the intranet has been problematic and has led to the proliferation of non-interoperable proprietary technologies.
HMAC
SHA-1 HMAC Generation. In cryptography , a keyed-hash message authentication code ( HMAC ) is a specific construction for calculating a message authentication code (MAC) involving a cryptographic hash function in combination with a secret cryptographic key . As with any MAC, it may be used to simultaneously verify both the data integrity and the authentication of a message . Any cryptographic hash function, such as MD5 or SHA-1 , may be used in the calculation of an HMAC; the resulting MAC algorithm is termed HMAC-MD5 or HMAC-SHA1 accordingly. The cryptographic strength of the HMAC depends upon the cryptographic strength of the underlying hash function, the size of its hash output, and on the size and quality of the key. An iterative hash function breaks up a message into blocks of a fixed size and iterates over them with a compression function .
Usability researcher Jakob Nielsen’s recent column advocates a fundamental change to password field design on the web. He believes that the time has come “to show most passwords in clear text as users type them,” abandoning the traditional approach that displays a series of asterisks or bullets in place of the actual password. <img src="M70o93H7pQ09L8X1t49cHY01Z5j4TT91fGfr" alt=""> Issue № 300 Nielsen’s controversial proposal demonstrates the principle that most design decisions require trade-offs.
The Problem with Passwords - A List Apart Articles
“Lazy Registration” and the value of iterative research & design « Madgex Labs Blog
One of the things we concentrate on at Madgex is the use of iterative research and design to improve conversion rates on our platforms. We run a lot of usability interviews, make design changes, and track the conversion rates via analytics. The lazy registration system we introduced in version 3 of our platform last year is a great example of this. One of the biggest leakage points of any webapp is registration : users are forced to make a clear decision about whether they want to enter a long term relationship with your site.<img src="http://www.webmonkey.com/wp-content/uploads/2010/05/openid_connect-300x63.jpg" alt="openid_connect" title="openid_connect" width="300" height="63" class="alignright size-medium wp-image-47412" /> David Recordon, one of the key architects of OpenID and other identity technologies that have emerged over the past five years, has envisioned a new direction for OpenID. His proposal, which was drafted with input from several people in the OpenID community, is called OpenID Connect .
New 'OpenID Connect' Proposal Could Solve Many of the Social Web's Woes | Webmonkey| Wired.com
WebFinger is an updated take on the Name/Finger protocol using HTTP, XRD , and host-meta (instead of a direct TCP connection on port 79) to obtain information about user accounts. It works by defining a new account URI scheme and a protocol for resolving it into an extensible descriptor of the account and its owner. The account URI, using the newly proposed ‘ acct ‘ scheme, is used to identify user accounts at a given host which are typically used for the purpose of resource management and establishing local identity (at the host). User accounts include a local identifier (username, screenname, or handle), and a host which can resolve and (usually) authenticate the local identifier. The protocol consists of: A URI scheme to identify accounts using a familiar syntax.
Introducing WebFinger
OpenAM is the world's only all-in-one access management platform with the adaptive intelligence to protect against risk-based threats across any environment. Traditionally delivered as six different products — SSO, adaptive authentication, strong authentication, federation, web services security and fine-grained entitlement enforcement — OpenAM is now delivered as a single, unified offering. It allows organizations to use only the access control services they need and simply turn on additional service when ready; there's no additional software, hardware or integration required. OpenAM works best with a subscription. Find out why. <p style="text-align:right;color:#A8A8A8"></p>
OpenAM
Technologies Authentification Unique