Upload
masaru-kurahayashi
View
2.748
Download
8
Embed Size (px)
Citation preview
OpenID Connect and Login Cycle for Android Apps
kura
ID
OpenID ID @kura_lab
AndroidOpenID Connect
Growth!
ID
ID
ID
ID
IDMETI/ http://www.meti.go.jp/policy/it_policy/id_renkei/
OpenID ConnectOAuth
OpenID Connect
OpenID Connect
memo
2014227 1
http://openid.net/connect/
OpenID Connect
2014.12.23 Yahoo! JAPAN Advent Calendar
7ID
http://techblog.yahoo.co.jp/web/auth/id_federation_impl_patterns/
memo
ID
Web
1.
2. 3.
WebView 4. WebView 5. WebView
WebView
6.
7. WebView
Web
1.
2. 3.
WebView 4. WebView 5. WebView
WebView
6.
7. WebView
Web
Cookie
Cookie
memo
CookieWebCookie
memo
CookieWeb
WebView
WebView
WebViewCookie
WebViewCookie
memo
WebViewCookieWebView WebVIewWebViewCookie
OpenID Connect
ID
OpenID Connect
ID memo IDOpenID ConnectOIDC3
OpenID Connect,
http://blog.openid.or.jp/post/12874061176/openid-connect-tale-of-two-tokens
OpenID Connect,
http://blog.openid.or.jp/post/12874061176/openid-connect-tale-of-two-tokens
memo
ID
/WebView/ /Cookie
/WebView/ /Cookie
memo
WebViewWebView
Cookie
Cookie
Cookie
memo
// /Cookie
Cookie
ID
Cookie
?
?
ID?
Cookie
Cookie
? ?
? ?
ID???
Cookie? ?
ID???
Cookie
???
???
ID???
Cookie /
ID
ID memo
CookieOIDCID
http://www.slideshare.net/kura_lab/devsumi201413c5
http://www.slideshare.net/kura_lab/devsumi201413c5
memo
2014ID
ID
issuer audience subject
ID
issuer audience subject
Identity Provider
ID
issuer audience subject
Relying Party
ID
issuer audience subject
End-User
ID
Facebook SlideShare kura
ID
Yahoo! GREE kura
ID
{
iss:https://auth.yahoo.co.jp,
sub:123456789,
aud:abcdefg,
nonce:xyz,
iat:1291836800,
exp:1300819380
}
ID
ID=IdP
WebViewCookie
ID Cookie
Cookie/
Cookie/
memo
Cookie
Cookie
ID
Cookie
Cookie
ID
Cookie
Cookie
ID
memo
CookieAPI
Cookie
ID
Cookie
ID
Cookie
ID
memo
IDID CookieID ID
AndroidOpenID Connect
(Chrome)
IdP
WebView
Yahoo!
Yahoo!
Yahoo!
Yahoo!
Yahoo!
memo
Yahoo! JAPANChrome
ID Taro
ID Taro
ID Taro
ID Taro
WebView
Your App
ID Taro
ID Taro
ID Taro
ID Taro
WebView
Your App
memo
WebViewWebViewIdPFacebookYahoo!Cookie
ID Taro
ID Taro
ID Taro
ID Taro
WebView
Your App
memo
IdPID
SSL
WebView
WebView SSL
WebView SSL
memo
WebViewSSLID
(Chrome) SSL
(Chrome) SSL
memo
SSL
WebView
WebView
memo
WebViewID
iOS
UXApp Store
Android
Android OpenID Connect
Growth!
memo
ID OpenID OIDF-J !OIDF-J ! M