OpenID ConnectとAndroidアプリのログインサイクル

99
ヤフー株式会社 倉 雅 OpenID Connect and Login Cycle for Android Apps

Transcript of OpenID ConnectとAndroidアプリのログインサイクル

  • OpenID Connect and Login Cycle for Android Apps

  • kura

    ID

    OpenID ID @kura_lab

  • AndroidOpenID Connect

    Growth!

  • ID

  • ID

  • ID

    ID

    IDMETI/ http://www.meti.go.jp/policy/it_policy/id_renkei/

  • OpenID ConnectOAuth

  • OpenID Connect

  • OpenID Connect

    memo

    2014227 1

  • http://openid.net/connect/

    OpenID Connect

  • 2014.12.23 Yahoo! JAPAN Advent Calendar

    7ID

    http://techblog.yahoo.co.jp/web/auth/id_federation_impl_patterns/

    memo

    ID

  • Web

    1.

    2. 3.

    WebView 4. WebView 5. WebView

    WebView

    6.

    7. WebView

  • Web

    1.

    2. 3.

    WebView 4. WebView 5. WebView

    WebView

    6.

    7. WebView

  • Web

  • Cookie

  • Cookie

    memo

    CookieWebCookie

  • memo

    CookieWeb

  • WebView

  • WebView

  • WebViewCookie

  • WebViewCookie

    memo

    WebViewCookieWebView WebVIewWebViewCookie

  • OpenID Connect

    ID

  • OpenID Connect

    ID memo IDOpenID ConnectOIDC3

  • OpenID Connect,

    http://blog.openid.or.jp/post/12874061176/openid-connect-tale-of-two-tokens

  • OpenID Connect,

    http://blog.openid.or.jp/post/12874061176/openid-connect-tale-of-two-tokens

    memo

    ID

  • /WebView/ /Cookie

  • /WebView/ /Cookie

    memo

    WebViewWebView

  • Cookie

  • Cookie

  • Cookie

    memo

    // /Cookie

  • Cookie

    ID

  • Cookie

    ?

    ?

    ID?

  • Cookie

    Cookie

    ? ?

    ? ?

    ID???

  • Cookie? ?

    ID???

  • Cookie

    ???

    ???

    ID???

  • Cookie /

  • ID

  • ID memo

    CookieOIDCID

  • http://www.slideshare.net/kura_lab/devsumi201413c5

  • http://www.slideshare.net/kura_lab/devsumi201413c5

    memo

    2014ID

  • ID

    issuer audience subject

  • ID

    issuer audience subject

    Identity Provider

  • ID

    issuer audience subject

    Relying Party

  • ID

    issuer audience subject

    End-User

  • ID

    Facebook SlideShare kura

  • ID

    Yahoo! GREE kura

  • ID

  • {

    iss:https://auth.yahoo.co.jp,

    sub:123456789,

    aud:abcdefg,

    nonce:xyz,

    iat:1291836800,

    exp:1300819380

    }

    ID

  • ID=IdP

  • WebViewCookie

    ID Cookie

  • Cookie/

  • Cookie/

    memo

    Cookie

  • Cookie

    ID

  • Cookie

    Cookie

    ID

  • Cookie

    Cookie

    ID

    memo

    CookieAPI

  • Cookie

    ID

  • Cookie

    ID

  • Cookie

    ID

    memo

    IDID CookieID ID

  • AndroidOpenID Connect

  • (Chrome)

  • IdP

    WebView

  • Yahoo!

  • Yahoo!

  • Yahoo!

  • Yahoo!

  • Yahoo!

    memo

    Yahoo! JAPANChrome

  • ID Taro

    ID Taro

    ID Taro

    ID Taro

    WebView

    Your App

  • ID Taro

    ID Taro

    ID Taro

    ID Taro

    WebView

    Your App

    memo

    WebViewWebViewIdPFacebookYahoo!Cookie

  • ID Taro

    ID Taro

    ID Taro

    ID Taro

    WebView

    Your App

    memo

    IdPID

  • SSL

    WebView

  • WebView SSL

  • WebView SSL

    memo

    WebViewSSLID

  • (Chrome) SSL

  • (Chrome) SSL

    memo

    SSL

  • WebView

  • WebView

    memo

    WebViewID

  • iOS

  • UXApp Store

  • Android

  • Android OpenID Connect

  • Growth!

  • memo

    ID OpenID OIDF-J !OIDF-J ! M