Book
OAuth徹底入門
Justin Richer、Antonio Sanso
Summary
OAuth 2.0の仕様からエコシステム、脆弱性対策までを、クライアント・認可サーバー・リソースサーバーを 実際にコードで実装しながら解説する一冊。トークン漏洩やリダイレクトURI改ざんといったプロトコル上の 落とし穴と対策を、認可システムの原則レベルで深く理解できる。
Target Readers
- OAuth 2.0による権限委譲を原理から理解したいエンジニア
- マイクロサービスやAPIの認可基盤を設計する開発者
Tags
Colophon
- Publisher
- 翔泳社
- ISBN
- 978-4-7981-5929-4
- Published
- Jan 2019
- List price
- ¥4,620incl. taxMay differ from the actual selling price on Amazon
Get this book
* The link above is an advertisement via Amazon Associates.Related Books
Prerequisites
- Recommended
暗号技術入門 第3版
結城浩
Reason: Only with a foundation in signatures and public-key cryptography can you correctly understand token-based authorization. OAuth 2.0 is the de facto standard for delegating privileges; learn its grant types and flows from first principles.
- Recommended
はじめてのデジタルアイデンティティ
いとうりょう
Reason: Once you hold the shape of ID management and identity federation, step into the implementation of the authorization protocol at its core. Working through OAuth 2.0's grants and flows in code clarifies pitfalls like token leakage and redirect URI tampering from first principles.
Sources
Next Books
- Recommended
OpenID Connect入門
土岐孝平
Reason: OAuth 2.0 is fundamentally an authorization protocol, and misusing it for pseudo-authentication breeds vulnerabilities. Advancing to OIDC, which standardizes identity verification, clarifies how to build correct authentication, including ID token validation.