OAuth for authorization 

Tags: OpenID, OAuth

What OpenID is for authentication is OAuth for authorization. So much for the probably over simplified intro.

The OAuth protocol is getting some momentum but is currently not so "big" as OpenID. Still, it's being mentioned more and more.

A use case scenario :
OAuth is defined as a “an open protocol to allow secure API authentication in a simple and standard method”. Don’t be tempted to think that OAuth implies “open authentication”. It doesn’t. It is closer to “open authorization”. Let’s say you are registering as a delegate on a conference website. With OAuth it is possible for the conference website to automatically add the event to your google calendar or yahoo calendar with your consent (assuming google and yahoo support OAuth). How does it work ? Well, once you decide to let the conference website add an event to your google calendar, you get redirected to google. On google , you explicitly authorize the conference website to modify your calendar. After this authorization, the conference website will have permission to modify your calendar data.

More info
http://portalzone.blogspot.com/2007/12/openid-oauth-complimentary-or-competing.html

http://oauth.net

 
Posted by Bart De Jonge on 22-Jul-08
0 Comments  |  Trackback Url | Bookmark this post with:        
 
ab

Comments

Your name  *
Email  *
Your URL 
Comment  *

Please enter the text from the image


Contact us - Raas Van Gaverestraat 83, 9000 Gent, Belgium - Tel. +32 (9) 330.15.00 - Privacy Statement - Sitemap - Sign In Developed with Microsoft Office SharePoint Server 2007