OAuth Core 1.0 - The Diigo Meta page

• 25 Sep 12
  

  sumveds
  • OAuth includes a Consumer Key and matching Consumer Secret that  together authenticate the Consumer
  • OAuth includes a Consumer Key and matching Consumer Secret that  together authenticate the Consumer (as opposed to the User) to the  Service Provider.
  • OAuth Protocol Parameters are sent from the Consumer to the Service  Provider in one of three methods, in order of decreasing preference:
  • In the HTTP Authorization header as defined in  OAuth HTTP Authorization Scheme (OAuth HTTP Authorization Scheme).
  • As the HTTP POST request body with a   content-type  of  application/x-www-form-urlencoded.
  • Added to the URLs in the query part (as defined by  [RFC3986] (Berners-Lee, T., “Uniform Resource Identifiers (URI): Generic Syntax,” .) section 3).
  • OAuth authentication is the process in which Users grant access to  their Protected Resources without sharing their credentials with the  Consumer.
  • OAuth uses Tokens generated by the Service Provider instead  of the User’s credentials in Protected Resources requests.
  • Request Token:
  • Access Token:

  8 more annotations...

• 26 Aug 11
  

  yasuhiro nishioka

  oauth authentication security openid web protocol rest api zootool_imported

• 05 Jun 09
  

  Pete McKinstry

  oauth core

• 10 Nov 08
  

  M D

  openid oauth

• 18 Dec 07
  

  Christopher Allen

  "The OAuth protocol enables websites or applications (Consumers) to access Protected Resources from a web service (Service Provider) via an API, without requiring Users to disclose their Service Provider credentials to the Consumers. More generally, OAuth
  

  oauth authentication openid web security protocol spec delegation identity

• 04 Dec 07
  

  zigorou

  oauth openid spec

Would you like to comment?

Join Diigo for a free account, or sign in if you are already a member.