[Getting.Started.with.OAuth.2.0(2012.2)].Ryan.Boyd.文字版

《[Getting.Started.with.OAuth.2.0(2012.2)].Ryan.Boyd.文字版》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、GettingStartedwithOAuth2.0RyanBoydBeijing•Cambridge•Farnham•Köln•Sebastopol•TokyoGettingStartedwithOAuth2.0byRyanBoydCopyright©2012RyanBoyd.Allrightsreserved.PrintedintheUnitedStatesofAmerica.PublishedbyO’ReillyMedia,Inc.,1005GravensteinHighwayNorth,Sebastopol,CA95472.O’Reillybooksmaybepurchasedfore

2、ducational,business,orsalespromotionaluse.Onlineeditionsarealsoavailableformosttitles(http://my.safaribooksonline.com).Formoreinformation,contactourcorporate/institutionalsalesdepartment:(800)998-9938orcorporate@oreilly.com.Editors:MikeLoukidesandShawnWallaceCoverDesigner:KarenMontgomeryProductionEd

3、itor:TeresaElseyInteriorDesigner:DavidFutatoIllustrator:RobertRomanoRevisionHistoryfortheFirstEdition:2012-02-17FirstreleaseSeehttp://oreilly.com/catalog/errata.csp?isbn=9781449311605forreleasedetails.NutshellHandbook,theNutshellHandbooklogo,andtheO’ReillylogoareregisteredtrademarksofO’ReillyMedia,I

4、nc.GettingStartedwithOAuth2.0,theimageofahornedtrunkfish,andrelatedtradedressaretrademarksofO’ReillyMedia,Inc.Manyofthedesignationsusedbymanufacturersandsellerstodistinguishtheirproductsareclaimedastrademarks.Wherethosedesignationsappearinthisbook,andO’ReillyMedia,Inc.,wasawareofatrademarkclaim,thed

5、esignationshavebeenprintedincapsorinitialcaps.Whileeveryprecautionhasbeentakeninthepreparationofthisbook,thepublisherandauthorsassumenoresponsibilityforerrorsoromissions,orfordamagesresultingfromtheuseoftheinformationcon-tainedherein.ISBN:978-1-449-31160-5[LSI]1329511012TableofContentsPreface.......

6、..............................................................vii1.Introduction...........................................................1HowOAuthWasBorn1WhyDevelopersShouldCareAboutOAuth2WhyDon’tTheseAPIsJustUsePasswordsforAuthorization?3Terminology4Authentication4FederatedAuthentication4Authoriza

7、tion4DelegatedAuthorization5Roles5TheGreatDebateoverSignatures6MitigatingConcernswithBearerTokens6SigningYourOAuth2.0Requests7DeveloperandApplicationRegistration7WhyIsRegistrationNecessary?9ClientProf