Latest Tech News

Stay updated with the latest in technology, AI, cybersecurity, and more

Filtered by: oauth Clear Filter

An illustrated guide to OAuth

OAuth was first introduced in 2007. It was created at Twitter because Twitter wanted a way to allow third-party apps to post tweets on users' behalf. Take a second to imagine designing something like that today. How would you do it? One way would just be to ask the user for their username and password. So you create an unofficial Twitter client, and present the user a login screen that says "log in with Twitter". The user does so, but instead of logging into Twitter, they're actually sending the

An Illustrated Guide to OAuth

OAuth was first introduced in 2007. It was created at Twitter because Twitter wanted a way to allow third-party apps to post tweets on users' behalf. Take a second to imagine designing something like that today. How would you do it? One way would just be to ask the user for their username and password. So you create an unofficial Twitter client, and present the user a login screen that says "log in with Twitter". The user does so, but instead of logging into Twitter, they're actually sending the

Identity Assertion Authorization Grant

This specification provides a mechanism for an application to use an identity assertion to obtain an access token for a third-party API using Token Exchange [ RFC8693 ] and JWT Profile for OAuth 2.0 Authorization Grants [ RFC7523 ]. ¶ This note is to be removed before publishing as an RFC.¶ The latest revision of this draft can be found at https://drafts.aaronpk.com/draft-parecki-oauth-identity-assertion-authz-grant/draft-parecki-oauth-identity-assertion-authz-grant.html. Status information fo