خرید و دانلود نسخه کامل کتاب زبان اصلی Demystifying OpenID Connect: From Concept to Security Kindle Edition PDF | دانلود کتاب خارجی

آنتونی رابینز میگه : من در 40 سالگی به جایی رسیدم که برای رسیدن بهش 82 سال زمان لازمه و این رو مدیون کتاب خواندن زیاد هستم.

 
This book provides a comprehensive, essential, and concise description of OpenID Connect. This book is organized as follows.. 1. Overview of OpenID ConnectFirst, explain about OAuth 2.0, which is the base of OpenID Connect, and then, explain what have extended with OpenID Connect and what type of actors we’ll see.. 2. Use Cases of OIDCThe following use cases are introduced.* To use data held by other websites like SNS.* To entrust authentication to other websites like SNS.* To use as an single sign-on platform.* To call API securely between backend services.. 3. Endpoints and FlowsThe following flow are explained using figures.* Authorization Code Flow* Implicit Flow* Hybrid Flow* Client Credentials Flow* Resource Owner Password Credential Flow. 4. Details of Authorization Code Flow for SPAThe Authorization Code Flow, which is the most representative flow, is explained with concrete data.. 5. JWTJWT is used as a data format for ID Token and Access Tokens. The data format of JWT and main Claims is explained.. 6. After Obtaining Access TokenThe following are explained.* Accessing the Resource Server* Validating the Access Token* Refreshing the Access Token* Retrieving the User information* About Logout. 7. Security Threats and CountermeasuresThe following threats and its countermeasures are discussed in order.* CSRF against Redirection Endpoint* Open Redirection* Authorization Code Leakage via Referrer Header* Diverting Access Token Issued to Other Client* Authorization Server Mix-up* Malicious Registration of URI Schema* Countermeasure Assuming Authorization Code Leakage (PKCE). 8. Using LibraryIt is hard to code from scratch following to the OIDC specifications. If you use an existing library, you can code easily. This chapter shows what it would like to create an application using library.. 9. ReferencesReferences that were used in writing this book. It will be helpful for you to look up detailed information that is not included in this book.