http://hdknr.soup.io/ http://hdknr.soup.io/ http://2.asset.soup.io/asset/0391/5394_2f69.jpeg 75 75 hdknr.com FriendFeed {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 06 May 2012 12:00:00 GMThttp://hdknr.soup.io/post/252794614/Top-5-artists-this-weekurn:www-soup-io:1:252794614regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 29 Apr 2012 12:00:00 GMThttp://hdknr.soup.io/post/250892660/Top-5-artists-this-weekurn:www-soup-io:1:250892660regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 22 Apr 2012 12:00:00 GMThttp://hdknr.soup.io/post/248990166/Top-5-artists-this-weekurn:www-soup-io:1:248990166regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 15 Apr 2012 12:00:00 GMThttp://hdknr.soup.io/post/246775947/Top-5-artists-this-weekurn:www-soup-io:1:246775947regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 08 Apr 2012 12:00:00 GMThttp://hdknr.soup.io/post/244735506/Top-5-artists-this-weekurn:www-soup-io:1:244735506regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 01 Apr 2012 12:00:00 GMThttp://hdknr.soup.io/post/242723128/Top-5-artists-this-weekurn:www-soup-io:1:242723128regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 25 Mar 2012 12:00:00 GMThttp://hdknr.soup.io/post/241052683/Top-5-artists-this-weekurn:www-soup-io:1:241052683regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 18 Mar 2012 12:00:00 GMThttp://hdknr.soup.io/post/240907033/Top-5-artists-this-weekurn:www-soup-io:1:240907033regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 11 Mar 2012 12:00:00 GMThttp://hdknr.soup.io/post/238133730/Top-5-artists-this-weekurn:www-soup-io:1:238133730regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 04 Mar 2012 12:00:00 GMThttp://hdknr.soup.io/post/236294024/Top-5-artists-this-weekurn:www-soup-io:1:236294024regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 26 Feb 2012 12:00:00 GMThttp://hdknr.soup.io/post/234579402/Top-5-artists-this-weekurn:www-soup-io:1:234579402regular {"tags":[],"type":"regular","title":"Cross-origin resource sharing - Wikipedia, the free encyclopedia","source":null,"body":"\u003Cdiv class=\"posterous_autopost\"\u003E\u003Cdiv class=\"posterous_bookmarklet_entry\"\u003E \u003Cblockquote class=\"posterous_long_quote\"\u003E\u003Cb\u003ECross-origin resource sharing\u003C/b\u003E (\u003Cb\u003ECORS\u003C/b\u003E) is a \u003Ca href=\"http://en.wikipedia.org/wiki/Web_browser\" title=\"Web browser\"\u003Eweb browser\u003C/a\u003E technology specification, which defines ways for a web server to allow its resources to be accessed by a web page from a different domain.\u003Csup class=\"reference\"\u003E\u003Ca href=\"http://en.wikipedia.org/wiki/Cross-origin_resource_sharing#cite_note-mozhacks_cors-0\"\u003E\u003Cspan\u003E[\u003C/span\u003E1\u003Cspan\u003E]\u003C/span\u003E\u003C/a\u003E\u003C/sup\u003E Such access would otherwise be forbidden by the \u003Ca href=\"http://en.wikipedia.org/wiki/Same_origin_policy\" title=\"Same origin policy\"\u003Esame origin policy\u003C/a\u003E.\u003C/blockquote\u003E \u003Cdiv class=\"posterous_quote_citation\"\u003Evia \u003Ca href=\"http://en.wikipedia.org/wiki/Cross-origin_resource_sharing\"\u003Een.wikipedia.org\u003C/a\u003E\u003C/div\u003E \u003Cp\u003E\u003Ca href=\"https://bitbucket.org/openid/connect/issue/550\"\u003E\u003C/a\u003E\u003Ca href=\"https://bitbucket.org/openid/connect/issue/550\"\u003Ehttps://bitbucket.org/openid/connect/issue/550\u003C/a\u003E\u003C/p\u003E\u003C/div\u003E\u003Cp\u003E \u003Ca href=\"http://posterous.com\"\u003EPosted via email\u003C/a\u003E from \u003Ca href=\"http://lafoglia.posterous.com/cross-origin-resource-sharing-wikipedia-the-f\"\u003ENotes for Digital Identities and Computing in the Cloud\u003C/a\u003E\u00a0|\u00a0\u003Ca href=\"http://lafoglia.posterous.com/cross-origin-resource-sharing-wikipedia-the-f#comment\"\u003E\u003Cspan\u003EComment\u00a0\u00bb\u003C/span\u003E\u003C/a\u003E \u003C/p\u003E\u003C/div\u003E"} <div class="posterous_autopost"><div class="posterous_bookmarklet_entry"> <blockquote class="posterous_long_quote"><b>Cross-origin resource sharing</b> (<b>CORS</b>) is a <a href="http://en.wikipedia.org/wiki/Web_browser" title="Web browser">web browser</a> technology specification, which defines ways for a web server to allow its resources to be accessed by a web page from a different domain.<sup class="reference"><a href="http://en.wikipedia.org/wiki/Cross-origin_resource_sharing#cite_note-mozhacks_cors-0"><span>[</span>1<span>]</span></a></sup> Such access would otherwise be forbidden by the <a href="http://en.wikipedia.org/wiki/Same_origin_policy" title="Same origin policy">same origin policy</a>.</blockquote> <div class="posterous_quote_citation">via <a href="http://en.wikipedia.org/wiki/Cross-origin_resource_sharing">en.wikipedia.org</a></div> <p><a href="https://bitbucket.org/openid/connect/issue/550"></a><a href="https://bitbucket.org/openid/connect/issue/550">https://bitbucket.org/openid/connect/issue/550</a></p></div><p> <a href="http://posterous.com">Posted via email</a> from <a href="http://lafoglia.posterous.com/cross-origin-resource-sharing-wikipedia-the-f">Notes for Digital Identities and Computing in the Cloud</a> | <a href="http://lafoglia.posterous.com/cross-origin-resource-sharing-wikipedia-the-f#comment"><span>Comment »</span></a> </p></div>Mon, 20 Feb 2012 21:21:48 GMThttp://hdknr.soup.io/post/232965573/Cross-origin-resource-sharing-Wikipedia-the-freeurn:www-soup-io:1:232965573regular {"tags":[],"type":"regular","title":"Handling the Response : Using OAuth 2.0 for Client-side Applications - Authentication and Authorization for Google APIs - Google Code","source":null,"body":"\u003Cdiv class=\"posterous_autopost\"\u003E\u003Cdiv class=\"posterous_bookmarklet_entry\"\u003E \u003Cblockquote class=\"posterous_long_quote\"\u003E\u003Ch2\u003EHandling the Response\u003C/h2\u003E \u003Cp\u003E Google returns an access token to your application if the user grants your application the permissions it requested. The access token is returned to your application in the fragment as part of the \u003Ccode\u003Eaccess_token\u003C/code\u003E parameter. Since a fragment is not returned to the server, client-side script must parse the fragment and extract the value of the \u003Ccode\u003Eaccess_token\u003C/code\u003E parameter. \u003C/p\u003E \u003Cp\u003E Other parameters included in the response include \u003Ccode\u003Eexpires_in\u003C/code\u003E and \u003Ccode\u003Etoken_type\u003C/code\u003E. These parameters describe the lifetime of the token in seconds, and the kind of token that is being returned. If the \u003Ccode\u003Estate\u003C/code\u003E parameter was included in the request, then it is also included in the response. \u003C/p\u003E \u003Cp\u003EAn example User Agent flow response is shown below:\u003C/p\u003E \u003Cdiv class=\"CodeRay\"\u003E \u003Cdiv class=\"code\"\u003E\u003Cdiv class=\"CodeRay\"\u003E \u003Cdiv class=\"code\"\u003E\u003Cpre\u003E\u003Ca href=\"https://oauth2-login-demo.appspot.com/oauthcallback#access_token=1/fFBGRNJru1FQd44AzqT3Zg\u0026amp;token_type=Bearer\u0026amp;expires_in=3600\"\u003Ehttps://oauth2-login-demo.appspot.com/oauthcallback#access_token=1/fFBGRNJru1FQd44AzqT3Zg\u0026amp;token_type=Bearer\u0026amp;expires_in=3600\u003C/a\u003E\u003C/pre\u003E\u003C/div\u003E \u003C/div\u003E \u003C/div\u003E \u003C/div\u003E \u003Cp class=\"note\"\u003E Other fields may be included in the response. Your application should allow additional fields to be returned in the response. The set shown above is the minimum set. \u003C/p\u003E \u003Cp\u003E Below is a Javascript snippet that parses the response and returns the parameters to the server. This code is hosted at the \u003Ccode\u003E\u003Ca href=\"https://oauth2-login-demo.appspot.com/oauthcallback\"\u003Ehttps://oauth2-login-demo.appspot.com/oauthcallback\u003C/a\u003E\u003C/code\u003E URL. \u003C/p\u003E \u003Cdiv class=\"CodeRay\"\u003E \u003Cdiv class=\"code\"\u003E\u003Cdiv class=\"CodeRay\"\u003E \u003Cdiv class=\"code\"\u003E\u003Cpre\u003E// First, parse the query string var params = {}, queryString = location.hash.substring(1), regex = /([^\u0026amp;=]+)=([^\u0026amp;]*)/g, m; while (m = regex.exec(queryString)) { params[decodeURIComponent(m[1])] = decodeURIComponent(m[2]); } // And send the token over to the server var req = new XMLHttpRequest(); // consider using POST so query isn't logged req.open('GET', 'https://' + window.location.host + '/catchtoken?' + queryString, true); req.onreadystatechange = function (e) { if (req.readyState == 4) { if(req.status == 200){ window.location = params['state'] } else if(req.status == 400) { alert('There was an error processing the token.') } else { alert('something else other than 200 was returned') } } }; req.send(null);\u003C/pre\u003E\u003C/div\u003E \u003C/div\u003E \u003C/div\u003E \u003C/div\u003E \u003Cp\u003E This code sends the parameters received on the fragment to the server using XMLHttpRequest and writes the access token to local storage in the browser. The latter is an optional step, and depends on whether or not the application requires other Javascript code to make calls to a Google API. Also note that this code sends the parameters to the /accepttoken endpoint, and they are sent over an HTTPs channel. \u003C/p\u003E \u003Ch4\u003EError Response\u003C/h4\u003E \u003Cp\u003E The Google Authorization Server returns an error if the user did not grant your application the permissions it requested. The error is returned in the fragment. \u003C/p\u003E \u003Cp\u003E An example error response is shown below: \u003C/p\u003E \u003Cdiv class=\"CodeRay\"\u003E \u003Cdiv class=\"code\"\u003E\u003Cdiv class=\"CodeRay\"\u003E \u003Cdiv class=\"code\"\u003E\u003Cpre\u003E\u003Ca href=\"https://oauth2-login-demo.appspot.com/oauthcallback#error=access_denied\"\u003Ehttps://oauth2-login-demo.appspot.com/oauthcallback#error=access_denied\u003C/a\u003E\u003C/pre\u003E\u003C/div\u003E \u003C/div\u003E \u003C/div\u003E \u003C/div\u003E\u003C/blockquote\u003E \u003Cdiv class=\"posterous_quote_citation\"\u003Evia \u003Ca href=\"http://code.google.com/intl/ja/apis/accounts/docs/OAuth2UserAgent.html#validatetoken\"\u003Ecode.google.com\u003C/a\u003E\u003C/div\u003E \u003C/div\u003E\u003Cp\u003E \u003Ca href=\"http://posterous.com\"\u003EPosted via email\u003C/a\u003E from \u003Ca href=\"http://lafoglia.posterous.com/handling-the-response-using-oauth-20-for-clie\"\u003ENotes for Digital Identities and Computing in the Cloud\u003C/a\u003E\u00a0|\u00a0\u003Ca href=\"http://lafoglia.posterous.com/handling-the-response-using-oauth-20-for-clie#comment\"\u003E\u003Cspan\u003EComment\u00a0\u00bb\u003C/span\u003E\u003C/a\u003E \u003C/p\u003E\u003C/div\u003E"} <div class="posterous_autopost"><div class="posterous_bookmarklet_entry"> <blockquote class="posterous_long_quote"><h2>Handling the Response</h2> <p> Google returns an access token to your application if the user grants your application the permissions it requested. The access token is returned to your application in the fragment as part of the <code>access_token</code> parameter. Since a fragment is not returned to the server, client-side script must parse the fragment and extract the value of the <code>access_token</code> parameter. </p> <p> Other parameters included in the response include <code>expires_in</code> and <code>token_type</code>. These parameters describe the lifetime of the token in seconds, and the kind of token that is being returned. If the <code>state</code> parameter was included in the request, then it is also included in the response. </p> <p>An example User Agent flow response is shown below:</p> <div class="CodeRay"> <div class="code"><div class="CodeRay"> <div class="code"><pre><a href="https://oauth2-login-demo.appspot.com/oauthcallback#access_token=1/fFBGRNJru1FQd44AzqT3Zg&amp;token_type=Bearer&amp;expires_in=3600">https://oauth2-login-demo.appspot.com/oauthcallback#access_token=1/fFBGRNJru1FQd44AzqT3Zg&amp;token_type=Bearer&amp;expires_in=3600</a></pre></div> </div> </div> </div> <p class="note"> Other fields may be included in the response. Your application should allow additional fields to be returned in the response. The set shown above is the minimum set. </p> <p> Below is a Javascript snippet that parses the response and returns the parameters to the server. This code is hosted at the <code><a href="https://oauth2-login-demo.appspot.com/oauthcallback">https://oauth2-login-demo.appspot.com/oauthcallback</a></code> URL. </p> <div class="CodeRay"> <div class="code"><div class="CodeRay"> <div class="code"><pre>// First, parse the query string var params = {}, queryString = location.hash.substring(1), regex = /([^&amp;=]+)=([^&amp;]*)/g, m; while (m = regex.exec(queryString)) { params[decodeURIComponent(m[1])] = decodeURIComponent(m[2]); } // And send the token over to the server var req = new XMLHttpRequest(); // consider using POST so query isn't logged req.open('GET', 'https://' + window.location.host + '/catchtoken?' + queryString, true); req.onreadystatechange = function (e) { if (req.readyState == 4) { if(req.status == 200){ window.location = params['state'] } else if(req.status == 400) { alert('There was an error processing the token.') } else { alert('something else other than 200 was returned') } } }; req.send(null);</pre></div> </div> </div> </div> <p> This code sends the parameters received on the fragment to the server using XMLHttpRequest and writes the access token to local storage in the browser. The latter is an optional step, and depends on whether or not the application requires other Javascript code to make calls to a Google API. Also note that this code sends the parameters to the /accepttoken endpoint, and they are sent over an HTTPs channel. </p> <h4>Error Response</h4> <p> The Google Authorization Server returns an error if the user did not grant your application the permissions it requested. The error is returned in the fragment. </p> <p> An example error response is shown below: </p> <div class="CodeRay"> <div class="code"><div class="CodeRay"> <div class="code"><pre><a href="https://oauth2-login-demo.appspot.com/oauthcallback#error=access_denied">https://oauth2-login-demo.appspot.com/oauthcallback#error=access_denied</a></pre></div> </div> </div> </div></blockquote> <div class="posterous_quote_citation">via <a href="http://code.google.com/intl/ja/apis/accounts/docs/OAuth2UserAgent.html#validatetoken">code.google.com</a></div> </div><p> <a href="http://posterous.com">Posted via email</a> from <a href="http://lafoglia.posterous.com/handling-the-response-using-oauth-20-for-clie">Notes for Digital Identities and Computing in the Cloud</a> | <a href="http://lafoglia.posterous.com/handling-the-response-using-oauth-20-for-clie#comment"><span>Comment »</span></a> </p></div>Mon, 20 Feb 2012 16:46:41 GMThttp://hdknr.soup.io/post/232901571/Handling-the-Response-Using-OAuth-2-0urn:www-soup-io:1:232901571regular {"tags":[],"type":"regular","title":"UMA Core: 3.1.3. Requester Presents a Valid Access Token","source":null,"body":"\u003Cp\u003E\u003C/p\u003E\u003Cdiv class=\"posterous_autopost\"\u003E \u003Ctable width=\"100%\"\u003E\u003Ctr\u003E\u003Ctd\u003E \u003Ch3\u003E\u003Ca href=\"http://www.evernote.com/\"\u003EFrom Evernote:\u003C/a\u003E\u003C/h3\u003E \u003C/td\u003E \u003C/tr\u003E\u003Ctr\u003E\u003Ctd\u003E \u003Ch1\u003EUMA Core: 3.1.3. Requester Presents a Valid Access Token\u003C/h1\u003E Clipped from: \u003Ca href=\"http://tools.ietf.org/id/draft-hardjono-oauth-umacore-03.txt#\"\u003E\u003C/a\u003E\u003Ca href=\"http://tools.ietf.org/id/draft-hardjono-oauth-umacore-03.txt#\"\u003Ehttp://tools.ietf.org/id/draft-hardjono-oauth-umacore-03.txt#\u003C/a\u003E \u003C/td\u003E \u003C/tr\u003E\u003C/table\u003E\u003Cdiv class=\"ennote\"\u003E \u003Cdiv class=\"CodeRay\"\u003E \u003Cdiv class=\"code\"\u003E\u003Cpre\u003E3.1.3. Requester Presents a Valid Access Token If the requester presents an access token with its request, and the token is valid (see Section 3.3), the host examines the token status description. 3.1.3.1. Requester's Token Has Insufficient Permission If the token status is not associated with any currently valid permission that applies to the scope of access attempted by the requester, the Host SHOULD register a permission with the AM (see Section 3.4) that would suffice for that scope of access, and then respond to the requester with the HTTP 403 (Forbidden) status code, along with providing the AM's URI in the header of the message and the permission ticket it just received from the AM in the body of the JSON form. For example: HTTP/1.1 403 Forbidden WWW-Authenticate: UMA realm=\"example\", host_id=\"photoz.example.com\", am_uri=\"http://am.example.com\" { \"ticket\": \"016f84e8-f9b9-11e0-bd6f-0021cc6004de\" }\u003C/pre\u003E\u003C/div\u003E \u003C/div\u003E \u003C/div\u003E\u003Cp\u003E \u003Ca href=\"http://posterous.com\"\u003EPosted via email\u003C/a\u003E from \u003Ca href=\"http://lafoglia.posterous.com/uma-core-313-requester-presents-a-valid-acces\"\u003ENotes for Digital Identities and Computing in the Cloud\u003C/a\u003E\u00a0|\u00a0\u003Ca href=\"http://lafoglia.posterous.com/uma-core-313-requester-presents-a-valid-acces#comment\"\u003E\u003Cspan\u003EComment\u00a0\u00bb\u003C/span\u003E\u003C/a\u003E \u003C/p\u003E\u003C/div\u003E\u003Cp\u003E\u003C/p\u003E"} <p></p><div class="posterous_autopost"> <h3><a href="http://www.evernote.com/">From Evernote:</a></h3> <h1>UMA Core: 3.1.3. Requester Presents a Valid Access Token</h1> Clipped from: <a href="http://tools.ietf.org/id/draft-hardjono-oauth-umacore-03.txt#"></a><a href="http://tools.ietf.org/id/draft-hardjono-oauth-umacore-03.txt#">http://tools.ietf.org/id/draft-hardjono-oauth-umacore-03.txt#</a> <div class="ennote"> <div class="CodeRay"> <div class="code"><pre>3.1.3. Requester Presents a Valid Access Token If the requester presents an access token with its request, and the token is valid (see Section 3.3), the host examines the token status description. 3.1.3.1. Requester's Token Has Insufficient Permission If the token status is not associated with any currently valid permission that applies to the scope of access attempted by the requester, the Host SHOULD register a permission with the AM (see Section 3.4) that would suffice for that scope of access, and then respond to the requester with the HTTP 403 (Forbidden) status code, along with providing the AM's URI in the header of the message and the permission ticket it just received from the AM in the body of the JSON form. For example: HTTP/1.1 403 Forbidden WWW-Authenticate: UMA realm="example", host_id="photoz.example.com", am_uri="http://am.example.com" { "ticket": "016f84e8-f9b9-11e0-bd6f-0021cc6004de" }</pre></div> </div> </div><p> <a href="http://posterous.com">Posted via email</a> from <a href="http://lafoglia.posterous.com/uma-core-313-requester-presents-a-valid-acces">Notes for Digital Identities and Computing in the Cloud</a> | <a href="http://lafoglia.posterous.com/uma-core-313-requester-presents-a-valid-acces#comment"><span>Comment »</span></a> </p></div><p></p>Mon, 20 Feb 2012 00:03:26 GMThttp://hdknr.soup.io/post/232753780/UMA-Core-3-1-3-Requester-Presentsurn:www-soup-io:1:232753780regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 19 Feb 2012 12:00:00 GMThttp://hdknr.soup.io/post/234009020/Top-5-artists-this-weekurn:www-soup-io:1:234009020regular {"tags":[],"type":"regular","title":"User-Managed Access (UMA) Core Protocol ","source":null,"body":"\u003Cp\u003E\u003C/p\u003E\u003Cdiv class=\"posterous_autopost\"\u003E\u003Cdiv class=\"posterous_bookmarklet_entry\"\u003E \u003Cdiv class=\"p_embed p_image_embed\"\u003E \u003Cimg src=\"http://op.deb/docs/_images/seqdiag-1d9ce7e735186b58191e4812736f797a2c24103d.png\" alt=\"\" /\u003E\u003C/div\u003E \u003Cdiv class=\"posterous_quote_citation\"\u003Evia \u003Ca href=\"http://op.deb/docs/uma_core.html#uma-core-3-5\"\u003Eop.deb\u003C/a\u003E\u003C/div\u003E \u003C/div\u003E\u003Cp\u003E \u003Ca href=\"http://posterous.com\"\u003EPosted via email\u003C/a\u003E from \u003Ca href=\"http://lafoglia.posterous.com/user-managed-access-uma-core-protocol\"\u003ENotes for Digital Identities and Computing in the Cloud\u003C/a\u003E\u00a0|\u00a0\u003Ca href=\"http://lafoglia.posterous.com/user-managed-access-uma-core-protocol#comment\"\u003E\u003Cspan\u003EComment\u00a0\u00bb\u003C/span\u003E\u003C/a\u003E \u003C/p\u003E\u003C/div\u003E\u003Cp\u003E\u003C/p\u003E"} <p></p><div class="posterous_autopost"><div class="posterous_bookmarklet_entry"> <div class="p_embed p_image_embed"> <img src="http://op.deb/docs/_images/seqdiag-1d9ce7e735186b58191e4812736f797a2c24103d.png" alt="" /></div> <div class="posterous_quote_citation">via <a href="http://op.deb/docs/uma_core.html#uma-core-3-5">op.deb</a></div> </div><p> <a href="http://posterous.com">Posted via email</a> from <a href="http://lafoglia.posterous.com/user-managed-access-uma-core-protocol">Notes for Digital Identities and Computing in the Cloud</a> | <a href="http://lafoglia.posterous.com/user-managed-access-uma-core-protocol#comment"><span>Comment »</span></a> </p></div><p></p>Mon, 13 Feb 2012 08:24:20 GMThttp://hdknr.soup.io/post/231448973/User-Managed-Access-UMA-Core-Protocolurn:www-soup-io:1:231448973regular {"tags":[],"type":"regular","title":"User-Managed Access (UMA) Core Protocol \u2014 accounts 1.0 documentation","source":null,"body":"\u003Cp\u003E\u003C/p\u003E\u003Cdiv class=\"posterous_autopost\"\u003E\u003Cdiv class=\"posterous_bookmarklet_entry\"\u003E \u003Cdiv class=\"p_embed p_image_embed\"\u003E \u003Cimg src=\"http://op.deb/docs/_images/seqdiag-8a1e993eb8696c73f552f25b65b4a2d59ab1f378.png\" alt=\"\" /\u003E\u003C/div\u003E \u003Cdiv class=\"posterous_quote_citation\"\u003Evia \u003Ca href=\"http://op.deb/docs/uma_core.html#uma-core-3-5\"\u003Eop.deb\u003C/a\u003E\u003C/div\u003E \u003C/div\u003E\u003Cp\u003E \u003Ca href=\"http://posterous.com\"\u003EPosted via email\u003C/a\u003E from \u003Ca href=\"http://lafoglia.posterous.com/user-managed-access-uma-core-protocol-account\"\u003ENotes for Digital Identities and Computing in the Cloud\u003C/a\u003E\u00a0|\u00a0\u003Ca href=\"http://lafoglia.posterous.com/user-managed-access-uma-core-protocol-account#comment\"\u003E\u003Cspan\u003EComment\u00a0\u00bb\u003C/span\u003E\u003C/a\u003E \u003C/p\u003E\u003C/div\u003E\u003Cp\u003E\u003C/p\u003E"} <p></p><div class="posterous_autopost"><div class="posterous_bookmarklet_entry"> <div class="p_embed p_image_embed"> <img src="http://op.deb/docs/_images/seqdiag-8a1e993eb8696c73f552f25b65b4a2d59ab1f378.png" alt="" /></div> <div class="posterous_quote_citation">via <a href="http://op.deb/docs/uma_core.html#uma-core-3-5">op.deb</a></div> </div><p> <a href="http://posterous.com">Posted via email</a> from <a href="http://lafoglia.posterous.com/user-managed-access-uma-core-protocol-account">Notes for Digital Identities and Computing in the Cloud</a> | <a href="http://lafoglia.posterous.com/user-managed-access-uma-core-protocol-account#comment"><span>Comment »</span></a> </p></div><p></p>Mon, 13 Feb 2012 08:20:49 GMThttp://hdknr.soup.io/post/231448976/User-Managed-Access-UMA-Core-Protocol-accountsurn:www-soup-io:1:231448976regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 12 Feb 2012 12:00:00 GMThttp://hdknr.soup.io/post/231481710/Top-5-artists-this-weekurn:www-soup-io:1:231481710regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 05 Feb 2012 12:00:00 GMThttp://hdknr.soup.io/post/229461024/Top-5-artists-this-weekurn:www-soup-io:1:229461024regular {"tags":["\u901a\u5b66"],"type":"regular","title":"\u003Ca href=\"http://www.rioja.jp/?p=94\"\u003EFrozen\u003C/a\u003E","source":"http://www.rioja.jp/?p=94","body":"\u003Cdiv\u003E\u003Ca href=\"http://www.flickr.com/photos/hdknr/6818599255/\" title=\"Friday : Frozen, TEPIA\"\u003E\u003Cimg src=\"http://farm8.staticflickr.com/7004/6818599255_9a2d7828c7.jpg\" alt=\"Friday : Frozen, TEPIA by hidelafoglia\" /\u003E\u003C/a\u003E\u003Cbr /\u003E\u003Cspan\u003E\u003Ca href=\"http://www.flickr.com/photos/hdknr/6818599255/\"\u003EFriday : Frozen, TEPIA\u003C/a\u003E, a photo by \u003Ca href=\"http://www.flickr.com/photos/hdknr/\"\u003Ehidelafoglia\u003C/a\u003E on Flickr.\u003C/span\u003E\u003C/div\u003E\n\u003Cp\u003E\u5148\u9031\u3050\u3089\u3044\u304b\u3089\u3059\u3054\u304f\u5bd2\u304f\u306a\u3063\u3066\u3001\u964d\u3063\u305f\u96ea\u304c\u306a\u304b\u306a\u304b\u6d88\u3048\u306a\u3044\u3067\u6b8b\u3063\u3066\u3044\u307e\u3059\u3002\u901a\u5b66\u8def\u3067\u6b8b\u3063\u3066\u96ea\u3067\uff12\u4eba\u3067\u30a2\u30b7\u3067\u30a2\u30a4\u30b9\u30db\u30c3\u30b1\u30fc\u3057\u306a\u304c\u3089\u99c5\u307e\u3067\u304c\u30d6\u30fc\u30e0\u3067\u3059\u3002\u003C/p\u003E\n\u003Cp\u003E\u4eca\u671d\u306f\u7279\u306b\u5bd2\u304f\u3066TEPIA\u306e\u6c60\u306e\u6c37\u304c\u4e00\u756a\u5e83\u304b\u3063\u305f\u3002\u003C/p\u003E\n\u003Cp\u003E\u4eca\u306e\u3068\u3053\u308d\u30a4\u30f3\u30d5\u30eb\u30a8\u30f3\u30b6\u306b\u3082\u306a\u3063\u3066\u3044\u306a\u3044\u306e\u3067\u3001\u3053\u306e\u307e\u307e\u6625\u4f11\u307f\u307e\u3067\u75c5\u6c17\u7121\u3057\u3067\u884c\u304d\u305f\u3044\u3067\u3059\u306d\u3002\u003C/p\u003E"} <div><a href="http://www.flickr.com/photos/hdknr/6818599255/" title="Friday : Frozen, TEPIA"><img src="http://farm8.staticflickr.com/7004/6818599255_9a2d7828c7.jpg" alt="Friday : Frozen, TEPIA by hidelafoglia" /></a><br /><span><a href="http://www.flickr.com/photos/hdknr/6818599255/">Friday : Frozen, TEPIA</a>, a photo by <a href="http://www.flickr.com/photos/hdknr/">hidelafoglia</a> on Flickr.</span></div> <p>先週ぐらいからすごく寒くなって、降った雪がなかなか消えないで残っています。通学路で残って雪で２人でアシでアイスホッケーしながら駅までがブームです。</p> <p>今朝は特に寒くてTEPIAの池の氷が一番広かった。</p> <p>今のところインフルエンザにもなっていないので、このまま春休みまで病気無しで行きたいですね。</p>Sat, 04 Feb 2012 16:44:41 GMThttp://hdknr.soup.io/post/229328072/Frozenurn:www-soup-io:1:229328072regular通学 {"tags":["\u304a\u8a95\u751f\u65e5","\u30d1\u30fc\u30c6\u30a3"],"type":"regular","title":"\u003Ca href=\"http://www.rioja.jp/?p=97\"\u003EBirthday Party\u003C/a\u003E","source":"http://www.rioja.jp/?p=97","body":"\u003Cdiv\u003E\u003Ca href=\"http://www.flickr.com/photos/hdknr/6818737627/\" title=\"Saturday : My Birthday Party\"\u003E\u003Cimg src=\"http://farm8.staticflickr.com/7143/6818737627_686e4594af.jpg\" alt=\"Saturday : My Birthday Party by hidelafoglia\" /\u003E\u003C/a\u003E\u003Cbr /\u003E\u003Cspan\u003E\u003Ca href=\"http://www.flickr.com/photos/hdknr/6818737627/\"\u003ESaturday : My Birthday Party\u003C/a\u003E, a photo by \u003Ca href=\"http://www.flickr.com/photos/hdknr/\"\u003Ehidelafoglia\u003C/a\u003E on Flickr.\u003C/span\u003E\u003C/div\u003E\n\u003Cp\u003E\u4eca\u65e5\u306fRi\u306f\u5b66\u6821\u3002 Mi\u306f\u89aa\u4ea4\u306e\u3042\u308b\u4f1a\u793e\u306e\u4e3b\u50ac\u306e\u5c31\u8077\u6d3b\u52d5\u30bb\u30df\u30ca\u30fc\u3067\u3001\u5b66\u751f\u3055\u3093\u306e\u524d\u3067\u30d1\u30cd\u30eb\u30c7\u30a3\u30b9\u30ab\u30c3\u30b7\u30e7\u30f3\u3067\u79cb\u8449\u539f\u3067\u4e00\u65e5\u3059\u3054\u3057\u307e\u3057\u305f\u3002\u003C/p\u003E\n\u003Cp\u003E\u3068\u3066\u3082\u3044\u3044\u30a4\u30d9\u30f3\u30c8\u3067\u3001\u5b66\u751f\u3055\u3093\u3082\u559c\u3093\u3067\u3044\u305f\u3088\u3046\u3067\u3059\u3002\u4f01\u753b\u3057\u305f\u793e\u9577\u306f\u3059\u3070\u3089\u3057\u3044\u3067\u3059\u3002Mi\u3082\u4e00\u7dd2\u306b\u30c7\u30a3\u30b9\u30ab\u30c3\u30b7\u30e7\u30f3\u3057\u305f\u98df\u54c1\u4f1a\u793e\u306e\u793e\u9577\u3084\u3001\u5916\u8cc7\u7cfb\u4f01\u696d\u306e\u30de\u30fc\u30b1\u30c6\u30a3\u30f3\u30b0\u30c7\u30a3\u30ec\u30af\u30bf\u30fc\u306e\u304a\u8a71\u306b\u611f\u9298\u3057\u305f\u308a\u3067\u3001\u8a95\u751f\u65e5\u306b\u826f\u3044\u4f53\u9a13\u3092\u3057\u305f\u3068\u601d\u3063\u3066\u3044\u307e\u3059\u3002\u003C/p\u003E\n\u003Cp\u003E\u6253\u3061\u4e0a\u3052\u306b\u53c2\u52a0\u3057\u3066\u3001\u904b\u55b6\u4f01\u753b\u306e\u4eba\u304b\u3089\u57fa\u8abf\u306a\u4f53\u9a13\u3092\u4f3a\u3063\u305f\u308a\u3067\u3044\u3064\u306e\u9593\u306b\u304b\u6642\u9593\u306b\u3002\u304a\u5148\u306b\u5916\u3055\u305b\u3066\u3044\u305f\u3060\u304d\u30bf\u30af\u30b7\u30fc\u3067\u6025\u3044\u3067\u8fd4\u308a\u307e\u3057\u305f\u3002\u003C/p\u003E\n\u003Cp\u003E\u4eca\u5e74\u306f\u3001\u30ab\u30c3\u30c8\u3057\u305f\u679c\u7269\u306bHAPPY BIRTHDAY\u306e\u30ed\u30fc\u30bd\u30af\u3067\u3057\u305f\u3002Ri\u3055\u3093\u306f\u677f\u30c1\u30e7\u30b3\u306e\u30c7\u30b3\u30ec\u30fc\u30b7\u30e7\u30f3\u3068\u3001\u524d\u304b\u3089\u66f8\u3044\u3066\u3044\u305f\u7d75\u3092\u4ed5\u4e0a\u3052\u3066\u304f\u308c\u307e\u3057\u305f\u3002\u3042\u308a\u304c\u3068\u3046\uff01\u003C/p\u003E\n\u003Cp\u003E\u30ed\u30fc\u30b9\u30c8\u30d3\u30fc\u30d5\u306fRi\u304c\u5168\u3066\u5e73\u3089\u3052\u3066\u3057\u307e\u3044\u307e\u3057\u305f\u3002w\u003C/p\u003E\n\u003Cp\u003E\u826f\u3044\u4e00\u5e74\u306b\u306a\u308a\u305d\u3046\u3067\u3059\u3002\u003C/p\u003E"} <div><a href="http://www.flickr.com/photos/hdknr/6818737627/" title="Saturday : My Birthday Party"><img src="http://farm8.staticflickr.com/7143/6818737627_686e4594af.jpg" alt="Saturday : My Birthday Party by hidelafoglia" /></a><br /><span><a href="http://www.flickr.com/photos/hdknr/6818737627/">Saturday : My Birthday Party</a>, a photo by <a href="http://www.flickr.com/photos/hdknr/">hidelafoglia</a> on Flickr.</span></div> <p>今日はRiは学校。 Miは親交のある会社の主催の就職活動セミナーで、学生さんの前でパネルディスカッションで秋葉原で一日すごしました。</p> <p>とてもいいイベントで、学生さんも喜んでいたようです。企画した社長はすばらしいです。Miも一緒にディスカッションした食品会社の社長や、外資系企業のマーケティングディレクターのお話に感銘したりで、誕生日に良い体験をしたと思っています。</p> <p>打ち上げに参加して、運営企画の人から基調な体験を伺ったりでいつの間にか時間に。お先に外させていただきタクシーで急いで返りました。</p> <p>今年は、カットした果物にHAPPY BIRTHDAYのローソクでした。Riさんは板チョコのデコレーションと、前から書いていた絵を仕上げてくれました。ありがとう！</p> <p>ローストビーフはRiが全て平らげてしまいました。w</p> <p>良い一年になりそうです。</p>Fri, 03 Feb 2012 16:52:57 GMThttp://hdknr.soup.io/post/229328073/Birthday-Partyurn:www-soup-io:1:229328073regularお誕生日パーティ {"tags":[],"type":"regular","title":"[Openid-specs-ab] FW: Initial Versions of JOSE Specs submitted","source":null,"body":"\u003Cp\u003E\u003C/p\u003E\u003Cdiv class=\"posterous_autopost\"\u003E \u003Ctable width=\"100%\"\u003E\u003Ctr\u003E\u003Ctd\u003E \u003Ch3\u003E\u003Ca href=\"http://www.evernote.com/\"\u003EFrom Evernote:\u003C/a\u003E\u003C/h3\u003E \u003C/td\u003E \u003C/tr\u003E\u003Ctr\u003E\u003Ctd\u003E \u003Ch1\u003E[Openid-specs-ab] FW: Initial Versions of JOSE Specs submitted\u003C/h1\u003E Clipped from: \u003Ca href=\"http://lists.openid.net/pipermail/openid-specs-ab/Week-of-Mon-20120116/001437.html\"\u003E\u003C/a\u003E\u003Ca href=\"http://lists.openid.net/pipermail/openid-specs-ab/Week-of-Mon-20120116/001437.html\"\u003Ehttp://lists.openid.net/pipermail/openid-specs-ab/Week-of-Mon-20120116/001437.html\u003C/a\u003E \u003C/td\u003E \u003C/tr\u003E\u003C/table\u003E\u003Cdiv class=\"ennote\"\u003E \u003Cdiv class=\"CodeRay\"\u003E \u003Cdiv class=\"code\"\u003E\u003Cpre\u003EI've submitted initial IETF versions of the JOSE\u0026lt;http://datatracker.ietf.org/wg/jose/\u0026gt; specs. Once the postings are approved by the chairs, they'll appear as IETF -00 drafts. These specs are: * JSON Web Signature (JWS) - Digital signature/HMAC specification * JSON Web Encryption (JWE) - Encryption specification * JSON Web Key (JWK) - Public key specification * JSON Web Algorithms (JWA) - Algorithms and identifiers specification They are refactored from the previous individual submission versions to move algorithms and identifiers into a separate specification, per the working group charter\u0026lt;http://datatracker.ietf.org/wg/jose/charter/\u0026gt;. Also, per the working group's input, the terminology usage has been changed to no longer call both digital signatures and HMACs \"signatures\". The JOSE versions contain no normative changes from the individual submission versions. I've also posted submitted drafts at these locations: * \u003Ca href=\"http://self-issued.info/docs/draft-ietf-jose-json-web-signature-00.html\"\u003Ehttp://self-issued.info/docs/draft-ietf-jose-json-web-signature-00.html\u003C/a\u003E * \u003Ca href=\"http://self-issued.info/docs/draft-ietf-jose-json-web-encryption-00.html\"\u003Ehttp://self-issued.info/docs/draft-ietf-jose-json-web-encryption-00.html\u003C/a\u003E * \u003Ca href=\"http://self-issued.info/docs/draft-ietf-jose-json-web-key-00.html\"\u003Ehttp://self-issued.info/docs/draft-ietf-jose-json-web-key-00.html\u003C/a\u003E * \u003Ca href=\"http://self-issued.info/docs/draft-ietf-jose-json-web-algorithms-00.html\"\u003Ehttp://self-issued.info/docs/draft-ietf-jose-json-web-algorithms-00.html\u003C/a\u003E\u003C/pre\u003E\u003C/div\u003E \u003C/div\u003E \u003C/div\u003E\u003Cp\u003E \u003Ca href=\"http://posterous.com\"\u003EPosted via email\u003C/a\u003E from \u003Ca href=\"http://lafoglia.posterous.com/openid-specs-ab-fw-initial-versions-of-jose-s\"\u003ENotes for Digital Identities and Computing in the Cloud\u003C/a\u003E\u00a0|\u00a0\u003Ca href=\"http://lafoglia.posterous.com/openid-specs-ab-fw-initial-versions-of-jose-s#comment\"\u003E\u003Cspan\u003EComment\u00a0\u00bb\u003C/span\u003E\u003C/a\u003E \u003C/p\u003E\u003C/div\u003E\u003Cp\u003E\u003C/p\u003E"} <p></p><div class="posterous_autopost"> <h3><a href="http://www.evernote.com/">From Evernote:</a></h3> <h1>[Openid-specs-ab] FW: Initial Versions of JOSE Specs submitted</h1> Clipped from: <a href="http://lists.openid.net/pipermail/openid-specs-ab/Week-of-Mon-20120116/001437.html"></a><a href="http://lists.openid.net/pipermail/openid-specs-ab/Week-of-Mon-20120116/001437.html">http://lists.openid.net/pipermail/openid-specs-ab/Week-of-Mon-20120116/001437.html</a> <div class="ennote"> <div class="CodeRay"> <div class="code"><pre>I've submitted initial IETF versions of the JOSE&lt;http://datatracker.ietf.org/wg/jose/&gt; specs. Once the postings are approved by the chairs, they'll appear as IETF -00 drafts. These specs are: * JSON Web Signature (JWS) - Digital signature/HMAC specification * JSON Web Encryption (JWE) - Encryption specification * JSON Web Key (JWK) - Public key specification * JSON Web Algorithms (JWA) - Algorithms and identifiers specification They are refactored from the previous individual submission versions to move algorithms and identifiers into a separate specification, per the working group charter&lt;http://datatracker.ietf.org/wg/jose/charter/&gt;. Also, per the working group's input, the terminology usage has been changed to no longer call both digital signatures and HMACs "signatures". The JOSE versions contain no normative changes from the individual submission versions. I've also posted submitted drafts at these locations: * <a href="http://self-issued.info/docs/draft-ietf-jose-json-web-signature-00.html">http://self-issued.info/docs/draft-ietf-jose-json-web-signature-00.html</a> * <a href="http://self-issued.info/docs/draft-ietf-jose-json-web-encryption-00.html">http://self-issued.info/docs/draft-ietf-jose-json-web-encryption-00.html</a> * <a href="http://self-issued.info/docs/draft-ietf-jose-json-web-key-00.html">http://self-issued.info/docs/draft-ietf-jose-json-web-key-00.html</a> * <a href="http://self-issued.info/docs/draft-ietf-jose-json-web-algorithms-00.html">http://self-issued.info/docs/draft-ietf-jose-json-web-algorithms-00.html</a></pre></div> </div> </div><p> <a href="http://posterous.com">Posted via email</a> from <a href="http://lafoglia.posterous.com/openid-specs-ab-fw-initial-versions-of-jose-s">Notes for Digital Identities and Computing in the Cloud</a> | <a href="http://lafoglia.posterous.com/openid-specs-ab-fw-initial-versions-of-jose-s#comment"><span>Comment »</span></a> </p></div><p></p>Wed, 01 Feb 2012 09:11:23 GMThttp://hdknr.soup.io/post/228066084/Openid-specs-ab-FW-Initial-Versions-ofurn:www-soup-io:1:228066084regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 29 Jan 2012 12:00:00 GMThttp://hdknr.soup.io/post/227983844/Top-5-artists-this-weekurn:www-soup-io:1:227983844regular {"tags":[],"type":"regular","title":"Guide to Running a User Account System (Google)","source":null,"body":"\u003Cdiv class=\"posterous_autopost\"\u003E\u003Cdiv class=\"posterous_bookmarklet_entry\"\u003E \u003Cblockquote class=\"posterous_long_quote\"\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.5sdmx6grez5d\" class=\"c0\"\u003EIntroduction: User Account Systems\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.fvyllnfjm3eo\" class=\"c0\"\u003EThe hack that makes Internet Identity possible\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.ku69khqfd0lw\" class=\"c0\"\u003EWhich face are you presenting to the world?\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.trdddnqrp8eq\" class=\"c0\"\u003EHuman -\u0026gt; Emails -\u0026gt; Local IDs -\u0026gt; Passwords\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.dtba79gdusrx\" class=\"c0\"\u003EThe Weakest link\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.fuzwx28sntfk\" class=\"c0\"\u003ESo what happened in 2008?\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.gtb2mofp1udm\" class=\"c0\"\u003ESecure mashups\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.bcdfw6t4bz2b\" class=\"c0\"\u003EChapter 1: Account Chooser\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.ebwnc8k2u2x4\" class=\"c0\"\u003ERequirements\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.dovqxaduvj9h\" class=\"c0\"\u003EThe Account Chooser Experience\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.f5k9fhildw3f\" class=\"c0\"\u003ECentral Account Chooser\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.q0kbsg9w4crq\" class=\"c0\"\u003ELocal Account Chooser\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.olhj69xp63p3\" class=\"c0\"\u003ELocal + Central\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.j5ticrw2sdmc\" class=\"c0\"\u003EEmail providers and Account Choosers\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.w5g8k8w9xsrd\" class=\"c0\"\u003EPasswords and Account Choosers\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.k68gkmcrea0\" class=\"c0\"\u003EChapter 2: Mobile/Desktop Apps\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.scy470vzprmu\" class=\"c0\"\u003EChapter 3: What is an Identity Provider?\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.moajj1qnb85l\" class=\"c0\"\u003EChapter 4: Baby steps to passwordless login\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.2vrorzsu8ugy\" class=\"c0\"\u003EChapter 5: Identity Providers and Email Providers\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.xccayd4iz4jr\" class=\"c0\"\u003EAccount Chooser without passwords\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.i2ivn11phwa5\" class=\"c0\"\u003EThe Email Attribute\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.xf8ko1m6on85\" class=\"c0\"\u003EFull Rollout\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.p5jbzpjfhnnl\" class=\"c0\"\u003ELogin with a button\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.1oahkkbcagfq\" class=\"c0\"\u003ESession Lifetime\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c14\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.6ieru32kn3pu\" class=\"c0\"\u003EPersistent or Session Cookies\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c14\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.djqyf7p54941\" class=\"c0\"\u003ECookie lifetime\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c14\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.nhuxdso7is3l\" class=\"c0\"\u003ESingle Sign Out\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.vvm416a7mmxs\" class=\"c0\"\u003EChapter 6: Popular Identity Providers and Social Login\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.w2ej47kixpv6\" class=\"c0\"\u003EThe good, the bad, and the ugly\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.8squ7wfql5fj\" class=\"c0\"\u003EAccount Chooser and Popular Identity Providers\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.nvikx7t9kmsp\" class=\"c0\"\u003ELogin with a button\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.q1ihw0o48zbk\" class=\"c0\"\u003EAccount Linking Wizard\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.zdnc3p1vcqdo\" class=\"c0\"\u003EChosen account has no IDP\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.7s4tdf2k0o90\" class=\"c0\"\u003EIDPs that do not assert Email address\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.g53u0yt0mek9\" class=\"c0\"\u003EPer-RP IDs\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.t79aq7h674l6\" class=\"c0\"\u003EChapter 7: Consuming APIs\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.dk1wqs1rggbu\" class=\"c0\"\u003EChapter 8: Local Social Graph\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.n02y015mglor\" class=\"c0\"\u003EChapter 9: Certification of Providers\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.fuktznu9g0jq\" class=\"c0\"\u003EChapter 10: Exposing APIs\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.17dfxtorehsj\" class=\"c0\"\u003EChapter 11: Relationship Managers\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.i9etp1emlms9\" class=\"c0\"\u003EWhat are the advantages?\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.pzxecdyj1a7i\" class=\"c0\"\u003EExamples\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.z9m9j2q8yks8\" class=\"c0\"\u003EChapter 12: Relationship Guides\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.kt6779wovmct\" class=\"c0\"\u003EChapter 13: Identity Verification and Attribute Providers\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.rayc0ikroefp\" class=\"c0\"\u003EChapter 14: Stronger authentication for users\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.xdpbu3o5i8ug\" class=\"c0\"\u003EPhishing protection\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.hn1ktulvw7jv\" class=\"c0\"\u003EMixed Strong Authentication\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.hiik54ox5mwa\" class=\"c0\"\u003EEconomics of consumer strong authentication\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.38i6ptlnvgnz\" class=\"c0\"\u003EChapter 15: Stronger authentication for robots\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c10\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.1yz87cmjnwjb\" class=\"c0\"\u003ERobots and Dynamic Registration\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c5 c11\"\u003E\u003Cspan class=\"c4\"\u003E\u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.ptiaob72kdy4\" class=\"c0\"\u003EChapter 16: Conclusion\u003C/a\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp\u003E\u003Cspan\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c1\"\u003E\u003Cspan\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c1\"\u003E\u003Cspan\u003E\u003C/span\u003E\u003C/p\u003E\u003Cp class=\"c1\"\u003E\u003Cspan\u003E\u003C/span\u003E\u003C/p\u003E\u003Chr /\u003E\u003Cp class=\"c1\"\u003E\u003Cspan\u003E\u003C/span\u003E\u003C/p\u003E\u003Ch1 class=\"c5\"\u003E\u003Ca name=\"h.5sdmx6grez5d\"\u003E\u003C/a\u003E\u003Cspan\u003E\u003C/span\u003E\u003C/h1\u003E\u003C/blockquote\u003E \u003Cdiv class=\"posterous_quote_citation\"\u003Evia \u003Ca href=\"https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU\"\u003Edocs.google.com\u003C/a\u003E\u003C/div\u003E \u003C/div\u003E\u003Cp\u003E \u003Ca href=\"http://posterous.com\"\u003EPosted via email\u003C/a\u003E from \u003Ca href=\"http://lafoglia.posterous.com/guide-to-running-a-user-account-system-google\"\u003ENotes for Digital Identities and Computing in the Cloud\u003C/a\u003E\u00a0|\u00a0\u003Ca href=\"http://lafoglia.posterous.com/guide-to-running-a-user-account-system-google#comment\"\u003E\u003Cspan\u003EComment\u00a0\u00bb\u003C/span\u003E\u003C/a\u003E \u003C/p\u003E\u003C/div\u003E"} <div class="posterous_autopost"><div class="posterous_bookmarklet_entry"> <blockquote class="posterous_long_quote"><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.5sdmx6grez5d" class="c0">Introduction: User Account Systems</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.fvyllnfjm3eo" class="c0">The hack that makes Internet Identity possible</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.ku69khqfd0lw" class="c0">Which face are you presenting to the world?</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.trdddnqrp8eq" class="c0">Human -&gt; Emails -&gt; Local IDs -&gt; Passwords</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.dtba79gdusrx" class="c0">The Weakest link</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.fuzwx28sntfk" class="c0">So what happened in 2008?</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.gtb2mofp1udm" class="c0">Secure mashups</a></span></p><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.bcdfw6t4bz2b" class="c0">Chapter 1: Account Chooser</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.ebwnc8k2u2x4" class="c0">Requirements</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.dovqxaduvj9h" class="c0">The Account Chooser Experience</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.f5k9fhildw3f" class="c0">Central Account Chooser</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.q0kbsg9w4crq" class="c0">Local Account Chooser</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.olhj69xp63p3" class="c0">Local + Central</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.j5ticrw2sdmc" class="c0">Email providers and Account Choosers</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.w5g8k8w9xsrd" class="c0">Passwords and Account Choosers</a></span></p><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.k68gkmcrea0" class="c0">Chapter 2: Mobile/Desktop Apps</a></span></p><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.scy470vzprmu" class="c0">Chapter 3: What is an Identity Provider?</a></span></p><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.moajj1qnb85l" class="c0">Chapter 4: Baby steps to passwordless login</a></span></p><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.2vrorzsu8ugy" class="c0">Chapter 5: Identity Providers and Email Providers</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.xccayd4iz4jr" class="c0">Account Chooser without passwords</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.i2ivn11phwa5" class="c0">The Email Attribute</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.xf8ko1m6on85" class="c0">Full Rollout</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.p5jbzpjfhnnl" class="c0">Login with a button</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.1oahkkbcagfq" class="c0">Session Lifetime</a></span></p><p class="c5 c14"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.6ieru32kn3pu" class="c0">Persistent or Session Cookies</a></span></p><p class="c5 c14"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.djqyf7p54941" class="c0">Cookie lifetime</a></span></p><p class="c5 c14"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.nhuxdso7is3l" class="c0">Single Sign Out</a></span></p><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.vvm416a7mmxs" class="c0">Chapter 6: Popular Identity Providers and Social Login</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.w2ej47kixpv6" class="c0">The good, the bad, and the ugly</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.8squ7wfql5fj" class="c0">Account Chooser and Popular Identity Providers</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.nvikx7t9kmsp" class="c0">Login with a button</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.q1ihw0o48zbk" class="c0">Account Linking Wizard</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.zdnc3p1vcqdo" class="c0">Chosen account has no IDP</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.7s4tdf2k0o90" class="c0">IDPs that do not assert Email address</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.g53u0yt0mek9" class="c0">Per-RP IDs</a></span></p><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.t79aq7h674l6" class="c0">Chapter 7: Consuming APIs</a></span></p><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.dk1wqs1rggbu" class="c0">Chapter 8: Local Social Graph</a></span></p><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.n02y015mglor" class="c0">Chapter 9: Certification of Providers</a></span></p><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.fuktznu9g0jq" class="c0">Chapter 10: Exposing APIs</a></span></p><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.17dfxtorehsj" class="c0">Chapter 11: Relationship Managers</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.i9etp1emlms9" class="c0">What are the advantages?</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.pzxecdyj1a7i" class="c0">Examples</a></span></p><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.z9m9j2q8yks8" class="c0">Chapter 12: Relationship Guides</a></span></p><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.kt6779wovmct" class="c0">Chapter 13: Identity Verification and Attribute Providers</a></span></p><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.rayc0ikroefp" class="c0">Chapter 14: Stronger authentication for users</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.xdpbu3o5i8ug" class="c0">Phishing protection</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.hn1ktulvw7jv" class="c0">Mixed Strong Authentication</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.hiik54ox5mwa" class="c0">Economics of consumer strong authentication</a></span></p><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.38i6ptlnvgnz" class="c0">Chapter 15: Stronger authentication for robots</a></span></p><p class="c5 c10"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.1yz87cmjnwjb" class="c0">Robots and Dynamic Registration</a></span></p><p class="c5 c11"><span class="c4"><a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU#h.ptiaob72kdy4" class="c0">Chapter 16: Conclusion</a></span></p><p><span></span></p><p class="c1"><span></span></p><p class="c1"><span></span></p><p class="c1"><span></span></p><hr /><p class="c1"><span></span></p><h1 class="c5"><a name="h.5sdmx6grez5d"></a><span></span></h1></blockquote> <div class="posterous_quote_citation">via <a href="https://docs.google.com/a/emirps.com/document/pub?id=1O7jyQLb7dW6EnJrFsWZDyh0Yq0aFJU5UJ4i5QzYlTjU">docs.google.com</a></div> </div><p> <a href="http://posterous.com">Posted via email</a> from <a href="http://lafoglia.posterous.com/guide-to-running-a-user-account-system-google">Notes for Digital Identities and Computing in the Cloud</a> | <a href="http://lafoglia.posterous.com/guide-to-running-a-user-account-system-google#comment"><span>Comment »</span></a> </p></div>Fri, 27 Jan 2012 16:40:49 GMThttp://hdknr.soup.io/post/226884964/Guide-to-Running-a-User-Account-Systemurn:www-soup-io:1:226884964regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 22 Jan 2012 12:00:00 GMThttp://hdknr.soup.io/post/226000567/Top-5-artists-this-weekurn:www-soup-io:1:226000567regular {"tags":["\u30d1\u30fc\u30c6\u30a3"],"type":"regular","title":"\u003Ca href=\"http://www.rioja.jp/?p=92\"\u003ECostco Party\u003C/a\u003E","source":"http://www.rioja.jp/?p=92","body":"\u003Cdiv\u003E\u003Ca href=\"http://www.flickr.com/photos/hdknr/6764629271/\" title=\"Saturday : Draemon\"\u003E\u003Cimg src=\"http://farm8.staticflickr.com/7142/6764629271_ba1378ab87.jpg\" alt=\"Saturday : Draemon by hidelafoglia\" /\u003E\u003C/a\u003E\u003Cbr /\u003E\u003Cspan\u003E\u003Ca href=\"http://www.flickr.com/photos/hdknr/6764629271/\"\u003ESaturday : Draemon\u003C/a\u003E, a photo by \u003Ca href=\"http://www.flickr.com/photos/hdknr/\"\u003Ehidelafoglia\u003C/a\u003E on Flickr.\u003C/span\u003E\u003C/div\u003E\n\u003Cp\u003E\u4eca\u5e74\u6700\u521d\u306eCOSTCO\u30d1\u30fc\u30c6\u30a3\u3002\u4eca\u65e5\u306fNe\u3068May \u30de\u30de\u3060\u3051\u3067\u3072\u308b\u304b\u3089\u8cb7\u3044\u51fa\u3057\u306a\u306e\u3067\u3001\u30e9\u30f3\u30c1\u306fRi\u3068\uff12\u4eba\u3067\u30d1\u30b9\u30bf\u98df\u3079\u306b\u884c\u304d\u307e\u3057\u305f\u3002\u003Cbr /\u003E\n\u5915\u65b9\u307e\u3067\uff12\u4eba\u3067\u904a\u3093\u3067\u3044\u307e\u3057\u305f\u304c\u3001Mi\u304c\u3046\u3068\u3046\u3068\u3002\u3002\u3002May\u3061\u3083\u3093\u304c\u5915\u65b9\u307e\u3067\u30d0\u30ec\u30fc\u306a\u306e\u3067\u305d\u308c\u307e\u3067\u5f85\u3061\u9060\u3057\u3044\u3088\u3046\u3067\u3059\u3002\u003C/p\u003E\n\u003Cp\u003E\u5915\u65b9\u3001\u6211\u304c\u5bb6\u306b\u5168\u54e1\u96c6\u5408\u3067\u30d1\u30fc\u30c6\u30a3\u3002\u4fdd\u80b2\u5712\u6642\u4ee3\u3068\u306f\u6253\u3063\u3066\u5909\u308f\u3063\u3066\u3001\u672c\u3092\u8aad\u307f\u51fa\u3057\u305f\u308a\u3068\u304b\u304a\u59c9\u3055\u3093\u306a\u904a\u3073\u304b\u305f\u306b\u306a\u3063\u3066\u3073\u3063\u304f\u308a\u3002\u003C/p\u003E\n\u003Cp\u003E\u5b66\u6821\u306f\u9055\u3046\u3051\u3069\u3001\u4eca\u5e74\u3082May\u3061\u3083\u3093\u3068\u306f\u904a\u3076\u3060\u308d\u3046\u306a\u3002Best Friend\u306a\u306e\u3067\u3002\u003C/p\u003E"} <div><a href="http://www.flickr.com/photos/hdknr/6764629271/" title="Saturday : Draemon"><img src="http://farm8.staticflickr.com/7142/6764629271_ba1378ab87.jpg" alt="Saturday : Draemon by hidelafoglia" /></a><br /><span><a href="http://www.flickr.com/photos/hdknr/6764629271/">Saturday : Draemon</a>, a photo by <a href="http://www.flickr.com/photos/hdknr/">hidelafoglia</a> on Flickr.</span></div> <p>今年最初のCOSTCOパーティ。今日はNeとMay ママだけでひるから買い出しなので、ランチはRiと２人でパスタ食べに行きました。<br /> 夕方まで２人で遊んでいましたが、Miがうとうと。。。Mayちゃんが夕方までバレーなのでそれまで待ち遠しいようです。</p> <p>夕方、我が家に全員集合でパーティ。保育園時代とは打って変わって、本を読み出したりとかお姉さんな遊びかたになってびっくり。</p> <p>学校は違うけど、今年もMayちゃんとは遊ぶだろうな。Best Friendなので。</p>Fri, 20 Jan 2012 16:37:34 GMThttp://hdknr.soup.io/post/229328074/Costco-Partyurn:www-soup-io:1:229328074regularパーティ {"tags":[],"type":"regular","title":"Connect Client Credentials Flow with JWT Assertion : #512 - Standard : 2.2 : \"two main paths\" means other flow can be used , or not ? \u2014 Bitbucket","source":null,"body":"\u003Cdiv class=\"posterous_autopost\"\u003E\u003Cdiv class=\"posterous_bookmarklet_entry\"\u003E \u003Cblockquote class=\"posterous_long_quote\"\u003E\u003Ca href=\"https://bitbucket.org/ve7jtb\"\u003EJohn Bradley\u003C/a\u003E / \u003Ca href=\"https://bitbucket.org/ve7jtb\"\u003Eve7jtb\u003C/a\u003E \u003Cp class=\"timestamps\"\u003Ewritten 2 hours ago\u003C/p\u003E \u003Cdiv class=\"issues-comment edit-comment sane-defaults sane-defaults-2\"\u003E \u003Cp\u003EYes the idea is that other flows like \u201cJSON Web Token (JWT) Bearer Token Profiles for OAuth 2.0\u201d can be used.\u003C/p\u003E \u003Cp\u003EA extension document probably needs to be written for each additional flow.\u003C/p\u003E\u003C/div\u003E\u003C/blockquote\u003E \u003Cdiv class=\"posterous_quote_citation\"\u003Evia \u003Ca href=\"https://bitbucket.org/openid/connect/issue/512/standard-22-two-main-paths-means-other#comment-980515\"\u003Ebitbucket.org\u003C/a\u003E\u003C/div\u003E \u003C/div\u003E\u003Cp\u003E \u003Ca href=\"http://posterous.com\"\u003EPosted via email\u003C/a\u003E from \u003Ca href=\"http://lafoglia.posterous.com/connect-client-credentials-flow-with-jwt-asse\"\u003ENotes for Digital Identities and Computing in the Cloud\u003C/a\u003E\u00a0|\u00a0\u003Ca href=\"http://lafoglia.posterous.com/connect-client-credentials-flow-with-jwt-asse#comment\"\u003E\u003Cspan\u003EComment\u00a0\u00bb\u003C/span\u003E\u003C/a\u003E \u003C/p\u003E\u003C/div\u003E"} <div class="posterous_autopost"><div class="posterous_bookmarklet_entry"> <blockquote class="posterous_long_quote"><a href="https://bitbucket.org/ve7jtb">John Bradley</a> / <a href="https://bitbucket.org/ve7jtb">ve7jtb</a> <p class="timestamps">written 2 hours ago</p> <div class="issues-comment edit-comment sane-defaults sane-defaults-2"> <p>Yes the idea is that other flows like “JSON Web Token (JWT) Bearer Token Profiles for OAuth 2.0” can be used.</p> <p>A extension document probably needs to be written for each additional flow.</p></div></blockquote> <div class="posterous_quote_citation">via <a href="https://bitbucket.org/openid/connect/issue/512/standard-22-two-main-paths-means-other#comment-980515">bitbucket.org</a></div> </div><p> <a href="http://posterous.com">Posted via email</a> from <a href="http://lafoglia.posterous.com/connect-client-credentials-flow-with-jwt-asse">Notes for Digital Identities and Computing in the Cloud</a> | <a href="http://lafoglia.posterous.com/connect-client-credentials-flow-with-jwt-asse#comment"><span>Comment »</span></a> </p></div>Fri, 20 Jan 2012 01:43:50 GMThttp://hdknr.soup.io/post/223374819/Connect-Client-Credentials-Flow-with-JWT-Assertionurn:www-soup-io:1:223374819regular {"tags":[],"type":"regular","title":"Assertion Flow in Connect ? ( Draft: OpenID Connect Standard 1.0 - draft 07 )","source":null,"body":"\u003Cdiv class=\"posterous_autopost\"\u003E\u003Cdiv class=\"posterous_bookmarklet_entry\"\u003E \u003Cblockquote class=\"posterous_short_quote\"\u003EAuthorization Requests follow two main paths to obtain Access Tokens and ID Tokens, the Implicit Flow and the Authorization Code Flow.\u003C/blockquote\u003E \u003Cdiv class=\"posterous_quote_citation\"\u003Evia \u003Ca href=\"http://openid.bitbucket.org/openid-connect-standard-1_0.html#protocol_flows\"\u003Eopenid.bitbucket.org\u003C/a\u003E\u003C/div\u003E \u003Cp\u003ELooks no. Draft should be slightly changed\u00a0?\u003C/p\u003E\u003C/div\u003E\u003Cp\u003E \u003Ca href=\"http://posterous.com\"\u003EPosted via email\u003C/a\u003E from \u003Ca href=\"http://lafoglia.posterous.com/assertion-flow-in-connect-draft-openid-connec\"\u003ENotes for Digital Identities and Computing in the Cloud\u003C/a\u003E\u00a0|\u00a0\u003Ca href=\"http://lafoglia.posterous.com/assertion-flow-in-connect-draft-openid-connec#comment\"\u003E\u003Cspan\u003EComment\u00a0\u00bb\u003C/span\u003E\u003C/a\u003E \u003C/p\u003E\u003C/div\u003E"} <div class="posterous_autopost"><div class="posterous_bookmarklet_entry"> <blockquote class="posterous_short_quote">Authorization Requests follow two main paths to obtain Access Tokens and ID Tokens, the Implicit Flow and the Authorization Code Flow.</blockquote> <div class="posterous_quote_citation">via <a href="http://openid.bitbucket.org/openid-connect-standard-1_0.html#protocol_flows">openid.bitbucket.org</a></div> <p>Looks no. Draft should be slightly changed ?</p></div><p> <a href="http://posterous.com">Posted via email</a> from <a href="http://lafoglia.posterous.com/assertion-flow-in-connect-draft-openid-connec">Notes for Digital Identities and Computing in the Cloud</a> | <a href="http://lafoglia.posterous.com/assertion-flow-in-connect-draft-openid-connec#comment"><span>Comment »</span></a> </p></div>Thu, 19 Jan 2012 16:35:42 GMThttp://hdknr.soup.io/post/223295919/Assertion-Flow-in-Connect-Draft-OpenID-Connecturn:www-soup-io:1:223295919regular {"tags":[],"type":"regular","title":"Mike Jones: self-issued \u00bb SWD, JWT, JWS, JWE, JWK, and OAuth JWT Profile specs updated","source":null,"body":"\u003Cdiv class=\"posterous_autopost\"\u003E\u003Cdiv class=\"posterous_bookmarklet_entry\"\u003E \u003Cblockquote class=\"posterous_long_quote\"\u003E\u003Cp\u003EThis checkin is intended to be the last set of individual submissions of the JWS, JWE, and JWK drafts before they are refactored and submitted to the JOSE WG as working group drafts. The primary changes requested by the JOSE WG but not yet done are to break the algorithm profiles and identifiers out into a new spec and to rework the terminology in the signature spec to use different terms for digital signature and HMAC integrity operations.\u003C/p\u003E \u003Cp\u003ESee the Document History sections of each document for a detailed description of the changes made. These documents are available at:\u003C/p\u003E \u003Cul\u003E\u003Cli\u003E\u003Ca href=\"http://tools.ietf.org/html/draft-jones-simple-web-discovery-02\"\u003E\u003C/a\u003E\u003Ca href=\"http://tools.ietf.org/html/draft-jones-simple-web-discovery-02\"\u003Ehttp://tools.ietf.org/html/draft-jones-simple-web-discovery-02\u003C/a\u003E\u003C/li\u003E \u003Cli\u003E\u003Ca href=\"http://tools.ietf.org/html/draft-jones-json-web-token-07\"\u003E\u003C/a\u003E\u003Ca href=\"http://tools.ietf.org/html/draft-jones-json-web-token-07\"\u003Ehttp://tools.ietf.org/html/draft-jones-json-web-token-07\u003C/a\u003E\u003C/li\u003E \u003Cli\u003E\u003Ca href=\"http://tools.ietf.org/html/draft-jones-json-web-signature-04\"\u003E\u003C/a\u003E\u003Ca href=\"http://tools.ietf.org/html/draft-jones-json-web-signature-04\"\u003Ehttp://tools.ietf.org/html/draft-jones-json-web-signature-04\u003C/a\u003E\u003C/li\u003E \u003Cli\u003E\u003Ca href=\"http://tools.ietf.org/html/draft-jones-json-web-encryption-02\"\u003E\u003C/a\u003E\u003Ca href=\"http://tools.ietf.org/html/draft-jones-json-web-encryption-02\"\u003Ehttp://tools.ietf.org/html/draft-jones-json-web-encryption-02\u003C/a\u003E\u003C/li\u003E \u003Cli\u003E\u003Ca href=\"http://tools.ietf.org/html/draft-jones-json-web-key-03\"\u003E\u003C/a\u003E\u003Ca href=\"http://tools.ietf.org/html/draft-jones-json-web-key-03\"\u003Ehttp://tools.ietf.org/html/draft-jones-json-web-key-03\u003C/a\u003E\u003C/li\u003E \u003Cli\u003E\u003Ca href=\"http://tools.ietf.org/html/draft-jones-oauth-jwt-bearer-03\"\u003E\u003C/a\u003E\u003Ca href=\"http://tools.ietf.org/html/draft-jones-oauth-jwt-bearer-03\"\u003Ehttp://tools.ietf.org/html/draft-jones-oauth-jwt-bearer-03\u003C/a\u003E\u003C/li\u003E \u003C/ul\u003E\u003Cp\u003EHTML-formatted versions are available at:\u003C/p\u003E \u003Cul\u003E\u003Cli\u003E\u003Ca href=\"http://self-issued.info/docs/draft-jones-simple-web-discovery-02.html\"\u003E\u003C/a\u003E\u003Ca href=\"http://self-issued.info/docs/draft-jones-simple-web-discovery-02.html\"\u003Ehttp://self-issued.info/docs/draft-jones-simple-web-discovery-02.html\u003C/a\u003E\u003C/li\u003E \u003Cli\u003E\u003Ca href=\"http://self-issued.info/docs/draft-jones-json-web-token-07.html\"\u003E\u003C/a\u003E\u003Ca href=\"http://self-issued.info/docs/draft-jones-json-web-token-07.html\"\u003Ehttp://self-issued.info/docs/draft-jones-json-web-token-07.html\u003C/a\u003E\u003C/li\u003E \u003Cli\u003E\u003Ca href=\"http://self-issued.info/docs/draft-jones-json-web-signature-04.html\"\u003E\u003C/a\u003E\u003Ca href=\"http://self-issued.info/docs/draft-jones-json-web-signature-04.html\"\u003Ehttp://self-issued.info/docs/draft-jones-json-web-signature-04.html\u003C/a\u003E\u003C/li\u003E \u003Cli\u003E\u003Ca href=\"http://self-issued.info/docs/draft-jones-json-web-encryption-02.html\"\u003E\u003C/a\u003E\u003Ca href=\"http://self-issued.info/docs/draft-jones-json-web-encryption-02.html\"\u003Ehttp://self-issued.info/docs/draft-jones-json-web-encryption-02.html\u003C/a\u003E\u003C/li\u003E \u003Cli\u003E\u003Ca href=\"http://self-issued.info/docs/draft-jones-json-web-key-03.html\"\u003E\u003C/a\u003E\u003Ca href=\"http://self-issued.info/docs/draft-jones-json-web-key-03.html\"\u003Ehttp://self-issued.info/docs/draft-jones-json-web-key-03.html\u003C/a\u003E\u003C/li\u003E \u003Cli\u003E\u003Ca href=\"http://self-issued.info/docs/draft-jones-oauth-jwt-bearer-03.html\"\u003E\u003C/a\u003E\u003Ca href=\"http://self-issued.info/docs/draft-jones-oauth-jwt-bearer-03.html\"\u003Ehttp://self-issued.info/docs/draft-jones-oauth-jwt-bearer-03.html\u003C/a\u003E\u003C/li\u003E\u003C/ul\u003E\u003C/blockquote\u003E \u003Cdiv class=\"posterous_quote_citation\"\u003Evia \u003Ca href=\"http://self-issued.info/?p=607\"\u003Eself-issued.info\u003C/a\u003E\u003C/div\u003E \u003C/div\u003E\u003Cp\u003E \u003Ca href=\"http://posterous.com\"\u003EPosted via email\u003C/a\u003E from \u003Ca href=\"http://lafoglia.posterous.com/mike-jones-self-issued-swd-jwt-jws-jwe-jwk-an\"\u003ENotes for Digital Identities and Computing in the Cloud\u003C/a\u003E\u00a0|\u00a0\u003Ca href=\"http://lafoglia.posterous.com/mike-jones-self-issued-swd-jwt-jws-jwe-jwk-an#comment\"\u003E\u003Cspan\u003EComment\u00a0\u00bb\u003C/span\u003E\u003C/a\u003E \u003C/p\u003E\u003C/div\u003E"} <div class="posterous_autopost"><div class="posterous_bookmarklet_entry"> <blockquote class="posterous_long_quote"><p>This checkin is intended to be the last set of individual submissions of the JWS, JWE, and JWK drafts before they are refactored and submitted to the JOSE WG as working group drafts. The primary changes requested by the JOSE WG but not yet done are to break the algorithm profiles and identifiers out into a new spec and to rework the terminology in the signature spec to use different terms for digital signature and HMAC integrity operations.</p> <p>See the Document History sections of each document for a detailed description of the changes made. These documents are available at:</p> <ul><li><a href="http://tools.ietf.org/html/draft-jones-simple-web-discovery-02"></a><a href="http://tools.ietf.org/html/draft-jones-simple-web-discovery-02">http://tools.ietf.org/html/draft-jones-simple-web-discovery-02</a></li> <li><a href="http://tools.ietf.org/html/draft-jones-json-web-token-07"></a><a href="http://tools.ietf.org/html/draft-jones-json-web-token-07">http://tools.ietf.org/html/draft-jones-json-web-token-07</a></li> <li><a href="http://tools.ietf.org/html/draft-jones-json-web-signature-04"></a><a href="http://tools.ietf.org/html/draft-jones-json-web-signature-04">http://tools.ietf.org/html/draft-jones-json-web-signature-04</a></li> <li><a href="http://tools.ietf.org/html/draft-jones-json-web-encryption-02"></a><a href="http://tools.ietf.org/html/draft-jones-json-web-encryption-02">http://tools.ietf.org/html/draft-jones-json-web-encryption-02</a></li> <li><a href="http://tools.ietf.org/html/draft-jones-json-web-key-03"></a><a href="http://tools.ietf.org/html/draft-jones-json-web-key-03">http://tools.ietf.org/html/draft-jones-json-web-key-03</a></li> <li><a href="http://tools.ietf.org/html/draft-jones-oauth-jwt-bearer-03"></a><a href="http://tools.ietf.org/html/draft-jones-oauth-jwt-bearer-03">http://tools.ietf.org/html/draft-jones-oauth-jwt-bearer-03</a></li> </ul><p>HTML-formatted versions are available at:</p> <ul><li><a href="http://self-issued.info/docs/draft-jones-simple-web-discovery-02.html"></a><a href="http://self-issued.info/docs/draft-jones-simple-web-discovery-02.html">http://self-issued.info/docs/draft-jones-simple-web-discovery-02.html</a></li> <li><a href="http://self-issued.info/docs/draft-jones-json-web-token-07.html"></a><a href="http://self-issued.info/docs/draft-jones-json-web-token-07.html">http://self-issued.info/docs/draft-jones-json-web-token-07.html</a></li> <li><a href="http://self-issued.info/docs/draft-jones-json-web-signature-04.html"></a><a href="http://self-issued.info/docs/draft-jones-json-web-signature-04.html">http://self-issued.info/docs/draft-jones-json-web-signature-04.html</a></li> <li><a href="http://self-issued.info/docs/draft-jones-json-web-encryption-02.html"></a><a href="http://self-issued.info/docs/draft-jones-json-web-encryption-02.html">http://self-issued.info/docs/draft-jones-json-web-encryption-02.html</a></li> <li><a href="http://self-issued.info/docs/draft-jones-json-web-key-03.html"></a><a href="http://self-issued.info/docs/draft-jones-json-web-key-03.html">http://self-issued.info/docs/draft-jones-json-web-key-03.html</a></li> <li><a href="http://self-issued.info/docs/draft-jones-oauth-jwt-bearer-03.html"></a><a href="http://self-issued.info/docs/draft-jones-oauth-jwt-bearer-03.html">http://self-issued.info/docs/draft-jones-oauth-jwt-bearer-03.html</a></li></ul></blockquote> <div class="posterous_quote_citation">via <a href="http://self-issued.info/?p=607">self-issued.info</a></div> </div><p> <a href="http://posterous.com">Posted via email</a> from <a href="http://lafoglia.posterous.com/mike-jones-self-issued-swd-jwt-jws-jwe-jwk-an">Notes for Digital Identities and Computing in the Cloud</a> | <a href="http://lafoglia.posterous.com/mike-jones-self-issued-swd-jwt-jws-jwe-jwk-an#comment"><span>Comment »</span></a> </p></div>Tue, 17 Jan 2012 01:21:45 GMThttp://hdknr.soup.io/post/221434855/Mike-Jones-self-issued-SWD-JWT-JWSurn:www-soup-io:1:221434855regular {"tags":[],"type":"regular","title":"JOSE: [woes] Proposed charter, post-Quebec edition","source":null,"body":"\u003Cp\u003E\u003C/p\u003E\u003Cdiv class=\"posterous_autopost\"\u003E \u003Ctable width=\"100%\"\u003E\u003Ctr\u003E\u003Ctd\u003E \u003Ch3\u003E\u003Ca href=\"http://www.evernote.com/\"\u003EFrom Evernote:\u003C/a\u003E\u003C/h3\u003E \u003C/td\u003E \u003C/tr\u003E\u003Ctr\u003E\u003Ctd\u003E \u003Ch1\u003EJOSE: [woes] Proposed charter, post-Quebec edition\u003C/h1\u003E Clipped from: \u003Ca href=\"http://www.ietf.org/mail-archive/web/woes/current/msg00160.html#\"\u003E\u003C/a\u003E\u003Ca href=\"http://www.ietf.org/mail-archive/web/woes/current/msg00160.html#\"\u003Ehttp://www.ietf.org/mail-archive/web/woes/current/msg00160.html#\u003C/a\u003E \u003C/td\u003E \u003C/tr\u003E\u003C/table\u003E\u003Cdiv class=\"ennote\"\u003E \u003Cdiv class=\"CodeRay\"\u003E \u003Cdiv class=\"code\"\u003E\u003Cpre\u003EHere is a proposal for the charter based on the discussion in the BoF last week and later discussion with Sean Turner. Comments, praise, scorn, etc., are welcome. --Paul and Richard Javascript Object Signing and Encrypting (jose) =============================================== Background ---------- Javascript Object Notation (JSON) is a text format for the serialization of structured data described in RFC 4627. The JSON format is often used for serializing and transmitting structured data over a network connection. With the increased usage of JSON in protocols in the IETF and elsewhere, there is now a desire to offer security services such as encryption and digital signatures for data that is being carried in JSON format. Different proposals for providing such security services have already been defined and implemented. This Working Group's task is to standardize two security services, encrypting and digitally signing, in order to increase interoperability of security features between protocols that use JSON. The Working Group will base its work on well-known message security primitives (e.g., CMS), and will solicit input from the rest of the IETF Security Area to be sure that the security functionality in the JSON format is correct. This group is chartered to work on four documents: 1) A Standards Track document specifying how to apply a JSON-structured digital signature to data, including (but not limited to) JSON data structures. \"Digital signature\" is defined as a hash operation followed by a signature operation using asymmetric keys. 2) A Standards Track document specifying how to apply a JSON-structured encryption to data, including (but not limited to) JSON data structures. 3) A Standards Track document specifying how to encode public keys as JSON-structured objects. 4) A Standards Track document specifying mandatory-to-implement algorithms for the other three documents. The working group may decide to address one or more of these goals in a single document, in which case the concrete milestones for signing/encryption below will both be satisfied by the single document. Goals and Milestones -------------------- Aug 2011 Submit JSON object signing document as a WG item. Aug 2011 Submit JSON object encryption document as a WG item. Aug 2011 Submit JSON key format document as a WG item. Aug 2011 Submit JSON algoritm document as a WG item. Jan 2012 Start Working Group Last Call on JSON object signing document. Jan 2012 Start Working Group Last Call on JSON object encryption document. Jan 2012 Start Working Group Last Call on JSON key format document. Jan 2012 Start Working Group Last Call on JSON algorithm document. Feb 2012 Submit JSON object signing document to IESG for consideration as Standards Track document. Feb 2012 Submit JSON object encryption document to IESG for consideration as Standards Track document. Feb 2012 Submit JSON key format document to IESG for consideration as Standards Track document. Feb 2012 Submit JSON algorithm document to IESG for consideration as Standards Track document.\u003C/pre\u003E\u003C/div\u003E \u003C/div\u003E \u003C/div\u003E\u003Cp\u003E \u003Ca href=\"http://posterous.com\"\u003EPosted via email\u003C/a\u003E from \u003Ca href=\"http://lafoglia.posterous.com/jose-woes-proposed-charter-post-quebec-editio\"\u003ENotes for Digital Identities and Computing in the Cloud\u003C/a\u003E\u00a0|\u00a0\u003Ca href=\"http://lafoglia.posterous.com/jose-woes-proposed-charter-post-quebec-editio#comment\"\u003E\u003Cspan\u003EComment\u00a0\u00bb\u003C/span\u003E\u003C/a\u003E \u003C/p\u003E\u003C/div\u003E\u003Cp\u003E\u003C/p\u003E"} <p></p><div class="posterous_autopost"> <h3><a href="http://www.evernote.com/">From Evernote:</a></h3> <h1>JOSE: [woes] Proposed charter, post-Quebec edition</h1> Clipped from: <a href="http://www.ietf.org/mail-archive/web/woes/current/msg00160.html#"></a><a href="http://www.ietf.org/mail-archive/web/woes/current/msg00160.html#">http://www.ietf.org/mail-archive/web/woes/current/msg00160.html#</a> <div class="ennote"> <div class="CodeRay"> <div class="code"><pre>Here is a proposal for the charter based on the discussion in the BoF last week and later discussion with Sean Turner. Comments, praise, scorn, etc., are welcome. --Paul and Richard Javascript Object Signing and Encrypting (jose) =============================================== Background ---------- Javascript Object Notation (JSON) is a text format for the serialization of structured data described in RFC 4627. The JSON format is often used for serializing and transmitting structured data over a network connection. With the increased usage of JSON in protocols in the IETF and elsewhere, there is now a desire to offer security services such as encryption and digital signatures for data that is being carried in JSON format. Different proposals for providing such security services have already been defined and implemented. This Working Group's task is to standardize two security services, encrypting and digitally signing, in order to increase interoperability of security features between protocols that use JSON. The Working Group will base its work on well-known message security primitives (e.g., CMS), and will solicit input from the rest of the IETF Security Area to be sure that the security functionality in the JSON format is correct. This group is chartered to work on four documents: 1) A Standards Track document specifying how to apply a JSON-structured digital signature to data, including (but not limited to) JSON data structures. "Digital signature" is defined as a hash operation followed by a signature operation using asymmetric keys. 2) A Standards Track document specifying how to apply a JSON-structured encryption to data, including (but not limited to) JSON data structures. 3) A Standards Track document specifying how to encode public keys as JSON-structured objects. 4) A Standards Track document specifying mandatory-to-implement algorithms for the other three documents. The working group may decide to address one or more of these goals in a single document, in which case the concrete milestones for signing/encryption below will both be satisfied by the single document. Goals and Milestones -------------------- Aug 2011 Submit JSON object signing document as a WG item. Aug 2011 Submit JSON object encryption document as a WG item. Aug 2011 Submit JSON key format document as a WG item. Aug 2011 Submit JSON algoritm document as a WG item. Jan 2012 Start Working Group Last Call on JSON object signing document. Jan 2012 Start Working Group Last Call on JSON object encryption document. Jan 2012 Start Working Group Last Call on JSON key format document. Jan 2012 Start Working Group Last Call on JSON algorithm document. Feb 2012 Submit JSON object signing document to IESG for consideration as Standards Track document. Feb 2012 Submit JSON object encryption document to IESG for consideration as Standards Track document. Feb 2012 Submit JSON key format document to IESG for consideration as Standards Track document. Feb 2012 Submit JSON algorithm document to IESG for consideration as Standards Track document.</pre></div> </div> </div><p> <a href="http://posterous.com">Posted via email</a> from <a href="http://lafoglia.posterous.com/jose-woes-proposed-charter-post-quebec-editio">Notes for Digital Identities and Computing in the Cloud</a> | <a href="http://lafoglia.posterous.com/jose-woes-proposed-charter-post-quebec-editio#comment"><span>Comment »</span></a> </p></div><p></p>Tue, 17 Jan 2012 01:12:44 GMThttp://hdknr.soup.io/post/221345588/JOSE-woes-Proposed-charter-post-Quebec-editionurn:www-soup-io:1:221345588regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 15 Jan 2012 12:00:00 GMThttp://hdknr.soup.io/post/221530775/Top-5-artists-this-weekurn:www-soup-io:1:221530775regular {"tags":["\u5bb6\u65cf","\u65b0\u5e74","\u795e\u793e"],"type":"regular","title":"\u003Ca href=\"http://www.rioja.jp/?p=90\"\u003ENew Year Wishes\u003C/a\u003E","source":"http://www.rioja.jp/?p=90","body":"\u003Cdiv\u003E\u003Ca href=\"http://www.flickr.com/photos/hdknr/6650250439/\" title=\"Saturday : Todoroki Fudo Son Shrine\"\u003E\u003Cimg src=\"http://farm8.staticflickr.com/7151/6650250439_41ca65477a.jpg\" alt=\"Saturday : Todoroki Fudo Son Shrine by hidelafoglia\" /\u003E\u003C/a\u003E\u003Cbr /\u003E\u003Cspan\u003E\u003Ca href=\"http://www.flickr.com/photos/hdknr/6650250439/\"\u003ESaturday : Todoroki Fudo Son Shrine\u003C/a\u003E, a photo by \u003Ca href=\"http://www.flickr.com/photos/hdknr/\"\u003Ehidelafoglia\u003C/a\u003E on Flickr.\u003C/span\u003E\u003C/div\u003E\n\u003Cp\u003E\u521d\u8a63\u306f\u9752\u5c71\u718a\u91ce\u795e\u793e\u3067\u304a\u307e\u3044\u308a\u3057\u305f\u306e\u3067\u3059\u304c\u3001\u6a5f\u4f1a\u304c\u3042\u3063\u305f\u306e\u3067\u7b49\u3005\u529b\u4e0d\u52d5\u5c0a\u3067\u3082\u304a\u307e\u3044\u308a\u3057\u307e\u3057\u305f\u3002\u3053\u3068\u3057\u3082\u6771\u6025\u306b\u306f\u304a\u4e16\u8a71\u306b\u306a\u308b\u306e\u3067\u3002\u7121\u4e8b\u4e8b\u6545\u306e\u7121\u3044\u4e00\u5e74\u3092\u9001\u308c\u305f\u3089\u3044\u3044\u3067\u3059\u306d\u3002\u003C/p\u003E\n\u003Cp\u003E\u5e02\u5ddd\u3067\u5143\u65e6\u3092\u904e\u3054\u3057\u3066\u7fcc\u65e5\u306fNe\u306e\u304a\u3070\u3055\u3093\u306e\u5bb6\u306b\u904a\u3073\u306b\u884c\u304d\u307e\u3057\u305f\u3002\u4ee5\u524d\u304b\u3089\u904a\u3073\u306b\u6765\u3066\u306d\u3001\u3068\u3044\u308f\u308c\u3066\u3044\u305f\u306e\u306b\u306a\u304b\u306a\u304b\u9854\u3092\u51fa\u3059\u4e8b\u304c\u3067\u304d\u306a\u304b\u3063\u305f\u306e\u304b\u5fc3\u306b\u6b8b\u3063\u3066\u3044\u305f\u306e\u3067\u826f\u3044\u6a5f\u4f1a\u3060\u3063\u305f\u306e\u3067\u3002\u003C/p\u003E\n\u003Cp\u003E\u3053\u308c\u307e\u3067Ri\u3055\u3093\u306f\u4ed6\u306e\u304a\u3070\u3055\u3093\u3068\u533a\u5225\u3067\u304d\u306a\u304b\u3063\u305f\u3088\u3046\u3067\u3059\u304c\u3001\u697d\u3057\u304f\u512a\u3057\u304f\u3057\u3066\u3082\u3089\u3063\u3066\u3068\u3066\u3082\u697d\u3057\u304b\u3063\u305f\u3088\u3046\u3067\u3001\u6b21\u56de\u306f\u3061\u3083\u3093\u3068\u540d\u524d\u8a00\u3048\u308b\u3068\u601d\u3044\u307e\u3059\u3002\u003C/p\u003E\n\u003Cp\u003E\u003Ca href=\"http://www.flickr.com/photos/hdknr/6639150311/\" title=\"Monday : Drawing by hidelafoglia, on Flickr\"\u003E\u003Cimg src=\"http://farm8.staticflickr.com/7003/6639150311_901f0bca48.jpg\" height=\"374\" alt=\"Monday : Drawing\" width=\"500\" /\u003E\u003C/a\u003E\u003Cbr /\u003E\n\u003Cbr /\u003E\n\u6210\u4eba\u306e\u65e5\u306e\u4e09\u9023\u4f11\u3082\u904e\u304e\u3066\u3088\u3046\u3084\u304f\u65b0\u5e74\u672c\u756a\u306a\u611f\u3058\u3067\u3059\u3002\u30df\u30e5\u30fc\u30b8\u30ab\u30eb\u306e\u6625\u306e\u767a\u8868\u306e\u30c7\u30a3\u30ba\u30cb\u30fc\u306e\u82f1\u8a9e\u306e\u6b4c\u3082\u3060\u3044\u3076\u899a\u3048\u305f\u3088\u3046\u3067\u826f\u3044\u30b9\u30bf\u30fc\u30c8\u3092\u5207\u308c\u305f\u306e\u304b\u306a\u3002\u003C/p\u003E"} <div><a href="http://www.flickr.com/photos/hdknr/6650250439/" title="Saturday : Todoroki Fudo Son Shrine"><img src="http://farm8.staticflickr.com/7151/6650250439_41ca65477a.jpg" alt="Saturday : Todoroki Fudo Son Shrine by hidelafoglia" /></a><br /><span><a href="http://www.flickr.com/photos/hdknr/6650250439/">Saturday : Todoroki Fudo Son Shrine</a>, a photo by <a href="http://www.flickr.com/photos/hdknr/">hidelafoglia</a> on Flickr.</span></div> <p>初詣は青山熊野神社でおまいりしたのですが、機会があったので等々力不動尊でもおまいりしました。ことしも東急にはお世話になるので。無事事故の無い一年を送れたらいいですね。</p> <p>市川で元旦を過ごして翌日はNeのおばさんの家に遊びに行きました。以前から遊びに来てね、といわれていたのになかなか顔を出す事ができなかったのか心に残っていたので良い機会だったので。</p> <p>これまでRiさんは他のおばさんと区別できなかったようですが、楽しく優しくしてもらってとても楽しかったようで、次回はちゃんと名前言えると思います。</p> <p><a href="http://www.flickr.com/photos/hdknr/6639150311/" title="Monday : Drawing by hidelafoglia, on Flickr"><img src="http://farm8.staticflickr.com/7003/6639150311_901f0bca48.jpg" height="374" alt="Monday : Drawing" width="500" /></a><br /> <br /> 成人の日の三連休も過ぎてようやく新年本番な感じです。ミュージカルの春の発表のディズニーの英語の歌もだいぶ覚えたようで良いスタートを切れたのかな。</p>Sat, 14 Jan 2012 00:28:15 GMThttp://hdknr.soup.io/post/218923835/New-Year-Wishesurn:www-soup-io:1:218923835regular家族新年神社 {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 08 Jan 2012 12:00:00 GMThttp://hdknr.soup.io/post/216525635/Top-5-artists-this-weekurn:www-soup-io:1:216525635regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 01 Jan 2012 12:00:00 GMThttp://hdknr.soup.io/post/211608071/Top-5-artists-this-weekurn:www-soup-io:1:211608071regular {"tags":["\u901a\u5b66","\u6e05\u6383"],"type":"regular","title":"\u003Ca href=\"http://www.rioja.jp/?p=82\"\u003E\u4eca\u5e74\u3082\u3042\u308a\u304c\u3068\u3046\u3054\u3056\u3044\u307e\u3057\u305f\u3002\u003C/a\u003E","source":"http://www.rioja.jp/?p=82","body":"\u003Cdiv\u003E\u003Ca href=\"http://www.flickr.com/photos/hdknr/6603114651/\" title=\"Friday : Cleaning Stadium St.\"\u003E\u003Cimg src=\"http://farm8.staticflickr.com/7020/6603114651_98fcf96a2b.jpg\" alt=\"Friday : Cleaning Stadium St. by hidelafoglia\" /\u003E\u003C/a\u003E\u003Cbr /\u003E\n\u003Cspan\u003E\u003Ca href=\"http://www.flickr.com/photos/hdknr/6603114651/\"\u003EFriday : Cleaning Stadium St.\u003C/a\u003E, a photo by \u003Ca href=\"http://www.flickr.com/photos/hdknr/\"\u003Ehidelafoglia\u003C/a\u003E on Flickr.\u003C/span\u003E\u003C/div\u003E\n\u003Cp\u003E\u5e74\u306e\u6700\u5f8c\u306b\u901a\u5b66\u8def\u306e\u6383\u9664\u3092\u3057\u307e\u3057\u305f\u3002\u003Cbr /\u003E\nRi\u3055\u3093\u306f\u6383\u9664\u304c\u5927\u597d\u304d\u3067\u3001\u5915\u65b9Mi\u304c\u5e30\u5b85\u3059\u308b\u3068\u6383\u9664\u3092\u624b\u4f1d\u308f\u3055\u308c\u305f\u308a\u3057\u307e\u3059\u3002\u003Cbr /\u003E\n\u524d\u304b\u3089\u3069\u3046\u3057\u3066\u3082\u9053\u7aef\u306e\u67af\u308c\u8449\u6383\u9664\u3092\u3057\u305f\u304b\u3063\u305f\u3089\u3057\u304f\u3001\u6771\u6025\u30cf\u30f3\u30ba\u3067\u6e05\u6383\u9053\u5177\u3092\u8cb7\u3063\u3066\u304d\u307e\u3057\u305f\u3002\u003Cbr /\u003E\n\u5148\u9031\u306b\u5f15\u304d\u7d9a\u304d\u3001\u4eca\u9031\u3082\u6383\u9664\u3002\u5e74\u672b\u306a\u306e\u3067\u3001\u305f\u3070\u3053\u306e\u5438\u3044\u6bbb\u3092\u6ca2\u5c71\u3084\u3063\u3064\u3051\u307e\u3057\u305f\u3002\u003Cbr /\u003E\n\u6765\u5e74\u3082\u3044\u3044\u5e74\u306b\u306a\u308a\u307e\u3059\u3088\u3046\u306b\u3002\u003C/p\u003E"} <div><a href="http://www.flickr.com/photos/hdknr/6603114651/" title="Friday : Cleaning Stadium St."><img src="http://farm8.staticflickr.com/7020/6603114651_98fcf96a2b.jpg" alt="Friday : Cleaning Stadium St. by hidelafoglia" /></a><br /> <span><a href="http://www.flickr.com/photos/hdknr/6603114651/">Friday : Cleaning Stadium St.</a>, a photo by <a href="http://www.flickr.com/photos/hdknr/">hidelafoglia</a> on Flickr.</span></div> <p>年の最後に通学路の掃除をしました。<br /> Riさんは掃除が大好きで、夕方Miが帰宅すると掃除を手伝わされたりします。<br /> 前からどうしても道端の枯れ葉掃除をしたかったらしく、東急ハンズで清掃道具を買ってきました。<br /> 先週に引き続き、今週も掃除。年末なので、たばこの吸い殻を沢山やっつけました。<br /> 来年もいい年になりますように。</p>Fri, 30 Dec 2011 11:22:54 GMThttp://hdknr.soup.io/post/209072033/urn:www-soup-io:1:209072033regular通学清掃 {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 25 Dec 2011 12:00:00 GMThttp://hdknr.soup.io/post/203080330/Top-5-artists-this-weekurn:www-soup-io:1:203080330regular {"tags":[],"type":"regular","title":"Ad Hoc OAuth server","source":null,"body":"\u003Cdiv class=\"posterous_autopost\"\u003E \u003Ctable width=\"100%\"\u003E\u003Ctr\u003E\u003Ctd\u003E \u003Ch3\u003E\u003Ca href=\"http://www.evernote.com/\"\u003EFrom Evernote:\u003C/a\u003E\u003C/h3\u003E \u003C/td\u003E \u003C/tr\u003E\u003Ctr\u003E\u003Ctd\u003E \u003Ch1\u003EAd Hoc OAuth server\u003C/h1\u003E \u003C/td\u003E \u003C/tr\u003E\u003C/table\u003E\u003Cdiv class=\"ennote\"\u003E \u003Cdiv\u003EA RP can be a OAuth server for the other RP(client). \u00a0\u003C/div\u003E \u003Cdiv\u003EWith providing kinda \u201cLicense Token\u201d to a RP, the RP can be securely provide End-User\u2019s protected resource to the other RP.\u00a0\u003C/div\u003E \u003Cdiv\u003E(1) OAuth \u00a0\u201dcode\u201d is delivered to \u00a0a Client RP\u003C/div\u003E \u003Cdiv\u003E(2) Request an access token.\u003C/div\u003E \u003Cdiv\u003E(3) Issue an access token if the Client RP, code and other conditions are valid.\u003C/div\u003E \u003Cp\u003E\u003C/p\u003E \u003Cdiv\u003E(1)-(3) are can be omitted if OAuth flow is implicit.\u003C/div\u003E \u003Cdiv\u003EOP embeds \u201clicense code\u201d as a claim of the access token, which is a kinda access code for the Server RP in a particular authorization.\u003C/div\u003E \u003Cdiv\u003EA specific Server RP is selected when the End-User grants the authorization.\u00a0\u003C/div\u003E \u003Cp\u003E\u003C/p\u003E \u003Cdiv\u003E(4) The Client RP request the resource for the access token. That\u2019s an OAuth.\u003C/div\u003E \u003Cdiv\u003E(5) The Server RP request the \u201clicense token\u201d for \u00a0the license code in the access token requested by the Client RP.\u003C/div\u003E \u003Cdiv\u003E(6) Issue the license token for the access token \u00a0if the license code, the Server RP and other conditions are valid.\u003C/div\u003E \u003Cdiv\u003EIn license code, \u00a0PPID for the Server RP of the End-User and other claims are included to response the End-User\u2019s protected resource.\u003C/div\u003E \u003Cp\u003E\u003C/p\u003E \u003Cdiv\u003E(7) Load resource for the license token if the relationship with access token \u00a0and other conditions are valid.\u003C/div\u003E \u003Cdiv\u003E(8) Publish protected resource to the Client RP.\u003C/div\u003E \u003Cdiv\u003E\u00a0\u003C/div\u003E \u003Cdiv\u003E\u003Cdiv class=\"p_embed p_image_embed\"\u003E \u003Ca href=\"http://getfile7.posterous.com/getfile/files.posterous.com/lafoglia/qQVheDC5i2Bithw1oi6eMWaafIkJp0hFwyVpv5mu3gJdLy4PdDhQ81MzWRgX/96d7d53fa0a1c5ae619594ca362abe.png.scaled.1000.jpg\"\u003E\u003Cimg src=\"http://getfile5.posterous.com/getfile/files.posterous.com/lafoglia/bEw8kQZZBCZERqvEv60taF1x964ODIr4OAZsUm2nXTflLvSY6Y1M6xL3t6i9/96d7d53fa0a1c5ae619594ca362abe.png.scaled.500.jpg\" height=\"419\" alt=\"96d7d53fa0a1c5ae619594ca362abe\" width=\"500\" /\u003E\u003C/a\u003E \u003C/div\u003E \u003C/div\u003E \u003Cp\u003E\u003C/p\u003E \u003Cdiv\u003EPoint:\u003C/div\u003E \u003Cdiv\u003E\u00a0- The Client RP is just a OAuth client. It doesn\u2019t know what special are going on underneath.\u003C/div\u003E \u003Cdiv\u003E\u00a0- The Server RP doesn\u2019t have to implement OAuth Authorization Server process.\u003C/div\u003E \u003Cdiv\u003E\u00a0- PPID can be used. Client and Server don\u2019t have to share the End-User\u2019s identifier.\u003C/div\u003E \u003Cdiv\u003E\u00a0- Licence Code and Token can be easily implemented at the Authorization Server(OP) \u00a0in mostly same way as access token.\u003C/div\u003E \u003Cp\u003E\u003C/p\u003E \u003Cp\u003E\u003C/p\u003E \u003C/div\u003E\u003Cp\u003E \u003Ca href=\"http://posterous.com\"\u003EPosted via email\u003C/a\u003E from \u003Ca href=\"http://lafoglia.posterous.com/ad-hoc-oauth-server-81504\"\u003ENotes for Digital Identities and Computing in the Cloud\u003C/a\u003E\u00a0|\u00a0\u003Ca href=\"http://lafoglia.posterous.com/ad-hoc-oauth-server-81504#comment\"\u003E\u003Cspan\u003EComment\u00a0\u00bb\u003C/span\u003E\u003C/a\u003E \u003C/p\u003E\u003C/div\u003E"} <div class="posterous_autopost"> <h3><a href="http://www.evernote.com/">From Evernote:</a></h3> <h1>Ad Hoc OAuth server</h1> <div class="ennote"> <div>A RP can be a OAuth server for the other RP(client).  </div> <div>With providing kinda “License Token” to a RP, the RP can be securely provide End-User’s protected resource to the other RP. </div> <div>(1) OAuth  ”code” is delivered to  a Client RP</div> <div>(2) Request an access token.</div> <div>(3) Issue an access token if the Client RP, code and other conditions are valid.</div> <p></p> <div>(1)-(3) are can be omitted if OAuth flow is implicit.</div> <div>OP embeds “license code” as a claim of the access token, which is a kinda access code for the Server RP in a particular authorization.</div> <div>A specific Server RP is selected when the End-User grants the authorization. </div> <p></p> <div>(4) The Client RP request the resource for the access token. That’s an OAuth.</div> <div>(5) The Server RP request the “license token” for  the license code in the access token requested by the Client RP.</div> <div>(6) Issue the license token for the access token  if the license code, the Server RP and other conditions are valid.</div> <div>In license code,  PPID for the Server RP of the End-User and other claims are included to response the End-User’s protected resource.</div> <p></p> <div>(7) Load resource for the license token if the relationship with access token  and other conditions are valid.</div> <div>(8) Publish protected resource to the Client RP.</div> <div> </div> <div><div class="p_embed p_image_embed"> <a href="http://getfile7.posterous.com/getfile/files.posterous.com/lafoglia/qQVheDC5i2Bithw1oi6eMWaafIkJp0hFwyVpv5mu3gJdLy4PdDhQ81MzWRgX/96d7d53fa0a1c5ae619594ca362abe.png.scaled.1000.jpg"><img src="http://getfile5.posterous.com/getfile/files.posterous.com/lafoglia/bEw8kQZZBCZERqvEv60taF1x964ODIr4OAZsUm2nXTflLvSY6Y1M6xL3t6i9/96d7d53fa0a1c5ae619594ca362abe.png.scaled.500.jpg" height="419" alt="96d7d53fa0a1c5ae619594ca362abe" width="500" /></a> </div> </div> <p></p> <div>Point:</div> <div> - The Client RP is just a OAuth client. It doesn’t know what special are going on underneath.</div> <div> - The Server RP doesn’t have to implement OAuth Authorization Server process.</div> <div> - PPID can be used. Client and Server don’t have to share the End-User’s identifier.</div> <div> - Licence Code and Token can be easily implemented at the Authorization Server(OP)  in mostly same way as access token.</div> <p></p> <p></p> </div><p> <a href="http://posterous.com">Posted via email</a> from <a href="http://lafoglia.posterous.com/ad-hoc-oauth-server-81504">Notes for Digital Identities and Computing in the Cloud</a> | <a href="http://lafoglia.posterous.com/ad-hoc-oauth-server-81504#comment"><span>Comment »</span></a> </p></div>Thu, 22 Dec 2011 01:03:01 GMThttp://hdknr.soup.io/post/202144325/Ad-Hoc-OAuth-serverurn:www-soup-io:1:202144325regular {"tags":[],"type":"regular","title":"Ad Hoc OAuth server","source":null,"body":"\u003Cdiv class=\"posterous_autopost\"\u003E \u003Ctable width=\"100%\"\u003E\u003Ctr\u003E\u003Ctd\u003E \u003Ch3\u003E\u003Ca href=\"http://www.evernote.com/\"\u003EFrom Evernote:\u003C/a\u003E\u003C/h3\u003E \u003C/td\u003E \u003C/tr\u003E\u003Ctr\u003E\u003Ctd\u003E \u003Ch1\u003EAd Hoc OAuth server\u003C/h1\u003E \u003C/td\u003E \u003C/tr\u003E\u003C/table\u003E\u003Cdiv class=\"ennote\"\u003E \u003Cdiv\u003EA RP can be a OAuth server for the other RP(client). \u00a0\u003C/div\u003E \u003Cdiv\u003EWith providing kinda \u201cLicense Token\u201d to a RP, the RP can be securely provide End-User\u2019s protected resource to the other RP.\u00a0\u003C/div\u003E \u003Cdiv\u003E(1) OAuth \u00a0\u201dcode\u201d is delivered to \u00a0a Client RP\u003C/div\u003E \u003Cdiv\u003E(2) Request an access token.\u003C/div\u003E \u003Cdiv\u003E(3) Issue an access token if the Client RP, code and other conditions are valid.\u003C/div\u003E \u003Cp\u003E\u003C/p\u003E \u003Cdiv\u003E(1)-(3) are can be omitted if OAuth flow is implicit.\u003C/div\u003E \u003Cdiv\u003EOP embeds \u201clicense code\u201d as a claim of the access token, which is a kinda access code for the Server RP in a particular authorization.\u003C/div\u003E \u003Cdiv\u003EA specific Server RP is selected when the End-User grants the authorization.\u00a0\u003C/div\u003E \u003Cp\u003E\u003C/p\u003E \u003Cdiv\u003E(4) The Client RP request the resource for the access token. That\u2019s an OAuth.\u003C/div\u003E \u003Cdiv\u003E(5) The Server RP request the \u201clicense token\u201d for \u00a0the license code in the access token requested by the Client RP.\u003C/div\u003E \u003Cdiv\u003E(6) Issue the license token for the access token \u00a0if the license code, the Server RP and other conditions are valid.\u003C/div\u003E \u003Cdiv\u003EIn license code, \u00a0PPID for the Server RP of the End-User and other claims are included to response the End-User\u2019s protected resource.\u003C/div\u003E \u003Cp\u003E\u003C/p\u003E \u003Cdiv\u003E(7) Load resource for the license token if the relationship with access token \u00a0and other conditions are valid.\u003C/div\u003E \u003Cdiv\u003E(8) Publish protected resource to the Client RP.\u003C/div\u003E \u003Cdiv\u003E\u00a0\u003C/div\u003E \u003Cdiv\u003E\u003Cdiv class=\"p_embed p_image_embed\"\u003E \u003Ca href=\"http://getfile4.posterous.com/getfile/files.posterous.com/lafoglia/qHi1EKGtq0xnFvTQlQFAPnnu1AKTB6XLSTDB8MB6BByvt56yrtDUvJqqEfyG/96d7d53fa0a1c5ae619594ca362abe.png.scaled.1000.jpg\"\u003E\u003Cimg src=\"http://getfile2.posterous.com/getfile/files.posterous.com/lafoglia/GkFCMJaKrJuJb5hAFZsnBrKXfzCyiaU7Igb4EFFPmdt2wBTXFH7YmmPWGJPJ/96d7d53fa0a1c5ae619594ca362abe.png.scaled.500.jpg\" height=\"419\" alt=\"96d7d53fa0a1c5ae619594ca362abe\" width=\"500\" /\u003E\u003C/a\u003E \u003C/div\u003E \u003C/div\u003E \u003Cp\u003E\u003C/p\u003E \u003Cdiv\u003EPoint:\u003C/div\u003E \u003Cdiv\u003E\u00a0- The Client RP is just a OAuth client. It doesn\u2019t know what special are going on underneath.\u003C/div\u003E \u003Cdiv\u003E\u00a0- The Server RP doesn\u2019t have to implement OAuth authorization process.\u003C/div\u003E \u003Cdiv\u003E\u00a0- PPID can be used. Client and Server don\u2019t have to share the End-User\u2019s identifier.\u003C/div\u003E \u003Cdiv\u003E\u00a0- Licence Code and Token can be easily implemented at the Authorization Server(OP) \u00a0in mostly same way as access token.\u003C/div\u003E \u003Cp\u003E\u003C/p\u003E \u003Cp\u003E\u003C/p\u003E \u003C/div\u003E\u003Cp\u003E \u003Ca href=\"http://posterous.com\"\u003EPosted via email\u003C/a\u003E from \u003Ca href=\"http://lafoglia.posterous.com/ad-hoc-oauth-server\"\u003ENotes for Digital Identities and Computing in the Cloud\u003C/a\u003E\u00a0|\u00a0\u003Ca href=\"http://lafoglia.posterous.com/ad-hoc-oauth-server#comment\"\u003E\u003Cspan\u003EComment\u00a0\u00bb\u003C/span\u003E\u003C/a\u003E \u003C/p\u003E\u003C/div\u003E"} <div class="posterous_autopost"> <h3><a href="http://www.evernote.com/">From Evernote:</a></h3> <h1>Ad Hoc OAuth server</h1> <div class="ennote"> <div>A RP can be a OAuth server for the other RP(client).  </div> <div>With providing kinda “License Token” to a RP, the RP can be securely provide End-User’s protected resource to the other RP. </div> <div>(1) OAuth  ”code” is delivered to  a Client RP</div> <div>(2) Request an access token.</div> <div>(3) Issue an access token if the Client RP, code and other conditions are valid.</div> <p></p> <div>(1)-(3) are can be omitted if OAuth flow is implicit.</div> <div>OP embeds “license code” as a claim of the access token, which is a kinda access code for the Server RP in a particular authorization.</div> <div>A specific Server RP is selected when the End-User grants the authorization. </div> <p></p> <div>(4) The Client RP request the resource for the access token. That’s an OAuth.</div> <div>(5) The Server RP request the “license token” for  the license code in the access token requested by the Client RP.</div> <div>(6) Issue the license token for the access token  if the license code, the Server RP and other conditions are valid.</div> <div>In license code,  PPID for the Server RP of the End-User and other claims are included to response the End-User’s protected resource.</div> <p></p> <div>(7) Load resource for the license token if the relationship with access token  and other conditions are valid.</div> <div>(8) Publish protected resource to the Client RP.</div> <div> </div> <div><div class="p_embed p_image_embed"> <a href="http://getfile4.posterous.com/getfile/files.posterous.com/lafoglia/qHi1EKGtq0xnFvTQlQFAPnnu1AKTB6XLSTDB8MB6BByvt56yrtDUvJqqEfyG/96d7d53fa0a1c5ae619594ca362abe.png.scaled.1000.jpg"><img src="http://getfile2.posterous.com/getfile/files.posterous.com/lafoglia/GkFCMJaKrJuJb5hAFZsnBrKXfzCyiaU7Igb4EFFPmdt2wBTXFH7YmmPWGJPJ/96d7d53fa0a1c5ae619594ca362abe.png.scaled.500.jpg" height="419" alt="96d7d53fa0a1c5ae619594ca362abe" width="500" /></a> </div> </div> <p></p> <div>Point:</div> <div> - The Client RP is just a OAuth client. It doesn’t know what special are going on underneath.</div> <div> - The Server RP doesn’t have to implement OAuth authorization process.</div> <div> - PPID can be used. Client and Server don’t have to share the End-User’s identifier.</div> <div> - Licence Code and Token can be easily implemented at the Authorization Server(OP)  in mostly same way as access token.</div> <p></p> <p></p> </div><p> <a href="http://posterous.com">Posted via email</a> from <a href="http://lafoglia.posterous.com/ad-hoc-oauth-server">Notes for Digital Identities and Computing in the Cloud</a> | <a href="http://lafoglia.posterous.com/ad-hoc-oauth-server#comment"><span>Comment »</span></a> </p></div>Thu, 22 Dec 2011 01:02:39 GMThttp://hdknr.soup.io/post/202144329/Ad-Hoc-OAuth-serverurn:www-soup-io:1:202144329regular {"tags":[],"type":"regular","title":"Top 5 artists this week","source":"http://www.last.fm/user/hdknr/charts/","body":"\u003Col\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003Cli\u003E\u003Ca rel=\"nofollow\"\u003E\u003C/a\u003E\u00a0\u003C/li\u003E\u003C/ol\u003E"} <ol><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li><li><a></a> </li></ol>Sun, 18 Dec 2011 12:00:00 GMThttp://hdknr.soup.io/post/201128050/Top-5-artists-this-weekurn:www-soup-io:1:201128050regular {"tags":[],"type":"regular","title":"Connect/OAuth: Credentials","source":null,"body":"\u003Cp\u003E\u003C/p\u003E\u003Cdiv class=\"posterous_autopost\"\u003E\u003Cdiv class=\"p_embed p_image_embed\"\u003E \u003Ca href=\"http://getfile5.posterous.com/getfile/files.posterous.com/lafoglia/12kyur3IkJZYhaTnMwGmHMU13B1zahlJpoGMrVG5Bd962ZrOpT0VM6jXSXwM/untitled.jpg.scaled.1000.jpg\"\u003E\u003Cimg src=\"http://getfile3.posterous.com/getfile/files.posterous.com/lafoglia/GHSzw5zF5LyrddlNFCtxhWpog1bdMAM1GwVKaKCgoZyNrDj92hhkgF40O8A6/untitled.jpg.scaled.500.jpg\" height=\"500\" alt=\"Untitled\" width=\"500\" /\u003E\u003C/a\u003E \u003C/div\u003E \u003Cp\u003E \u003Ca href=\"http://posterous.com\"\u003EPosted via email\u003C/a\u003E from \u003Ca href=\"http://lafoglia.posterous.com/connectoauth-credentials\"\u003ENotes for Digital Identities and Computing in the Cloud\u003C/a\u003E\u00a0|\u00a0\u003Ca href=\"http://lafoglia.posterous.com/connectoauth-credentials#comment\"\u003E\u003Cspan\u003EComment\u00a0\u00bb\u003C/span\u003E\u003C/a\u003E \u003C/p\u003E\u003C/div\u003E\u003Cp\u003E\u003C/p\u003E"} <p></p><div class="posterous_autopost"><div class="p_embed p_image_embed"> <a href="http://getfile5.posterous.com/getfile/files.posterous.com/lafoglia/12kyur3IkJZYhaTnMwGmHMU13B1zahlJpoGMrVG5Bd962ZrOpT0VM6jXSXwM/untitled.jpg.scaled.1000.jpg"><img src="http://getfile3.posterous.com/getfile/files.posterous.com/lafoglia/GHSzw5zF5LyrddlNFCtxhWpog1bdMAM1GwVKaKCgoZyNrDj92hhkgF40O8A6/untitled.jpg.scaled.500.jpg" height="500" alt="Untitled" width="500" /></a> </div> <p> <a href="http://posterous.com">Posted via email</a> from <a href="http://lafoglia.posterous.com/connectoauth-credentials">Notes for Digital Identities and Computing in the Cloud</a> | <a href="http://lafoglia.posterous.com/connectoauth-credentials#comment"><span>Comment »</span></a> </p></div><p></p>Fri, 16 Dec 2011 01:52:33 GMThttp://hdknr.soup.io/post/199742396/Connect-OAuth-Credentialsurn:www-soup-io:1:199742396regular