oauth 2.0 - How to identify provider for oauth2 redirect_uri callback? -


im trying undertand how identify provider returning authorization request initiated by. see 3 approaches:

  • use provider specific redirect_uri callback uris. /oauth2/<provider-name>/callback etc.
  • encode provider id/name in state parameter somehow
  • store pending provider id/name in web session
  • try verify response used providers

i've read parts of oauth2 spec can't find discussing it. looking @ other client implementations seems provider specific uris common solution. missing something?

clients may not multi-tenant , tightly integrated single authorization server, there's no need store provider identifier because there's single fixed one. may reason why there's no obvious solution.

multi-provider clients your's should store provider identifier part of state. because state should protected, , provider specific redirect_uri not. 1 play access token provider against callback provider b , defeat purpose of provider specific callback.

state can protected either reference server state or encrypted cookie, or value in form of self-contained encrypted structured value state parameter, , can safe mechanism store provide identifier.


Comments

Post a Comment

Popular posts from this blog

IF statement in MySQL trigger -

this query code in mysql trigger. if 1=2 select 'yes'; else select 'no'; end if; but has following error: if '1'='2' select 'yes' error code: 1064. have error in sql syntax; check manual corresponds mysql server version right syntax use near 'if '1'='2' select 'yes'' @ line 1 0.000 sec what solution?
Read more

c++ - What does MSC in "// appease MSC" comments mean? -

i run across // appease msc in c++ comments, e.g. here : const int& array::operator[](int offset) const { int mysize = getitssize(); if (offset >= 0 && offset < getitssize()) return ptype[offset]; throw xboundary(); return ptype[offset]; // appease msc! } what msc stand ? the author means microsoft's compiler, more formally known msvc.
Read more

javascript - Blogger related post gadget image Resize s72-c [ Need Expert Help ] -

i run blogger blog , use follow code javascript code (requires no jquery) show related post labels/categories of post. <script type='text/javascript'> var defaultnoimage=&quot;http://1.bp.blogspot.com/-m72rpguntq0/vuokijudn_i/aaaaaaaaboi/lq18sceunsg/w72/favicon-tik.png&quot;; var maxresults=16; var splittercolor=&quot;#d4eaf2&quot;; var relatedpoststitle=&quot;related posts&quot;; </script> <script type='text/javascript'>//<![cdata[ var relatedtitles = new array(); var relatedtitlesnum = 0; var relatedurls = new array(); var thumburl = new array(); function related_results_labels_thumbs(json) { (var = 0; < json.feed.entry.length; i++) { var entry = json.feed.entry[i]; relatedtitles[relatedtitlesnum] = entry.title.$t; try { thumburl[relatedtitlesnum] = entry.media$thumbnail.url } catch (error) {...
Read more