OAuth2 / OIDC / FAPI の理解をちょっと深めてみる

Transcript

1. !HPSPV@
    0"VUI
   
   0*%$
   
   '"1*
   ͷཧղ ΛͪΐͬͱਂΊͯΈΔ ʙ
   ۚ༥"1*͔Β"*ΤʔδΣϯτ·Ͱ
   ʙ
2. • ݀Ҫ ྯ • XΞΧ΢ϯτ: @gorou_178 • ๭ۚ༥ձࣾͷ։ൃձࣾॴଐ • Banking as a Service (BaaS)୲౰ • ϥϯφʔ 🏃 ࣗݾ঺հ
3. ࠓ೔࿩͢͜ͱ ର৅ɾΰʔϧ w ର৅
   w 0"VUI
   
   0*%$Λʮ࢖ͬͨ͜ͱ͸͋Δʯ
   w Ͱ΋શମ૾͸͍͋·͍ͳਓ
   w ΰʔϧ
   w 0"VUI
   
   0*%$
   
   '"1*
   ͷؔ܎ੑΛཧղ
4. 0"VUIͱ͸ 0"VUI͸ೝՄϑϨʔϜϫʔΫ w ೝূͰ͸ͳ͍
   w ʮ୭͕ɾԿʹɾͲ͜·ͰΞΫηεͰ͖Δ͔ʯΛτʔΫϯͰҕৡ͢Δ࢓૊Έ 💡A͞ΜʹʮAPI Xʯར༻ͷಉҙΛಘ͍ͯΔͳΒ ✅ A͞ΜͷτʔΫϯɺAPI Xͷར༻OK ❌ A͞ΜͷτʔΫϯɺAPI Yͷར༻NG
5. 0*%$ͱ͸ 0*%$͸ೝূϓϩτίϧ w 0QFO
   *%
   $POOFDUͷུ
   w ೝূ݁Ռͷʮ୭͕ɾͲͷೝՄαʔόʔͰɾͲͷΑ͏ʹʯΛ
   ݕূՄೳʹ͢Δඪ४࢓༷
   w *%
   5PLFOͱ͍͏ϑΥʔϚοτͱͯ͠ఆٛ ✅
   *%
   5PLFOͱ͸
   ʮ͜ͷਓ͸ɺ"αʔόͰύεΩʔͰೝূ͞Εͨʯ
   ͜ͱΛࣔ͢ূ໌ॻͷ༷ͳ΋ͷ
6. 0*%$ͷϑϩʔ֓ཁ ೝՄίʔυϑϩʔͷ৔߹ ਤҾ༻
   IUUQTRJJUBDPN5BLBIJLP,BXBTBLJJUFNTFFCECGFGC
7. 0*%$ͷϑϩʔ֓ཁ ೝՄίʔυϑϩʔͷ৔߹ ਤҾ༻
   IUUQTRJJUBDPN5BLBIJLP,BXBTBLJJUFNTFFCECGFGC ͜ͷ৘ใΛ
   ৴པ͢Δ
8. 0"VUIͱ0*%$ͷ՝୊ w ༗ޮͳτʔΫϯͰ"1*࣮ߦͰ͖Δ͕ɺτʔΫϯΛ౪·ΕͨΒʁ
   w ۚ༥"1*Ͱ͸ڐ͞Εͳ͍🙅
   w ৴པ͚ͩͰ͸कΕͳ͍
   w ҆શੑΛڧ੍͢Δϧʔϧ͕ඞཁ
   w ˠ
   '"1*ͷొ৔
9. '"1*ͱ͸ w '"1*
   
   'JOBODJBMHSBEF
   "1*
   w 0"VUI
   
   0*%$
   Λલఏʹɺۚ༥ϨϕϧͷηΩϡϦςΟΛڧ੍͢Δ࢓༷܈
   w 0"VUI
   
   0*%$͸࣮૷ύλʔϯ͕͍͔ͭ͋͘Δ͕ͦΕΛڧ੍
   w ۚ༥ͱ͍ͬͯ΋͍Ζ͍Ζ͋Δ
   w Ոܭ฽ΞϓϦ
   
   ిࢠϚωʔ΁ͷνϟʔδ
   w ͦΕͧΕηΩϡϦςΟϨϕϧ͕ҟͳΔ
   ˠ
   ϓϩϑΝΠϧͷొ৔
10. '"1*
    1SPGJMF w 1SP fi MF
    
    ηΩϡϦςΟཁ݅ηοτ
    w ඞཁ࠷খݶͷอޢɺ΋͘͠͸ΑΓڧԽ͢Δ͔બ୒Մೳ
    w '"1*
    
    #BTFMJOF
    w '"1*
    
    "EWBODFE
    w '"1*
    
    4FDVSJUZ
    1SP fi MF
    w '"1*
    
    .FTTBHF
    4JHOJOH
11. "*ΤʔδΣϯτͱ0"VUI w "*ΤʔδΣϯτ͕"1*Λ࢖͏࣌୅ʢۚ༥"1*΋ྫ֎Ͱ͸ͳ͍ʣ
    w উखʹ"*͕࣮ߦ͞ΕΔͱࠔΔͨΊɺڐՄʢೝՄʣͯ͠೚͍ͤͨʢ0"VUIʣ
    w ೝՄͷ؅ཧ͕ΑΓॏཁʹͳΔ
    w ೝՄͷҕ೚΍ೝՄ৘ใͷ఻೻͕ॏཁ͔ͭอޢ͞ΕΔඞཁ͕͋ΔͨΊ8(΋ࡢ ೥্ཱ͕͍ͪͬͯΔ
    w "*ΤʔδΣϯτ૬ޓར༻΍"1*ར༻ʹ͓͍ͯ0"VUI
    
    0*%$
    
    '"1*ͷ࢓૊Έ͕ ΑΓ׆༻͞Ε͍ͯ͘ʢ஌͍ͬͯΔͱ໾ʹཱͭ͸ͣʣ💡
12. ஶऀ
    "VUI԰
    λΠτϧ
    งғؾͰ0"VUIΛ࢖͍ͬͯΔΤϯ δχΞ͕࠷৽ͷϕετϓϥΫςΟε 0"VUIΛ੔ཧֶͯ͠΂Δຊ
    ίϝϯτ
    ༻ޠ΍֤ϑϩʔͷҙຯ΍ཧ༝Λ͠ ͔ͬΓֶ΂·͢ɻೖ໳ʹϐολϦ ͓͢͢Ίॻ੶ᶃ ॻ੶
    IUUQTCPPUIQNKBJUFNT
13. ஶऀ
    
    +VTUJO
    3JDIFS"OUPOJP
    4BOTP
    λΠτϧ
    0"VUIపఈೖ
    ˞ʮ0"VUI
    
    JO
    "DUJPOʯͷ೔ຊޠ຋༁൛
    ίϝϯτ
    0"VUIͷഎܠ͔Βɺ֤छϑϩʔͷ ࢓૊Έʹ͍ͭͯΑΓৄ͘͠ཧղͰ ͖Δ গ͠ಡΈղ͘ͷ͕೉͍͠෦෼ ͋Γ ͓͢͢Ίॻ੶ᶄ ॻ੶
    IUUQTXXXBNB[PODPKQEQ
14. "QQFOEJY
    ೝূ΍ೝՄ͸ճ0,Ͱे෼ʁ w 0"VUI
    
    0*%$
    ͸ʮൃߦ࣌఺ͷ৴པʯ
    w Ͱ΋ݱ࣮͸ʜ
    w ୺຤౪೉
    w ΞΧ΢ϯτ৵֐
    w "*͕௕࣌ؒಈ͘
    w ˠ
    ৴པ͸్தͰյΕΔ
    w ͦͷʮյΕͨॠؒʯΛ఻͑Δ࢓૊Έ͕4IBSFE
    4JHOBMT
    'SBNFXPSL 44'
15. "QQFOEJY
    44'֓೦ਤ
16. "QQFOEJY
    '"1*
    1SPGJMF w '"1*
    
    #BTFMJOF
    ۚ༥ͷࢀরܥ"1*Λ҆શʹఏڙ͢ΔͨΊͷ࠷খϓϩϑΝΠϧ
    w '"1*
    
    "EWBODFE
    ߋ৽ܥ"1*΋ؚΊͯ҆શʹѻ͏ͨΊͷڧԽϓϩϑΝΠϧ
    w '"1*
    
    4FDVSJUZ
    1SP fi MF
    '"1*
    
    "EWBODFE
    Λ੔ཧ͠ɺӡ༻͠΍͘͢࠶ઃܭͨ͠΋ͷ
    w '"1*
    
    .FTTBHF
    4JHOJOH
    ॺ໊ϕʔεͰ'"1*ཁ݅Λຬͨͨ͢Ίͷ୅ସϓϩϑΝΠϧ
17. ·ͱΊ w 0"VUI
    
    ೝՄͷ౔୆
    w 0*%$
    
    ೝূͷඪ४
    w '"1*
    
    ۚ༥Ϩϕϧͷ҆શੑ
    w 44'
    
    "*ΤʔδΣϯτ࣌୅ͷ৴པͷࣦޮ؅ཧͰϦεΫ௿ݮ