FastMCP OAuth Proxy with Cognito

ҏլ༟ల 'BTU.$10"VUI1SPYZ XJUI$PHOJUP +"846("*.-ɿ(FOFSBUJWF"*.--5େձ

ࣗݾ঺հ ҏլ༟ల גࣜձࣾΤΫα΢Οβʔζ 4PGUXBSF&OHJOFFS ޷͖ͳαʔϏε"NB[PO#FESPDL"HFOU$PSF Y Y Y

.$1ͷೝՄ

.$1ͷೝՄΫϥΠΞϯτొ࿥ w 1SF3FHJTUSBUJPO w %$3 %ZOBNJD$MJFOU3FHJTUSBUJPO w $*.% $MJFOU*E.FUBEBUB%PDVNFOUT

1SF3FHJTUSBUJPO w DMJFOU@JE DMJFOU@TFDSFUΛࣄલʹొ࿥͢Δ w ೝՄαʔόʔͱ.$1$MJFOU͕ط஌ͷ৔߹ʹΑ͘ϫʔΫ͢Δ w $PHOJUPͰαϙʔτ͞Ε͍ͯΔ

ط஌Ҏ֎ͷΫϥΠΞϯτͰ͸ʜ w .$1Ͱ͸ࣄલʹDMJFOU@JE DMJFOU@TFDSFUΛొ࿥͍ͯ͠ͳ͍Α͏ͳ ΫϥΠΞϯτͷಈతͳొ࿥΋ߟྀ͍ͨ͠ $MJFOU" SFEJSFDU@VSJ IUUQTBDPNʜ $MJFOU# SFEJSFDU@VSJ
IUUQTCDPNʜ .$14FSWFS ૬ख͝ͱʹSFEJSFDU63*ͱDMJFOU 3FHJTUSBUJPOΛରԠ͢Δඞཁ͕͋Δ

%$3 %ZOBNJD$MJFOU3FHJTUSBUJPO w ઀ଓ࣌ʹɺͦͷ৔ͰೝՄαʔόʔ΁ΫϥΠΞϯτΛొ࿥͢Δํࣜ w 3FHJTUFS"1*ʹNFUBEBUBΛૹΓɺೝՄαʔόʔ͕DMJFOU@JEΛൃߦ͢Δ w .$1Ͱొ৔ .$1Ͱ4IPVME.BZʹมߋ w
$PHOJUPͰαϙʔτ͞Ε͍ͯͳ͍ 1045SFHJTUFS $POUFOU5ZQFBQQMJDBUJPOKTPO \ SFEJSFDU@VSJT<IUUQTDMJFOUFYBNQMFDBMMCBDL> DMJFOU@OBNF&YBNQMF$MJFOU lHSBOU@UZQFTz<lBVUIPSJ[BUJPO@DPEFz> ʜ ^ )551$SFBUFE $POUFOU5ZQFBQQMJDBUJPOKTPO \ DMJFOU@JET#IE3LRU DMJFOU@TFDSFU DMJFOU@JE@JTTVFE@BU ʜ ^ 3FRVFTU 3FTQPOTF

$*.% $MJFOU*E.FUBEBUB%PDVNFOUT w .$1$MJFOUଆͰࣗ਎ͷ৘ใΛެ։͢Δ63-Λϗετ͢Δ w ೝՄαʔόʔʹ63-Λ$MJFOU*Eͱͯ͠ొ࿥͠63-͔Β৘ใΛऔಘͯ͠΋Β͏ w .$1Ͱ௥Ճ4IPVMEͱͯ͠هࡌ͞Ε͍ͯΔ w $PHOJUPͰαϙʔτ͞Ε͍ͯͳ͍
\ DMJFOU@JEIUUQTBQQFYBNQMFDPNPBVUIDMJFOUKTPO DMJFOU@OBNF&YBNQMF.$1$MJFOU SFEJSFDU@VSJT<lIUUQTTBNQMFDPNDBMMCBDLz> ^ 3FRVFTU IUUQTBQQFYBNQMFDPNPBVUIDMJFOUKTPO DMJFOU@JE

ະ஌ͷެ։ΫϥΠΞϯτʹରͯ͠͸ɺ $*.%%$3͕͋Δͱ઀ଓମݧ͕ࣗવʹͳΔ ͔͠͠ɺ$*.%%$3͸ $PHOJUPͰ͸αϙʔτ͞Ε͍ͯͳ͍ʜ αϙʔτ͞Ε͍ͯͳ͍Ҏ্ Ͳ͏͢Δ͜ͱ΋Ͱ͖ͳ͍ͷ͔ʜʁ

'BTU.$10"VUI1SPYZ ͰղܾͰ͖Δʂ

'BTU.$10"VUI1SPYZ

'BTU.$1 w .$14FSWFSͷ࣮૷ʹ࢖༻Ͱ͖ΔϑϨʔϜϫʔΫ w ߴϨϕϧϑϨʔϜϫʔΫͰগͳ͍ίʔυͰ.$14FSWFSΛ࣮૷Ͱ͖Δ

'BTU.$10"VUI1SPYZ w ೝՄαʔόʔͱ.$14FSWFSͷؒʹ1SPYZϨΠϠʔΛ࡞੒͢Δ w 1SPYZ͕0"VUIΛ஥հ͠ɺ%$3΍$*.%Λαϙʔτ͢Δ͜ͱ͕Ͱ͖Δ .$1$MJFOU 0"VUI1SPYZ SFHJTUFSBVUIPSJ[FUPLFOΛݞ୅ΘΓ $MJFOU৘ใͷอ࣋ $PHOJUPͱͷDPEFFYDIBOHF
'BTU.$1+85ͷൃߦ $PHOJUP

'BTU.$10"VUI1SPYZ Λ༻͍ͯ$PHOJUPͰ %$3΍$*.%Λαϙʔτ͢Δ

'BTU.$10"VUI1SPYZͰͷ%$3 'BTU.$11SPYZ͕ॲཧΛݞ୅ΘΓ͠ɺ%$3ʹରԠ͍ͯ͠ΔΑ͏ʹݟͤΔ ॲཧͷྲྀΕ $MJFOUSFHJTUFSDMJFOUNFUBEBUBΛQSPYZʹૹΔ 1SPYZ͕$MJFOUͷ৘ใΛอଘ͢Δ 1SPYZ͕.$1$MJFOUʹฦ౴͠ɺొ࿥ࡁΈͱͯ͠ݟͤΔ

'BTU.$10"VUI1SPYZͰͷ$*.% w 1SPYZ͕DMJFOU@JEʹهࡌ͞Εͨ63-ͷ֬ೝΛߦ͏ w )551463-͔ w NFUBEBUBͷDMJFOU@JEͱొ࿥͞Εͨ63-͕Ұக͍ͯ͠Δ͔ w SFEJSFDU@VSJTʹ໰୊͸ͳ͍͔ \
DMJFOU@JEIUUQTBQQFYBNQMFDPNPBVUIDMJFOUKTPO DMJFOU@OBNF&YBNQMF.$1$MJFOU SFEJSFDU@VSJT<IUUQTTBNQMFDPNDBMMCBDL> ^ 3FRVFTU IUUQTBQQFYBNQMFDPNPBVUIDMJFOUKTPO DMJFOU@JE

'BTU.$10"VUI1SPYZ ೝՄϑϩʔ

0"VUI1SPYZͰͷೝՄϑϩʔ .$1$MJFOUͷΫϥΠΞϯτొ࿥Λߦ͏ ͍ͮΕ͔ͷํ๏Ͱ࣮ࢪ1SF3FHJTUSBUJPO $*.% %$3 1SPYZ͔Β63-Λฦ٫͠ঝೝͨ͠ϒϥ΢βͷΈDBMMCBDLΛڐՄ͢Δ 1SPYZ͔Β$PHOJUPͱͷ0"VUI
1SPYZͱ$PHOJUPͷؒͰBVUIPSJ[FDBMCBDLUPLFOΛ࣮ࢪ $MJFOU5PLFO&YDIBOHF 1SPYZ͔ΒΫϥΠΞϯτʹDBMMCBDL͠ɺΫϥΠΞϯτͷ1,$&Λݕূͯ͠ɺ 'BTU.$15PLFOΛฦ٫͢Δ

0"VUI1SPYZͰͷೝՄϑϩʔͷϙΠϯτ w 0"VUI1SPYZ͕ೖΔ͜ͱͰɺ1,$&DBMMCBDLUPLFO͕ॏԽ͞ΕΔ w DBMMCBDL1SPYZ$MJFOU $PHOJUP1SPYZͷछྨ w 1,$&$MJFOU1SPYZ 1SPYZ$PHOJUPͷछྨ w
UPLFO$PHOJUPൃߦͱ'BTU.$1ൃߦͷछྨ .$14FSWFSͰͷݕূͰ͸'BTU.$15PLFOΛ࢖༻

$MJFOUαΠυ΁ͷ DBMMCBDL DMJFOU1,$& WFSJ fi FS औಘͨ͠ 'BTU.$1UPLFO ొ৔ਓ෺ͱͦΕͧΕ͕஌͍ͬͯΔ΋ͷ .$1$MJFOU
DPOTFOUΛԡͨ͠ #SPXTFS 1SPYZ$PPLJF #SPXTFS6TFS $MJFOUͷ DMJFOU@JE DMJFOU@T FDSFUFUD $PHOJUPͷ DMJFOU@JE DMJFOU@TFDSFUFUD $PHOJUPͷUPLFO UPLFOอଘ༻ͷ 4UPSBHF 0"VUI1SPYZ ࣄલొ࿥ࡁΈͷ "QQMJDBUJPO $MJFOU 0"VUI1SPYZͷ DBMMCBDL63- "84$PHOJUP 'BTU.$1UPLFO ͷݕূ ͻͭΑ͏ʹԠͯ͡ $PHOJUPUPLFOΛ TFSWFSTJEFͰར ༻ .$14FSWFS 0"VUI1SPYZͷΈ͕$MJFOUଆͱ$PHOJUPଆͷ૒ํͷࣄ৘Λ஌͍ͬͯΔ

ೝՄίʔυϑϩʔ IUUQTHPGBTUNDQDPNTFSWFSTBVUIPBVUIQSPYZ

IUUQTHPGBTUNDQDPNTFSWFSTBVUIPBVUIQSPYZ

ΫϥΠΞϯτొ࿥ํࣜ 1SF3FHJTUSBUJPO $*.% %$3ʹΑΔΫϥΠΞϯτొ࿥ํࣜͷҧ͍ ೝՄϑϩʔͷॳΊͷΫϥΠΞϯτొ࿥Ͱҧ͍͸͋Δ͕ɺ ͦͷޙͷೝՄϑϩʔ͸ͲͷํࣜͰ΋ಉ͡ɺҧ͍͸ॳΊ͚ͩ

$MJFOU͕1SPYZʹBVUIPSJ[F͢Δ ͜ͷ࣌఺Ͱ1SPYZ͸ʮ࠷ޙʹͲ͜΁ฦ͔͢ʯͱʮDMJFOUଆ1,$&ʯΛ֮͑Δ .$1$MJFOU #SPXTFS6TFS 0"VUI1SPYZ "84$PHOJUP .$14FSWFS 0QFOBVUI63- (&5BVUIPSJ[F อଘ
DMJFOU@JE SFEJSFDU@VSJ TDPQFT DMJFOU1,$& DIBMMFOHF SFTPVSDF $MJFOU͕ૹΔ΋ͷ SFEJSFDU@VSJ DPEF@DIBMMFOHF

1SPYZͰDPOTFOUͱCSPXTFSCJOEJOH ঝೝͨ͠CSPXTFS͚͕ͩDBMMCBDLΛड͚औΕΔΑ͏ʹ͢Δ .$1$MJFOU #SPXTFS6TFS 0"VUI1SPYZ "84$PHOJUP .$14FSWFS "QQSPWF $POTFOUQBHF ը໘ʹग़͢΋ͷ
$MJFOU໊ 3FEJSFDU63* 3FRVFTUFETDPQFT

1SPYZ͸$PHOJUPʹBVUIPSJ[FΛ౤͛Δ $PHOJUP͕ݟΔͷ͸1SPYZͱ͍͏ͻͱͭͷ0"VUI"QQ .$1$MJFOU #SPXTFS6TFS 0"VUI1SPYZ "84$PHOJUP .$14FSWFS UPDPHOJUPBVUIPSJ[F #SPXTFSSFUVSOT 3FRVFTU
DMJFOU@JE$PHOJUPBQQDMJFOU SFEJSFDS@VSJ1SPYZDBMMCBDL63- 1SPYZ1,$&$IBMMFOHF TDPQFTTUBUF

$PHOJUP͸1SPYZͷDBMMCBDLʹ໭͢ ೝՄίʔυ͕ฦΔઌ͸$MJFOUͰ͸ͳ͘ɺ1SPYZͷDBMMCBDL .$1$MJFOU #SPXTFS6TFS 0"VUI1SPYZ "84$PHOJUP .$14FSWFS (&5BVUIDBMMCBDL DBMMCBDL DPEF
$BMMCBDL$IFDL ಉ͡CSPXTFSʹ໭͖͔ͬͯͨ֬ೝ͠ɺ ผCSPXTFSͳΒDBMMCBDLΛSFKFDU͢Δ

1SPYZ͸$PHOJUPʹUPLFOΛίʔϧ͢Δ $PHOJUPͷUPLFO͸4FSWFS4JEFʹด͡ɺ$MJFOUʹ͸౉Βͳ͍ .$1$MJFOU #SPXTFS6TFS 0"VUI1SPYZ "84$PHOJUP .$14FSWFS BDDFTTUPLFOSFGSFTIUPLFO 1045UPLFO 1SPYZ4UPSBHF
$PHOJUPͷBDDFTTUPLFOͱSFGSFTI UPLFOΛ҉߸Խͯ͠อଘ͢Δ

1SPYZ͸CSPXTFSΛDMJFOUDBMMCBDL΁໭͢ ͜͜Ͱ໭͢DPEF͸DMJFOU͕1SPYZʹରͯ͠࢖͏DPEFɻ$PHOJUPͷͰ͸ͳ͍ɻ .$1$MJFOU #SPXTFS6TFS 0"VUI1SPYZ "84$PHOJUP .$14FSWFS .$1$MJFOUDBMMCBDL DMJFOUDBMMCBDL QSPYZDPEF
/FX"VUI$PEF DMJFOU@JEʹඥͮ͘ظݶͷ୹͍1SPYZ "VUIPSJ[BUJPO$PEF ͋ͱͰDMJFOUͷUPLFOͰ࢖͏

$MJFOU͸1SPYZʹରͯ͠UPLFOΛୟ͘ DMJFOUଆ1,$&ͷݕূΛ1SPYZ΁ͷUPLFOͰߦ͏ɻ .$1$MJFOU #SPXTFS6TFS 0"VUI1SPYZ "84$PHOJUP .$14FSWFS 1045UPLFO DMJFOUWFSJ fi
FS 1SPYZ7BMJEBUJPO "VUIPSJ[BUJPODPEF͸༗ޮ͔ DMJFOU@JE͸Ұக͢Δ͔ DMJFOU1,$&WFSJ fi FS͸߹͏͔ ݕূ͢Δ1,$& $MJFOU1SPYZͷ1,$&ɻ $PHOJUPʹର͢Δ1,$&Ͱ͸ͳ ͍ͨΊ஫ҙɻ

1SPYZ͕'BTU.$1UPLFOΛൃߦ͢Δ $MJFOUʹ͸͜ͷ.$14FSWFSઐ༻ͷUPLFOΛ'BTU.$1Ͱൃߦͯ͠ฦ͢ .$1$MJFOU #SPXTFS6TFS 0"VUI1SPYZ "84$PHOJUP .$14FSWFS 'BTU.$1"DDFTTUPLFOSFGSFTIUPLFO $MJFOU͕ड͚औΔ΋ͷ 'BTU.$1BDDFTTUPLFO
'BTU.$1SFGSFTIUPLFO

ϩάΠϯޙͷ௨ৗϦΫΤετ $MJFOU͔Βݟ͑Δͷ͸'BTU.$1UPLFOͷΈɻ$PHOJUPUPLFO͸ඞཁʹԠͯ͡࢖͏ɻ .$1$MJFOU #SPXTFS6TFS 0"VUI1SPYZ "84$PHOJUP .$14FSWFS "VUIPSJ[BUJPO#FBSFS'BTU.$15PLFO DMJFOU͸$PHOJUPͷUPLFOΛ஌ Βͳͯ͘΋.$14FSWFSΛී௨
ʹ࢖༻͢Δ͜ͱ͕Ͱ͖Δ 7BMJEBUF

'BTU.$10"VUI1SPYZͷৼΔ෣͍ w .$1$MJFOUʹ͸"VUI4FSWFSͱͯ͠ɺ $PHOJUPʹ͸0"VUI$MJFOUͱͯ͠ৼΔ෣͏ w ཁ఺ w $MJFOU͸1SPYZΛ"VUI4FSWFSͱͯ͠ѻ͏ w 1SPYZ͸$PHOJUPʹରͯ͠0"VUI$MJFOUͱͯ͠;Δ·͏
w $MJFOUʹฦ͢ͷ͸'BTU.$15PLFOɻ $PHOJUP5PLFO͸4FSWFS4JEFͰด͡Δɻ

۩ମతͳ࣮૷ 'BTU.$1ͱ$PHOJUPͱͷ౷߹

'BTU.$10"VUI1SPYZͱ$PHOJUPͷ౷߹ w 'BTU.$1Ͱ"84$PHOJUP1SPWJEFS͕ఏڙ͞Ε͍ͯΔ w "84$PHOJUP1SPWJEFSΛ࢖༻͢Δ͜ͱͰ0"VUI1SPYZΛػೳͤ͞ΒΕΔ

"84$PHOJUP1SPWJEFS 5IF"84$PHOJUP1SPWJEFSIBOEMFT+85WBMJEBUJPOBOEVTFSDMBJNT BVUI@QSPWJEFS"84$PHOJUP1SPWJEFS VTFS@QPPM@JElBQOPSUIFBTU@999999999 :PVS"84$PHOJUPVTFSQPPM*% BXT@SFHJPOlBQOPSUFBTUz "84SFHJPO DMJFOU@JEZPVSBQQDMJFOUJE :PVSBQQDMJFOU*%
DMJFOU@TFDSFUZPVSBQQDMJFOUTFDSFU :PVSBQQDMJFOU4FDSFU CBTF@VSMIUUQMPDBMIPTU .VTUNBUDIZPVSDBMMCBDL63- SFEJSFDU@QBUIBVUIDBMMCBDL%FGBVMUWBMVF DVTUPNJ[FJGOFFEFE NDQ'BTU.$1 OBNF"84$PHOJUP4FDVSFE"QQ BVUIBVUI@QSPWJEFS $PHOJUPͷ6TFS1PPMͷઃఆ஋Λ࢖༻͠"84$PHOJUP1SPWJEFSΛఆٛ 'BTU.$1ͷBVUIʹࢦఆ͢Δ͜ͱͰ0"VUI1SPYZͱͯ͠ৼΔ෣͏ IUUQTHPGBTUNDQDPNJOUFHSBUJPOTBXTDPHOJUP

5PLFOͷӬଓԽ+854JHOJOH,FZͷઃఆ w ຊ൪؀ڥͰ͸5PLFOͷӬଓԽ͕ඞཁ w DMJFOU@TUPSBHFΛઃఆ͢Δ w 1SPYZ͕'BTU.$15PLFOͷൃߦओମͷͨΊɺ4JHOJOH,FZ΋͍Δ w KXU@TJHOJOH@LFZΛઃఆ͢Δ

DMJFOU@TUPSBHF w ͦͷ··Ͱ͸ฏจͰอଘ͞ΕΔ w 'FSOFU&ODSZQUJPO8SBQQFSͰ8SBQ͢Δ͜ͱͰ҉߸ԽΛαϙʔτ w 4UPSBHFʹ͸"TZOD,FZ7BMVF͕࢖༻Ͱ͖Δ ྫɿ3FEJT DMJFOU@TUPSBHF'FSOFU&ODSZQUJPO8SBQQFS
LFZ@WBMVF3FEJT4UPSF IPTUPTFOWJSPO<3&%*4@)045> QPSUJOU PTFOWJSPO<3&%*4@1035> GFSOFU'FSOFU PTFOWJSPO<4503"(&@&/$3:15*0/@,&:>

"84$PHOJUP1SPWJEFSͷઃఆ w DMJFOU@TUPSBHFͱKXU@TJHOJOH@LFZΛઃఆͨ͠"84$PHOJUP1SPWJEFS BVUI@QSPWJEFS"84$PHOJUP1SPWJEFS VTFS@QPPM@JEFVDFOUSBM@999999999 BXT@SFHJPOFVDFOUSBM DMJFOU@JEZPVSBQQDMJFOUJE
DMJFOU@TFDSFUZPVSBQQDMJFOUTFDSFU CBTF@VSMIUUQTZPVSQSPEVDUJPOEPNBJODPN 1SPEVDUJPOUPLFONBOBHFNFOU KXU@TJHOJOH@LFZPTFOWJSPO<+85@4*(/*/(@,&:> DMJFOU@TUPSBHF'FSOFU&ODSZQUJPO8SBQQFS LFZ@WBMVF3FEJT4UPSF IPTUPTFOWJSPO<3&%*4@)045> QPSUJOU PTFOWJSPO<3&%*4@1035> GFSOFU'FSOFU PTFOWJSPO<4503"(&@&/$3:15*0/@,&:>

·ͱΊ w .$1$MJFOUͷಈతͳొ࿥Λαϙʔτ͢Δʹ͸$*.%΍%$3͕ඞཁ w ͔͠͠ɺ$PHOJUP͸$*.%ɺ%$3Λαϙʔτ͍ͯ͠ͳ͍ w 'BTU.$10"VUI1SPYZʹΑΔ1SPYZϨΠϠʔʹΑͬͯ$*.%ɺ%$3Λؒ઀త ʹαϙʔτ͢Δ͜ͱ͕Ͱ͖Δ w ࣮૷͸"84$PHOJUP1SPWJEFSΛ࢖༻͠ൺֱత؆қʹͰ͖Δ

5IBOLZPV

FastMCP OAuth Proxy with Cognito

FastMCP OAuth Proxy with Cognito

More Decks by iganin

Other Decks in Technology

Featured

Transcript