In February, I have posted an article about oauth_wrap mobile webapp profile. Now that it is unified to OAuth 2.0 drafts, here is another shot:…
View More OAuth 2.0 Mobile WebApp FlowAuthor: Nat
Having been working on Digital Identity since 2000.
Co-author of various identity related specifications like OpenID Connect, JSON Web Token.
Chair of the OpenID Foundation (2011-)
Vice Chair of the OpenID Foundation (2010),
Founder of OpenID Foundation Japan (2008-),
Trustee of Kantara Initiative (2009-).
OpenID AB and Attributes – OpenID Connect?
So, when the sun rises, it is the 10th IIW day. I hoped to prepare more, but with the current ill-health, this probably is the…
View More OpenID AB and Attributes – OpenID Connect?Re: XAuth: First Take
Since the site did not accept the comment… This is a reply to: http://eternallyoptimistic.com/2010/04/20/xauth-first-take/ XAuth seems to be nothing but a shared cookie, so it…
View More Re: XAuth: First TakeNTT docomo now an OpenID Provider
The largest mobile operator in Japan, NTT docomo, which covers approximately 50% of Japanese population, started offering OpenID authentication on March 9, 2010. Every docomo user…
View More NTT docomo now an OpenID ProviderOASIS Open: Submission of requests for Reviews etc.
Just a personal memo on OASIS process as one of the TC chair, but OIDF should develop this kind of chart as well, I think.…
View More OASIS Open: Submission of requests for Reviews etc.OAuth Wrap Mobile Web App Profile?
The wrap_scope, especially when it is determined dynamically using standard vocabulary such as something similar to OpenID AX, can become quite big. Under such circumstances,…
View More OAuth Wrap Mobile Web App Profile?CX on OAuth WRAP
Like there can be OpenID GET/POST and Artifact Binding for CX, there can be WRAP binding as well. It is fairly trivial, arguably more trivial…
View More CX on OAuth WRAPWhy is the Artifact 400 bytes?
In the current Artifact Binding manuscript, the artifact is being defined as a string shorter than 400 bytes. Some people asked why 400 and not…
View More Why is the Artifact 400 bytes?Attribute Type URI and Script Type
There has been some talk around Attribute Type URI couple of months ago in OpenID mailing lists. Unless we define a set of widely agreed…
View More Attribute Type URI and Script TypeEssence of Contract Exchange
Abstract This article describes the concept of (abstract) Contract Exchange, and then discusses the OpenID Binding and Use of the Contracts as Access Tokens. At…
View More Essence of Contract Exchange