OAuth2 / OIDC / FAPI の理解をちょっと深めてみる

!HPSPV@ 0"VUI0*%$'"1*ͷཧղ ΛͪΐͬͱਂΊͯΈΔ ʙۚ༥"1*͔Β"*ΤʔδΣϯτ·Ͱʙ

• ݀Ҫ ྯ • XΞΧ΢ϯτ: @gorou_178 • ๭ۚ༥ձࣾͷ։ൃձࣾॴଐ • Banking
as a Service (BaaS)୲౰ • ϥϯφʔ 🏃 ࣗݾ঺հ

ࠓ೔࿩͢͜ͱ ର৅ɾΰʔϧ w ର৅ w 0"VUI0*%$Λʮ࢖ͬͨ͜ͱ͸͋Δʯ w Ͱ΋શମ૾͸͍͋·͍ͳਓ w ΰʔϧ
w 0"VUI0*%$'"1*ͷؔ܎ੑΛཧղ

0"VUIͱ͸ 0"VUI͸ೝՄϑϨʔϜϫʔΫ w ೝূͰ͸ͳ͍ w ʮ୭͕ɾԿʹɾͲ͜·ͰΞΫηεͰ͖Δ͔ʯΛτʔΫϯͰҕৡ͢Δ࢓૊Έ 💡A͞ΜʹʮAPI Xʯར༻ͷಉҙΛಘ͍ͯΔͳΒ ✅ A͞ΜͷτʔΫϯɺAPI
Xͷར༻OK ❌ A͞ΜͷτʔΫϯɺAPI Yͷར༻NG

0*%$ͱ͸ 0*%$͸ೝূϓϩτίϧ w 0QFO*%$POOFDUͷུ w ೝূ݁Ռͷʮ୭͕ɾͲͷೝՄαʔόʔͰɾͲͷΑ͏ʹʯΛ ݕূՄೳʹ͢Δඪ४࢓༷ w *%5PLFOͱ͍͏ϑΥʔϚοτͱͯ͠ఆٛ ✅*%5PLFOͱ͸
ʮ͜ͷਓ͸ɺ"αʔόͰύεΩʔͰೝূ͞Εͨʯ ͜ͱΛࣔ͢ূ໌ॻͷ༷ͳ΋ͷ

0*%$ͷϑϩʔ֓ཁ ೝՄίʔυϑϩʔͷ৔߹ ਤҾ༻IUUQTRJJUBDPN5BLBIJLP,BXBTBLJJUFNTFFCECGFGC

0*%$ͷϑϩʔ֓ཁ ೝՄίʔυϑϩʔͷ৔߹ ਤҾ༻IUUQTRJJUBDPN5BLBIJLP,BXBTBLJJUFNTFFCECGFGC ͜ͷ৘ใΛ ৴པ͢Δ

0"VUIͱ0*%$ͷ՝୊ w ༗ޮͳτʔΫϯͰ"1*࣮ߦͰ͖Δ͕ɺτʔΫϯΛ౪·ΕͨΒʁ w ۚ༥"1*Ͱ͸ڐ͞Εͳ͍🙅 w ৴པ͚ͩͰ͸कΕͳ͍ w ҆શੑΛڧ੍͢Δϧʔϧ͕ඞཁ w
ˠ'"1*ͷొ৔

'"1*ͱ͸ w '"1*'JOBODJBMHSBEF"1* w 0"VUI0*%$Λલఏʹɺۚ༥ϨϕϧͷηΩϡϦςΟΛڧ੍͢Δ࢓༷܈ w 0"VUI0*%$͸࣮૷ύλʔϯ͕͍͔ͭ͋͘Δ͕ͦΕΛڧ੍ w ۚ༥ͱ͍ͬͯ΋͍Ζ͍Ζ͋Δ w
Ոܭ฽ΞϓϦిࢠϚωʔ΁ͷνϟʔδ w ͦΕͧΕηΩϡϦςΟϨϕϧ͕ҟͳΔˠϓϩϑΝΠϧͷొ৔

'"1*1SPGJMF w 1SP fi MFηΩϡϦςΟཁ݅ηοτ w ඞཁ࠷খݶͷอޢɺ΋͘͠͸ΑΓڧԽ͢Δ͔બ୒Մೳ w '"1*#BTFMJOF w
'"1*"EWBODFE w '"1*4FDVSJUZ1SP fi MF w '"1*.FTTBHF4JHOJOH

"*ΤʔδΣϯτͱ0"VUI w "*ΤʔδΣϯτ͕"1*Λ࢖͏࣌୅ʢۚ༥"1*΋ྫ֎Ͱ͸ͳ͍ʣ w উखʹ"*͕࣮ߦ͞ΕΔͱࠔΔͨΊɺڐՄʢೝՄʣͯ͠೚͍ͤͨʢ0"VUIʣ w ೝՄͷ؅ཧ͕ΑΓॏཁʹͳΔ w ೝՄͷҕ೚΍ೝՄ৘ใͷ఻೻͕ॏཁ͔ͭอޢ͞ΕΔඞཁ͕͋ΔͨΊ8(΋ࡢ ೥্ཱ͕͍ͪͬͯΔ
w "*ΤʔδΣϯτ૬ޓར༻΍"1*ར༻ʹ͓͍ͯ0"VUI0*%$'"1*ͷ࢓૊Έ͕ ΑΓ׆༻͞Ε͍ͯ͘ʢ஌͍ͬͯΔͱ໾ʹཱͭ͸ͣʣ💡

ஶऀ"VUI԰ λΠτϧ งғؾͰ0"VUIΛ࢖͍ͬͯΔΤϯ δχΞ͕࠷৽ͷϕετϓϥΫςΟε 0"VUIΛ੔ཧֶͯ͠΂Δຊ ίϝϯτ ༻ޠ΍֤ϑϩʔͷҙຯ΍ཧ༝Λ͠ ͔ͬΓֶ΂·͢ɻೖ໳ʹϐολϦ ͓͢͢Ίॻ੶ᶃ ॻ੶IUUQTCPPUIQNKBJUFNT

ஶऀ +VTUJO3JDIFS"OUPOJP4BOTP λΠτϧ0"VUIపఈೖ ˞ʮ0"VUIJO"DUJPOʯͷ೔ຊޠ຋༁൛ ίϝϯτ 0"VUIͷഎܠ͔Βɺ֤छϑϩʔͷ ࢓૊Έʹ͍ͭͯΑΓৄ͘͠ཧղͰ ͖Δ গ͠ಡΈղ͘ͷ͕೉͍͠෦෼ ͋Γ
͓͢͢Ίॻ੶ᶄ ॻ੶IUUQTXXXBNB[PODPKQEQ

"QQFOEJYೝূ΍ೝՄ͸ճ0,Ͱे෼ʁ w 0"VUI0*%$͸ʮൃߦ࣌఺ͷ৴པʯ w Ͱ΋ݱ࣮͸ʜ w ୺຤౪೉ w ΞΧ΢ϯτ৵֐ w
"*͕௕࣌ؒಈ͘ w ˠ৴པ͸్தͰյΕΔ w ͦͷʮյΕͨॠؒʯΛ఻͑Δ࢓૊Έ͕4IBSFE4JHOBMT'SBNFXPSL 44'

"QQFOEJY44'֓೦ਤ

"QQFOEJY'"1*1SPGJMF w '"1*#BTFMJOF ۚ༥ͷࢀরܥ"1*Λ҆શʹఏڙ͢ΔͨΊͷ࠷খϓϩϑΝΠϧ w '"1*"EWBODFE ߋ৽ܥ"1*΋ؚΊͯ҆શʹѻ͏ͨΊͷڧԽϓϩϑΝΠϧ w '"1*4FDVSJUZ1SP fi
MF '"1*"EWBODFEΛ੔ཧ͠ɺӡ༻͠΍͘͢࠶ઃܭͨ͠΋ͷ w '"1*.FTTBHF4JHOJOH ॺ໊ϕʔεͰ'"1*ཁ݅Λຬͨͨ͢Ίͷ୅ସϓϩϑΝΠϧ

·ͱΊ w 0"VUIೝՄͷ౔୆ w 0*%$ೝূͷඪ४ w '"1*ۚ༥Ϩϕϧͷ҆શੑ w 44'"*ΤʔδΣϯτ࣌୅ͷ৴པͷࣦޮ؅ཧͰϦεΫ௿ݮ

OAuth2 / OIDC / FAPI の理解をちょっと深めてみる

OAuth2 / OIDC / FAPI の理解をちょっと深めてみる

gorou_178

More Decks by gorou_178

Other Decks in Technology

Featured

Transcript

!HPSPV@ 0"VUI0%$'"1ͷཧղ ΛͪΐͬͱਂΊͯΈΔ ʙۚ༥"1͔Β"ΤʔδΣϯτ·Ͱʙ

• ݀Ҫ ྯ • XΞΧ΢ϯτ: @gorou_178 • ๭ۚ༥ձࣾͷ։ൃձࣾॴଐ • Banking

ࠓ೔࿩͢͜ͱ ର৅ɾΰʔϧ w ର৅ w 0"VUI0*%$Λʮ࢖ͬͨ͜ͱ͸͋Δʯ w Ͱ΋શମ૾͸͍͋·͍ͳਓ w ΰʔϧ

0"VUIͱ͸ 0"VUI͸ೝՄϑϨʔϜϫʔΫ w ೝূͰ͸ͳ͍ w ʮ୭͕ɾԿʹɾͲ͜·ͰΞΫηεͰ͖Δ͔ʯΛτʔΫϯͰҕৡ͢Δ࢓૊Έ 💡A͞ΜʹʮAPI Xʯར༻ͷಉҙΛಘ͍ͯΔͳΒ ✅ A͞ΜͷτʔΫϯɺAPI

0%$ͱ͸ 0%$͸ೝূϓϩτίϧ w 0QFO%$POOFDUͷུ w ೝূ݁Ռͷʮ୭͕ɾͲͷೝՄαʔόʔͰɾͲͷΑ͏ʹʯΛ ݕূՄೳʹ͢Δඪ४࢓༷ w %5PLFOͱ͍͏ϑΥʔϚοτͱͯ͠ఆٛ ✅*%5PLFOͱ͸

0*%$ͷϑϩʔ֓ཁ ೝՄίʔυϑϩʔͷ৔߹ ਤҾ༻IUUQTRJJUBDPN5BLBIJLP,BXBTBLJJUFNTFFCECGFGC

0*%$ͷϑϩʔ֓ཁ ೝՄίʔυϑϩʔͷ৔߹ ਤҾ༻IUUQTRJJUBDPN5BLBIJLP,BXBTBLJJUFNTFFCECGFGC ͜ͷ৘ใΛ ৴པ͢Δ

0"VUIͱ0%$ͷ՝୊ w ༗ޮͳτʔΫϯͰ"1࣮ߦͰ͖Δ͕ɺτʔΫϯΛ౪·ΕͨΒʁ w ۚ༥"1*Ͱ͸ڐ͞Εͳ͍🙅 w ৴པ͚ͩͰ͸कΕͳ͍ w ҆શੑΛڧ੍͢Δϧʔϧ͕ඞཁ w

'"1ͱ͸ w '"1'JOBODJBMHSBEF"1* w 0"VUI0%$Λલఏʹɺۚ༥ϨϕϧͷηΩϡϦςΟΛڧ੍͢Δ࢓༷܈ w 0"VUI0%$͸࣮૷ύλʔϯ͕͍͔ͭ͋͘Δ͕ͦΕΛڧ੍ w ۚ༥ͱ͍ͬͯ΋͍Ζ͍Ζ͋Δ w

'"11SPGJMF w 1SP fi MFηΩϡϦςΟཁ݅ηοτ w ඞཁ࠷খݶͷอޢɺ΋͘͠͸ΑΓڧԽ͢Δ͔બ୒Մೳ w '"1#BTFMJOF w

"ΤʔδΣϯτͱ0"VUI w "ΤʔδΣϯτ͕"1Λ࢖͏࣌୅ʢۚ༥"1΋ྫ֎Ͱ͸ͳ͍ʣ w উखʹ"*͕࣮ߦ͞ΕΔͱࠔΔͨΊɺڐՄʢೝՄʣͯ͠೚͍ͤͨʢ0"VUIʣ w ೝՄͷ؅ཧ͕ΑΓॏཁʹͳΔ w ೝՄͷҕ೚΍ೝՄ৘ใͷ఻೻͕ॏཁ͔ͭอޢ͞ΕΔඞཁ͕͋ΔͨΊ8(΋ࡢ ೥্ཱ͕͍ͪͬͯΔ

ஶऀ"VUI԰ λΠτϧ งғؾͰ0"VUIΛ࢖͍ͬͯΔΤϯ δχΞ͕࠷৽ͷϕετϓϥΫςΟε 0"VUIΛ੔ཧֶͯ͠΂Δຊ ίϝϯτ ༻ޠ΍֤ϑϩʔͷҙຯ΍ཧ༝Λ͠ ͔ͬΓֶ΂·͢ɻೖ໳ʹϐολϦ ͓͢͢Ίॻ੶ᶃ ॻ੶IUUQTCPPUIQNKBJUFNT

ஶऀ +VTUJO3JDIFS"OUPOJP4BOTP λΠτϧ0"VUIపఈೖ ˞ʮ0"VUIJO"DUJPOʯͷ೔ຊޠ຋༁൛ ίϝϯτ 0"VUIͷഎܠ͔Βɺ֤छϑϩʔͷ ࢓૊Έʹ͍ͭͯΑΓৄ͘͠ཧղͰ ͖Δ গ͠ಡΈղ͘ͷ͕೉͍͠෦෼ ͋Γ

"QQFOEJYೝূ΍ೝՄ͸ճ0,Ͱे෼ʁ w 0"VUI0*%$͸ʮൃߦ࣌఺ͷ৴པʯ w Ͱ΋ݱ࣮͸ʜ w ୺຤౪೉ w ΞΧ΢ϯτ৵֐ w

"QQFOEJY44'֓೦ਤ

"QQFOEJY'"11SPGJMF w '"1#BTFMJOF ۚ༥ͷࢀরܥ"1Λ҆શʹఏڙ͢ΔͨΊͷ࠷খϓϩϑΝΠϧ w '"1"EWBODFE ߋ৽ܥ"1΋ؚΊͯ҆શʹѻ͏ͨΊͷڧԽϓϩϑΝΠϧ w '"14FDVSJUZ1SP fi

·ͱΊ w 0"VUIೝՄͷ౔୆ w 0%$ೝূͷඪ४ w '"1ۚ༥Ϩϕϧͷ҆શੑ w 44'"*ΤʔδΣϯτ࣌୅ͷ৴པͷࣦޮ؅ཧͰϦεΫ௿ݮ