実際困る！クロスドメイン間のセッション管理を考えよう

Transcript

1. ࣮ࡍࠔΔʂ
 ΫϩευϝΠϯؒͷηογϣϯ؅ཧΛߟ͑Α͏ !PSFLZVV
2. ࣗݾ঺հ w !PSFLZVV
   w ͓࢓ࣄ
   3BJMT
   
   1)1
   w ฼ࠃޠ
   +BWB
   w #VSJ,BJHJ࣮͸ճ໨
3. ฉ͖ऴΘͬͨ͋ͱͷཧ૝ w ΫϩευϝΠϯؒͰϩάΠϯঢ়ଶͷಉظΛऔΔ̍ख๏Λ஌͍ͬͯΔ
   w /PU
   ࣮૷Ͱ͖Δ
4. ໨࣍ w γϯάϧαΠϯΦϯฤ
   w ηογϣϯ؅ཧฤ
   w γϯάϧϩάΞ΢τฤ
   w ࣮ફฤ
5. ొ৔ਓ෺ w UPEPUFTU
   
   LBOCBOUFTU
 ڞ௨ͷ*%ͰϩάΠϯͰ͖ΔͭͷαʔϏε
   w BVUIUFTU
 ͕͜͜ೝՄαʔόʔ
7. γϯάϧαΠϯΦϯ w Α͋͘Δ0"VUIͱ͔Ͱ΍ͬͯΔ΍ͭ
   w 4QSJOH4FDVSJUZͷ0"VUIͷػೳͱ͔࢖͑͹ඵͰ࣮૷Ͱ͖Δ
   w αϯϓϧ͸Α͘ݟ͔͚Δ
8. ೝՄίʔυϑϩʔ BVUIUFTUʹϩάΠϯࡁΈηογϣϯ͕͋Ε͹
 ͙͢ʹίʔϧόοΫ͢Δ
9. Ϣʔβʔʹͱͬͯͷମݧ w UPEPUFTUͰϩάΠϯޙɺLBOCBOUFTUʹΞΫηε͢Δͱ·ͩະϩάΠϯ
   w LBOCBOUFTUͰϩάΠϯϘλϯΛԡ͢ͱɺJEQBTTXPSEΛೖΕͳͯ͘΋
 ϩάΠϯঢ়ଶʹͳΔ
10. 4QSJOH4FDVSJUZͰͷ࣮૷
11. ͪΐͬͱدΓಓ
    0QFO*%
    $POOFDU
    %JTDPWFSZ w ΫϥΠΞϯτ͕ೝՄαʔόʔͷ֤छΤϯυϙΠϯτͷ৔ॴ΍ɺ
 ͲͷΑ͏ͳػೳΛαϙʔτ͍ͯ͠Δ͔Λڭ͑ΔͨΊͷ΋ͷ
    w ೝՄαʔόʔͷXFMMLOPXOPQFOJEDPOpHVSBUJPOʹKTPOܗࣜͰ഑ஔ
 ͞ΕΔ
    w 4QSJOH4FDVSJUZ͸͔͜͜ΒೝՄΤϯυϙΠϯτͳͲͷ৘ใΛಘΔͷͰɺ JTTVFSVSM͕Θ͔Ε͹ྑ͍
12. ͪΐͬͱدΓಓ
    0QFO*%
    $POOFDU
    %JTDPWFSZ
13. ηογϣϯ؅ཧ w UPEPUFTUʹϩάΠϯޙɺLBOCBOUFTUΛ։͘ͱϩάΠϯࡁΈʹ
 ͳͬͯ΄͍͠
    w UPEPUFTUͰϩάΞ΢τͨ͠ΒLBOCBOUFTUͰϩάΞ΢τࡁΈʹ
 ͳͬͯ΄͍͠
 
 γϯάϧϩάΞ΢τ
 ؔ࿈࢓༷
 0QFO*%
    $POOFDU
    4FTTJPO
    .BOBHFNFOU
 0QFO*%
    $POOFDU
    #BDL$IBOOFM
    -PHPVU
 0QFO*%
    $POOFDU
    'SPOU$IBOOFM
    -PHPVU
14. 0QFO*%
    $POOFDU
    4FTTJPO
    .BOBHFNFOU w ΫϩευϝΠϯͰηογϣϯ؅ཧ͢ΔͨΊͷ࢓༷
 %SBGUʹͳͬͯΔ͚Ͳ
    w JGSBNFΛϖʔδ಺ʹ࢓ࠐΜͰɺೝՄαʔόʔͷϖʔδΛ։͍ͯ
 ೝՄαʔόʔͷηογϣϯ͕มΘͬͯͳ͍͔Λ֬ೝ͢Δ
15. 0QFO*%
    $POOFDU
    4FTTJPO
    .BOBHFNFOU
16. 01
    JGSBNFͷ৔ॴ
18. Ϣʔβʔͷମݧ w UPEPUFTUͰϩάΠϯͨ͋͠ͱLBOCBOUFTUʹ๚ΕΔͱBVUIUFTUʹϦμΠ ϨΫτ͞Εɺଈ࠲ʹίʔϧόοΫͯ͠ϩάΠϯࡁΈʹͳΔ
    w UPEPUFTU͔ΒϩάΞ΢τͯ͠΋LBOCBOUFTUʹ͸·ͩϩάΠϯঢ়ଶ͕࢒ͬ ͍ͯΔ
 ͑ͬɾɾɾʁ
19. ϩάΞ΢τ͞Εͳ͍ݪҼ ͜͜Ͱ͸ϩάΞ΢τ͞ΕΔ BVUIUFTU͔Β͸ϩάΞ΢τͯ͠ͳ͍
20. 31*OJUJBUFE
    -PHPVU w UPEPUFTU͔ΒϩάΞ΢τͨ͜͠ͱΛೝՄαʔόʔʹ఻͍͑ͨ
    w UPEPUFTUͰϩάΞ΢τޙʹFOE@TFTTJPO@FOEQPJOU΁ϦμΠϨΫτͯ͠ೝ ՄαʔόʔͰ΋ϩάΞ΢τͯ͠໭ͬͯ͘Ε͹ྑ͍
    w ৔ॴ͸0QFO*%
    $POOFDU
    %JTDPWFSZʹରԠͯ͠ΔͳΒ FOE@TFTTJPO@FOEQPJOUʹ63-͕ೖ͍ͬͯΔ
21. 31*OJUJBUFE
    -PHPVU
22. ࣮ફฤ
 4QSJOH
    4FDVSJUZ ,FZDMPBL
23. ؀ڥ w 4QSJOH
    #PPU
    
    w TQSJOHCPPUTUBSUFSPBVUIDMJFOU
    w ,FZDMPBL
    
24. ʙγϯάϧαΠϯΦϯ
25. ʙ31*OJUJBUFE
    -PHPVU
26. DIFDL
    TFTTJPO
    JGSBNF
27. ݁࿦ w 0QFO*%
    $POOFDU
    4FTTJPO
    .BOBHFNFOUΛ࢖͏͜ͱͰΫϩευϝΠϯؒ Ͱ΋ϩάΠϯঢ়ଶΛಉظ͢Δ͜ͱ͕Մೳ
    w 4QSJOH
    4FDVSJUZ͸31*OJUJBUFE
    -PHPVU΍0QFO*%
    $POOFDU
    %JTDPWFSZ ʹରԠ͍ͯ͠ΔͷͰ༻ҙʹରԠՄೳ
    w ,FZDMPBLͱ߹Θͤͯ࢖͏͜ͱͰ4FTTJPO
    .BOBHFNFOUͷ࣮ݱ΋༰қ