News for hackers. Stuff that matters.

A comment on OAuth 2.0 Security Best Current Practice. Parent comment

Re:OAuth 2.0 Security Best Current Practice by tptacek on Tuesday May 05, 2020 @01:57PM (#23082783)
Whatever the intentions may have been, it is definitely not the case that OAuth pushes complexity to authorization servers. My audit checklist for OAuth clients is fairly long.
[ Parent | on HN ]
Re:OAuth 2.0 Security Best Current Practice by anderspitman on Tuesday May 05, 2020 @03:01PM (#23083528)
As someone in the early stages implementing Oauth2 for the first time, I would be interested in seeing that list, if you don't mind sharing.
[ Parent | on HN ]
Re:OAuth 2.0 Security Best Current Practice by mooreds on Tuesday May 05, 2020 @03:09PM (#23083626)
Agreed, I'd love to read that blog post.
[ Parent | on HN ]
Re:OAuth 2.0 Security Best Current Practice by Zenst on Tuesday May 05, 2020 @06:07PM (#23085661)
Or Book/booklet, I'd buy that as I'm sure many would.

Indeed, there are some people when it comes to best practices, that I respect more than industry standards as they are usual best practices that will be standard tomorrow.

[ Parent | on HN ]