News for hackers. Stuff that matters.

A comment on OAuth 2.0 and OpenID Redirect Vulnerability. Parent comment

Re:OAuth 2.0 and OpenID Redirect Vulnerability by vertex-four on Friday May 02, 2014 @11:17AM (#7686181)
Not just a decent implementation; an implementation which meets the spec. This is not a problem with OAuth2, which explicitly requires registration of URIs where the implicit grant type is used, and covers other cases well in the Security Considerations section.
[ Parent | on HN ]
Re:OAuth 2.0 and OpenID Redirect Vulnerability by nailer on Friday May 02, 2014 @04:11PM (#7687849)
That makes a lot of sense: I've only really dealt with oAuth 2, as oAuth 1.0a is vastly more complicated and only Twitter seems to still use it.

Thanks icebraining & vertex-four.

[ Parent | on HN ]