3 ms·
OAuth 1.0 is mix of authentication problem (as solved by HTTP authentication) and connection protection problem (as solved by SSL) and cross-site authentication
by vlisivka 16y ago
OAuth 1.0 is mix of authentication problem (as solved by HTTP authentication) and connection protection problem (as solved by SSL) and cross-site authentication problem.
OAuth 2.0 is mix of authentication problem (as solved by HTTP authentication) and cross-site authentication problem.
I hope, OAuth 3.0 will solve cross-site authentication problem only, so I can use standard HTTP or cookie-based authentication solutions and standard HTTPS protocol (when necessary).
- lalinsky 16y agoAuthentication is an important part of OAuth for me. If you fall back to standard HTTP authentication (Basic/Digest), client-side applications need to know the user passwords. This isn't perfect even when there are passwords, but it doesn't work at all when there are no passwords (like when the site is an OpenID consumer). Isn't that the problem OAuth was trying to solve?