4 ms·
You don't need a server for auth, that's what web identity federation[1] is for. [1] http://aws.typepad.com/aws/2013/05/aws-iam-now-supports-amazon-facebook-an
by sha90 13y ago
You don't need a server for auth, that's what web identity federation[1] is for.
[1] http://aws.typepad.com/aws/2013/05/aws-iam-now-supports-amazon-facebook-and-google-identity-federation.html http://aws.typepad.com/aws/2013/05/aws-iam-now-supports-amaz...
- davidjgraph 13y agoIn the flow picture at the bottom, the STS looks like a server to me. What I'm saying is the auth flow still seems to require a server to act as an indirection to the real auth server. But if Amazon provide that part for us, great.
- sha90 13y agoIt's not just Amazon providing this-- there is Login With Amazon, but there is also Facebook and Google that act as identity providers. Unless I'm mistaken, this is how Google's storage APIs work too, by using OAuth/OpenID to get an access token that can then be exchanged for keys.
- jeffbarr 13y agoHere's a sample that will let you authenticate using Facebook and then upload content to S3: http://aws.amazon.com/developers/getting-started/browser/ http://aws.amazon.com/developers/getting-started/browser/