• OAuth is an open protocol to allow secure API authorization in a simple and standard method from desktop and web applications.

    On April 23, 2009, a security advisory was released after major vendors, such as Twitter, implemented fixes for the security hole. The security hole was in the OAuth request token approval flow. http://oauth.net/advisories/2009-1

  • Background

    The OAuth project was started in November 2006 when Blaine Cook was working on Twitter's OpenID implementation (which was never publicly released). Blaine needed a way to allow users, who use OpenIDs to authenticate, to have access to API resources. Blaine gathered quite a few people to join the conversation on how this problem could be solved.

    On December 4, 2007, the OAuth 1.0 spec was released into the wild. Many companies, including Flickr, Google, Pownce, and Twitter implemented OAuth to allow access to protected resources through authorization, instead of relying on users to give their password out to anyone who asks.

About this page

  • Page Views
    190
What is this?

Page Manager

What is this?
This page currently has no vertical manager.