Timeline for Difference Between OAUTH, OpenID and OPENID Connect in very simple term?
Current License: CC BY-SA 3.0
7 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Jun 22, 2017 at 16:16 | comment | added | Andrew Marshall | @ptf If they can get access to it, then of course they can. An OAuth token, and, well, any form of access token is of course capable of being used by a third-party whose gained access to it somehow. The server said could, in either case, attempt to apply heuristics (e.g. geolocation, access behavior) to assert that it may be a malicious actor and expire session or force MFA assertion. | |
Oct 18, 2016 at 22:12 | comment | added | jtpereyda | @ptf Sounds like a separate question! | |
Sep 30, 2016 at 8:44 | comment | added | ptf | Why couldn't someone snap up the certificate in the OpenID Authentication and pretend to be the authenticated user? | |
S Apr 27, 2015 at 0:12 | history | suggested | KyleMit♦ | CC BY-SA 3.0 |
added link to original on wikipedia
|
Apr 26, 2015 at 23:10 | review | Suggested edits | |||
S Apr 27, 2015 at 0:12 | |||||
May 19, 2014 at 8:58 | review | First posts | |||
May 19, 2014 at 9:18 | |||||
May 19, 2014 at 8:39 | history | answered | Vrashabh Irde | CC BY-SA 3.0 |