senooken JP Social
  • FAQ
  • Login
senooken JP Socialはsenookenの専用分散SNSです。
  • Public

    • Public
    • Network
    • Groups
    • Popular
    • People

Conversation

Notices

  1. hiromi_mi (hiromi_mi@mblg.hiromi-mi.jp)'s status on Sunday, 14-Feb-2021 22:42:06 JST hiromi_mi hiromi_mi

    GitHub の OAuth 認証には GET https://github.com/login/oauth/authorize に state というランダムな値をとる引数があり、こちらが送った値とResponseが一致するかで CSRF対策として使えることを知った

    https://docs.github.com/en/developers/apps/authorizing-oauth-apps#web-application-flow

    In conversation Sunday, 14-Feb-2021 22:42:06 JST from mblg.hiromi-mi.jp permalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: github.githubassets.com
      Build software better, together
      GitHub is where people build software. More than 56 million people use GitHub to discover, fork, and contribute to over 100 million projects.
    2. Domain not in remote thumbnail source whitelist: docs.github.com
      Authorizing OAuth Apps - GitHub Docs
      You can enable other users to authorize your OAuth App.

    Feeds

    • Activity Streams
    • RSS 2.0
    • Atom
    • Help
    • About
    • FAQ
    • TOS
    • Privacy
    • Source
    • Version
    • Contact

    senooken JP Social is a social network, courtesy of senooken. It runs on GNU social, version 2.0.2-beta0, available under the GNU Affero General Public License.

    Creative Commons Attribution 3.0 All senooken JP Social content and data are available under the Creative Commons Attribution 3.0 license.