OAuth 2.0 Integration Setup
Set up OAuth 2.0 authentication with authorization URL generation, token handling, and state parameter security.
このレシピの使いどころ
Implement 'Sign in with Google/GitHub/Microsoft' in your web app. OAuth 2.0 is the industry standard for delegated authorization and social login.
ステップ
Secret Generator
このツールを試す →Create a secure state parameter
OAuth Token Generator
このツールを試す →Build the authorization URL
JWT Decoder
このツールを試す →Verify the identity token
よくある質問
What's the difference between OAuth 2.0 and OpenID Connect?
OAuth 2.0 handles authorization (access to resources). OpenID Connect adds an identity layer on top (who the user is). For login, you want OIDC which includes OAuth 2.0.
Why is the state parameter important?
The state parameter prevents CSRF attacks. Without it, an attacker could trick users into connecting the attacker's account. Always validate state on callback.
関連レシピ
Secure Password Workflow
Generate a strong password, verify its strength, and hash it for storage — a complete password security pipeline.
Web Security Header Audit
Audit your website's security headers, generate a CSP policy, evaluate it, and configure CORS.
JWT Authentication Setup
Set up JWT-based authentication: generate tokens, create signing keys, and implement TOTP for 2FA.
API Security Hardening
Harden your API with HMAC request signing, secure secrets, and SRI for client-side integrity.