Non c'est pas pour facebook c'est pour friendfeed et c'est pas OAuth c'est OAuth WRAP qui semble plutôt une mauvaise chose :
« To be clear, WRAP cannot be considered a profile of OAuth no matter how hard one tries. WRAP is closer to proprietary protocols from Microsoft, Google, and Yahoo! than it is to OAuth. On top of that, existing OAuth libraries are completely useless for implementing WRAP. It is a different protocol, not a profile. In addition, the last remaining artifact of the OAuth community, the Google group, was never included in the discussions or decisions around WRAP, only informed of it. »
Pire ça pourrait freiner l'adoption de OAuth : « In practice, companies deploying WRAP in a large scale now are not likely to deploy OAuth 2.0 for at least another year, and it might take another year for their developer to show interest in migrating to another protocol without additional value (being a standard typically isn’t one). »
Enfin Facebook n'a pas l'intention de déployer OAuth : "OAuth is more complex and less performant than our own native authentication mechanism" (facebook @ identity workshop).
Dommage.
« Je vois bien à quels excès peut conduire une démocratie d'opinion débridée, je le vis tous les jours. » (Nicolas Sarkozy)
[^] # Re: OAuth
Posté par BohwaZ (site web personnel, Mastodon) . En réponse au journal Discutez avec vos contacts facebookTM via XMMP. Évalué à 2.
« To be clear, WRAP cannot be considered a profile of OAuth no matter how hard one tries. WRAP is closer to proprietary protocols from Microsoft, Google, and Yahoo! than it is to OAuth. On top of that, existing OAuth libraries are completely useless for implementing WRAP. It is a different protocol, not a profile. In addition, the last remaining artifact of the OAuth community, the Google group, was never included in the discussions or decisions around WRAP, only informed of it. »
http://hueniverse.com/2009/11/wrap-and-the-demise-of-the-oau(...)
Pire ça pourrait freiner l'adoption de OAuth : « In practice, companies deploying WRAP in a large scale now are not likely to deploy OAuth 2.0 for at least another year, and it might take another year for their developer to show interest in migrating to another protocol without additional value (being a standard typically isn’t one). »
Enfin Facebook n'a pas l'intention de déployer OAuth : "OAuth is more complex and less performant than our own native authentication mechanism" (facebook @ identity workshop).
Dommage.
« Je vois bien à quels excès peut conduire une démocratie d'opinion débridée, je le vis tous les jours. » (Nicolas Sarkozy)