W3C's blessed approach to distributed single sign-on system - presentation by Erich Bremer. Erich's foaf public signature: http://www.ebremer.com/foaf.rdf:
<?xml version="1.0" encoding="UTF-8"?>
<rdf:RDF
xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
xmlns:rdfs="http://www.w3.org/2000/01/rdf-schema#"
xmlns:foaf="http://xmlns.com/foaf/0.1/"
xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#"
xmlns:cert="http://www.w3.org/ns/auth/cert#"
xmlns:pm="http://www.web-semantics.org/ns/pm#"
xmlns:contact="http://www.w3.org/2000/10/swap/pim/contact#"
xmlns:pos="http://www.w3.org/2003/01/geo/wgs84_pos#"
xmlns:rss="http://purl.org/rss/1.0/"
xmlns:wn="http://xmlns.com/wordnet/1.6/"
xmlns:air="http://www.daml.org/2001/10/html/airport-ont#"
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:ical="http://www.w3.org/2002/12/cal/ical#"
xmlns:doap="http://usefulinc.com/ns/doap#">
<foaf:PersonalProfileDocument rdf:about="http://www.ebremer.com/foaf.rdf">
<foaf:maker rdf:resource="http://www.ebremer.com/foaf.rdf#me"/>
<foaf:primaryTopic rdf:resource="http://www.ebremer.com/foaf.rdf#me"/>
<foaf:title>Erich Bremer's profile</foaf:title>
</foaf:PersonalProfileDocument>
<foaf:Person rdf:about="http://www.ebremer.com/foaf.rdf#me">
<foaf:name>Erich Bremer</foaf:name>
<foaf:title>Mr.</foaf:title>
<foaf:givenname>Erich</foaf:givenname>
<foaf:firstName>Erich</foaf:firstName>
<foaf:family_name>Bremer</foaf:family_name>
<foaf:img rdf:resource="http://www.ebremer.com/ebfiles/erich.jpg" />
<foaf:birthday>1968-04-22</foaf:birthday>
<foaf:status>Happy</foaf:status>
<foaf:mbox rdf:resource="mailto:erich@ebremer.com"/>
<foaf:homepage rdf:resource="http://www.ebremer.com"/>
<foaf:phone rdf:resource="tel:631-444-3560"/>
<foaf:based_near>
<pos:Point>
<pos:lat>40.836695</pos:lat>
<pos:long>-72.916725</pos:long>
</pos:Point>
</foaf:based_near>
<contact:nearestAirport>
<wn:Airport>
<air:name>MacArthur Airport</air:name>
<air:iataCode>ISP</air:iataCode>
<air:icaoCode>KISMP</air:icaoCode>
<air:location>Islip, New York, United States</air:location>
<air:latitude>40.789278</air:latitude>
<air:longitude>-73.097545</air:longitude>
<air:elevation>99</air:elevation>
</wn:Airport>
</contact:nearestAirport>
<foaf:schoolHomepage rdf:resource="http://www.rpi.edu"/>
<foaf:holdsAccount><foaf:OnlineAccount><foaf:accountServiceHomepage rdf:resource="http://www.skype.com/"/><foaf:accountName>erich.bremer</foaf:accountName></foaf:OnlineAccount></foaf:holdsAccount>
<foaf:knows>
<foaf:Person>
<foaf:name>Tammy DiPrima</foaf:name>
<foaf:mbox rdf:resource="mailto:tammy.diprima@stonybrook.edu"/>
<rdfs:seeAlso rdf:resource="http://tdiprima.com/foaf.rdf#me"/>
</foaf:Person>
</foaf:knows>
<foaf:knows rdf:resource="http://bblfish.net/people/henry/card#me"/>
<cert:key>
<cert:RSAPublicKey>
<cert:modulus rdf:datatype="http://www.w3.org/2001/XMLSchema#hexBinary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cert:modulus>
<cert:exponent rdf:datatype="http://www.w3.org/2001/XMLSchema#integer">65537</cert:exponent>
</cert:RSAPublicKey>
</cert:key>
</foaf:Person>
</rdf:RDF>
Prefix service: http://prefix.cc/
Cryptography already supported in the browser:
https://developer.mozilla.org/en-US/docs/Web/API/Web_Crypto_API
https://www.w3.org/TR/WebCryptoAPI/
Some reference material first about the OAUTH2 dance with Microsoft:
...
and on JSON Web Tokens
- JWT:
- JWT on node.js: https://blog.dirk-eisenberg.de/2015/06/13/azure-active-directory-verify-issued-jwt-in-node-js
With ADAL.js [Wade]: https://sbm-it.github.io/oauth-msdn
Going primitive [Jonas]: https://github.com/sbm-it/msdn
YouTube Screencast: https://www.youtube.com/watch?v=913GqjMutLc
A catalog of 158 OAUTH enpoints with specs and scoping: https://grant.outofindex.com [Thank you Joe!]
___
The future of add-to-home-screen Web Apps, the service worker model.