2007-12-05-oauth-core-10-specification-released.html

---
layout: post
title: OAuth Core 1.0 Specification released
tags:
- mashups
- oauth
- openID
date: 2007-12-05 19-47-32
---

<p>Finally <a href="http://blog.oauth.net/2007/12/04/oauth-core-10-specification-released-at-internet-identity-workshop/" target="_blank">the OAuth Core Specification 1.0</a> was released. For those who don't know, OAuth allows the you the User to grant access to your private resources on one site (which is called the Service Provider), to another site (called Consumer, not to be confused with you, the User). While OpenID is all about using a single identity to sign into many sites, OAuth is about giving access to your stuff without sharing your identity at all (or its secret parts).</p>

<p>If you want a quick introduction to OAuth's concepts, there is <a href="http://blog.oauth.net/2007/12/02/leah-culver-of-pownce-on-oauth/" target="_blank">a good talk of Leah Culver, from Pownce</a>, where you can see OAuth in action in <a href="http://nsyght.com/" target="_blank">Nsyght</a>.</p>

<p>We'll have to read the specification in detail, and see if the big players implement their service providers. Since <a href="http://openid.net/specs/openid-authentication-2_0-12.html" target="_blank">OpenID 2.0's draft</a> is about to be approved (and since <a href="http://openid.net/2007/12/03/microsoft-and-google-both-ship-openid/" target="_blank">both Google and Microsoft have new OpenID support</a>), it will be interesting to see how both OpenID and OAuth complement each other.</p>

<p><strong>12/06:</strong> <a href="http://openid.net/2007/12/05/openid-2_0-final-ly/" target="_blank">A few hours after I posted this</a>, <a href="http://openid.net/specs/openid-authentication-2_0.html" target="_blank">OpenID 2.0 specification was released</a> so we'll have to see what happens from now on.</p>