authorization-panel

authorization-panel copied to clipboard

input from Jackson

2

https://docs.google.com/document/d/1Gi23auEvq2g35D9yED4KABtiufBHLyBElzShnRJFKLU/edit

michielbdejong

Thoughts on just in time authorization

2

Paper supporting just in time authorization: https://www.usenix.org/conference/hotsec12/workshop-program/presentation/felt

jaxoncreed

Other users authorizing apps

2

How do you limit the apps that others use to access your data? How does this affect user experience?

jaxoncreed

if someone uses a known malicious app, should the storage server warn them? should the IDP/auth server?

michielbdejong

fantastic paper about asking users for permissions: https://www.usenix.org/conference/hotsec12/workshop-program/presentation/felt

michielbdejong

input from Michiel

2

user uses browser to visit a web app web app redirects the user to log in to IDP/auth-server and get a bearer token (could be repeated for JIT auth) IDP/auth-server...

michielbdejong