"Passport" Microsoft outdated technology

Source: Internet
Author: User

Although outdated, not time to experience, excerpts from someone else's article, pretending to understand the passport

Microsoft has been using Passport authentication for the past authentication service, but it is a software architecture introduced by n years ago, and of course used by many parts of the software industry to break up ebay and passport in 05 due to many security issues and privacy issues. In succession, many companies have also parted with Microsoft's authentication services. Why is it so? This has to be said from the passport process:

Passport is a Cookie-based authentication service. A sample transactional dialog that uses Passport authentication works as follows:

    1. The client makes an HTTP GET request to a protected resource, such as http://www.contoso.com/default.aspx.
    2. Check whether the customer's Cookie has an existing Passport authentication ticket. If a site finds valid credentials, the site authenticates the customer. If the request does not include a valid authentication ticket, the server returns status code 302 and redirects the customer to the Passport logon service. The response contains a URL in the query string that is sent to the Passport sign-in service to direct the customer back to the original site.
    3. The client performs the redirect operation, sends an HTTP GET request to the Passport logon server, and then transmits the query string information from the original site.
    4. The Passport logon server provides a login form to the customer.
    5. The client fills out the form and uses Secure Sockets Layer (SSL) to send the POST back to the logon server.
    6. The logon server authenticates the user and redirects the customer back to the original URL (http://www.contoso.com/default.aspx). The response contains an encrypted Passport Cookie in the query string.
    7. The customer follows the redirect and requests the original protected resource again, this time using the Passport Cookie.
    8. The passportauthenticationmodule on the originating server detects the presence of a Passport Cookie and tests for authentication. If successful, the request is authenticated.

"Passport" Microsoft outdated technology

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.