简体   繁体   English

基于OAuth令牌的身份验证是否绑定到物理机或私钥?

[英]Is OAuth token-based authentication tied to a physical machine or to the private key?

I've set up an OAuth authentication between my computer and a server. 我已经在计算机和服务器之间设置了OAuth身份验证。 I did the OAuth dance and have generated and obtained the keys/secrets required to access private data from the server with OAuth. 我进行了OAuth跳舞,并生成并获得了使用OAuth从服务器访问私有数据所需的密钥/秘密。

I was wondering if there is anything restricting me from using the OAuth keys on another machine? 我想知道是否有什么限制我不能在另一台计算机上使用OAuth密钥?

In other words could I just copy the private key and resource owner key/secrets to another machine and use it to authenticate with the server with OAuth? 换句话说,我是否可以将私钥和资源所有者密钥/秘密复制到另一台计算机上,并使用它通过OAuth与服务器进行身份验证?

Yes, You can use them on another machine to perform authentication. 是的,您可以在另一台计算机上使用它们来执行身份验证。 OAuth is not tied to any machine. OAuth未绑定到任何计算机。 Consider your Google/FB login, you can authenticate from any machine. 考虑您的Google / FB登录名,您可以从任何计算机上进行身份验证。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM