{"id":477277,"date":"2023-08-09T09:10:23","date_gmt":"2023-08-09T09:10:23","guid":{"rendered":""},"modified":"2023-09-05T11:14:24","modified_gmt":"2023-09-05T11:14:24","slug":"form-authentication","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/jp\/wiki\/form-authentication\/","title":{"rendered":"\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c"},"content":{"rendered":"<p>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306f\u3001Web \u30b5\u30a4\u30c8\u3084 Web \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u304c\u3001\u7279\u5b9a\u306e\u30ea\u30bd\u30fc\u30b9\u3084\u6a5f\u80fd\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u8a31\u53ef\u3059\u308b\u524d\u306b\u30e6\u30fc\u30b6\u30fc\u306e ID \u3092\u78ba\u8a8d\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30e1\u30ab\u30cb\u30ba\u30e0\u3067\u3059\u3002\u30ed\u30b0\u30a4\u30f3 \u30d5\u30a9\u30fc\u30e0\u3092\u4f7f\u7528\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u306f\u30a2\u30af\u30bb\u30b9\u3059\u308b\u305f\u3081\u306b\u30e6\u30fc\u30b6\u30fc\u540d\u3084\u30d1\u30b9\u30ef\u30fc\u30c9\u306a\u3069\u306e\u8cc7\u683c\u60c5\u5831\u3092\u5165\u529b\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u306e\u8a8d\u8a3c\u65b9\u6cd5\u306f\u3001\u627f\u8a8d\u3055\u308c\u305f\u30e6\u30fc\u30b6\u30fc\u3060\u3051\u304c\u6a5f\u5bc6\u60c5\u5831\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3001\u7279\u5b9a\u306e\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u5b9f\u884c\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u305f\u3081\u306b\u3001Web \u30b5\u30a4\u30c8\u3067\u5e83\u304f\u4f7f\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<h2>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306e\u8d77\u6e90\u3068\u305d\u306e\u6700\u521d\u306e\u8a00\u53ca\u306e\u6b74\u53f2<\/h2>\n<p>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306e\u6b74\u53f2\u306f\u3001\u57fa\u672c\u7684\u306a\u8a8d\u8a3c\u30e1\u30ab\u30cb\u30ba\u30e0\u304c\u521d\u3081\u3066\u5c0e\u5165\u3055\u308c\u305f\u30ef\u30fc\u30eb\u30c9 \u30ef\u30a4\u30c9 \u30a6\u30a7\u30d6\u306e\u521d\u671f\u306e\u9803\u306b\u307e\u3067\u9061\u308a\u307e\u3059\u3002\u5f53\u521d\u3001Web \u30b5\u30a4\u30c8\u306f HTTP \u30d7\u30ed\u30c8\u30b3\u30eb\u306e\u7d44\u307f\u8fbc\u307f\u8a8d\u8a3c\u306b\u4f9d\u5b58\u3057\u3066\u304a\u308a\u3001\u30e6\u30fc\u30b6\u30fc\u306f\u30d6\u30e9\u30a6\u30b6\u30fc\u306e\u30dd\u30c3\u30d7\u30a2\u30c3\u30d7 \u30a6\u30a3\u30f3\u30c9\u30a6\u304b\u3089\u8cc7\u683c\u60c5\u5831\u3092\u5165\u529b\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3057\u305f\u3002\u3057\u304b\u3057\u3001\u3053\u306e\u30a2\u30d7\u30ed\u30fc\u30c1\u306f\u9762\u5012\u3067\u30e6\u30fc\u30b6\u30fc\u30d5\u30ec\u30f3\u30c9\u30ea\u30fc\u3067\u306f\u306a\u304b\u3063\u305f\u305f\u3081\u3001\u30d5\u30a9\u30fc\u30e0 \u30d9\u30fc\u30b9\u306e\u8a8d\u8a3c\u306a\u3069\u306e\u3088\u308a\u6d17\u7df4\u3055\u308c\u305f\u65b9\u6cd5\u304c\u958b\u767a\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n<p>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u304c\u521d\u3081\u3066\u8a00\u53ca\u3055\u308c\u305f\u306e\u306f\u3001Web \u30b5\u30a4\u30c8\u304c\u30e6\u30fc\u30b6\u30fc\u306e\u8a8d\u8a3c\u60c5\u5831\u3092\u5b89\u5168\u306b\u53d6\u5f97\u3059\u308b\u305f\u3081\u306b\u30ab\u30b9\u30bf\u30e0 \u30ed\u30b0\u30a4\u30f3 \u30d5\u30a9\u30fc\u30e0\u3092\u5b9f\u88c5\u3057\u59cb\u3081\u305f 1990 \u5e74\u4ee3\u534a\u3070\u306b\u9061\u308a\u307e\u3059\u3002Web \u30c6\u30af\u30ce\u30ed\u30b8\u304c\u9032\u5316\u3059\u308b\u306b\u3064\u308c\u3066\u3001\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u3082\u9032\u5316\u3057\u3001\u4e16\u754c\u4e2d\u306e Web \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3067\u4f7f\u7528\u3055\u308c\u308b\u4e3b\u8981\u306a\u8a8d\u8a3c\u65b9\u6cd5\u306e 1 \u3064\u306b\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n<h2>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306b\u95a2\u3059\u308b\u8a73\u7d30\u60c5\u5831: \u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306e\u30c8\u30d4\u30c3\u30af\u306e\u62e1\u5f35<\/h2>\n<p>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306f\u4e3b\u306b HTML \u30d5\u30a9\u30fc\u30e0\u3092\u4f7f\u7528\u3057\u3066\u30e6\u30fc\u30b6\u30fc\u306e\u8cc7\u683c\u60c5\u5831\u3092\u53ce\u96c6\u3057\u3001\u691c\u8a3c\u306e\u305f\u3081\u306b Web \u30b5\u30fc\u30d0\u30fc\u306b\u9001\u4fe1\u3057\u307e\u3059\u3002\u30e6\u30fc\u30b6\u30fc\u304c Web \u30b5\u30a4\u30c8\u306e\u4fdd\u8b77\u3055\u308c\u305f\u9818\u57df\u307e\u305f\u306f\u30ea\u30bd\u30fc\u30b9\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3088\u3046\u3068\u3059\u308b\u3068\u3001\u30e6\u30fc\u30b6\u30fc\u540d\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5165\u529b\u3059\u308b\u30d5\u30a9\u30fc\u30e0\u3092\u542b\u3080\u30ed\u30b0\u30a4\u30f3 \u30da\u30fc\u30b8\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3055\u308c\u307e\u3059\u3002<\/p>\n<p>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306e\u5185\u90e8\u52d5\u4f5c\u306b\u306f\u3001\u3044\u304f\u3064\u304b\u306e\u91cd\u8981\u306a\u30b9\u30c6\u30c3\u30d7\u304c\u542b\u307e\u308c\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u8a8d\u8a3c\u306e\u30ea\u30af\u30a8\u30b9\u30c8<\/strong>: \u30e6\u30fc\u30b6\u30fc\u304c\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3067\u4fdd\u8b77\u3055\u308c\u305f\u30ea\u30bd\u30fc\u30b9\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3088\u3046\u3068\u3059\u308b\u3068\u3001Web \u30b5\u30fc\u30d0\u30fc\u306f\u30e6\u30fc\u30b6\u30fc\u304c\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u3053\u3068\u3092\u691c\u51fa\u3057\u3001\u30ed\u30b0\u30a4\u30f3 \u30da\u30fc\u30b8\u3078\u306e\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3092\u542b\u3080\u5fdc\u7b54\u3092\u9001\u4fe1\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30ed\u30b0\u30a4\u30f3\u30d5\u30a9\u30fc\u30e0\u306e\u8868\u793a<\/strong>: \u30e6\u30fc\u30b6\u30fc\u306e\u30d6\u30e9\u30a6\u30b6\u306f\u30ed\u30b0\u30a4\u30f3 \u30da\u30fc\u30b8\u3092\u53d7\u4fe1\u3057\u3001\u30ed\u30b0\u30a4\u30f3 \u30d5\u30a9\u30fc\u30e0\u3092\u8868\u793a\u3057\u3066\u3001\u30e6\u30fc\u30b6\u30fc\u306b\u8cc7\u683c\u60c5\u5831\u306e\u5165\u529b\u3092\u6c42\u3081\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30e6\u30fc\u30b6\u30fc\u5165\u529b<\/strong>: \u30e6\u30fc\u30b6\u30fc\u306f\u9069\u5207\u306a\u30d5\u30a9\u30fc\u30e0 \u30d5\u30a3\u30fc\u30eb\u30c9\u306b\u30e6\u30fc\u30b6\u30fc\u540d\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5165\u529b\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8cc7\u683c\u60c5\u5831\u306e\u9001\u4fe1<\/strong>: \u30e6\u30fc\u30b6\u30fc\u304c\u30ed\u30b0\u30a4\u30f3\u30d5\u30a9\u30fc\u30e0\u3092\u9001\u4fe1\u3059\u308b\u3068\u3001\u305d\u306e\u8cc7\u683c\u60c5\u5831\u304c HTTP POST \u30ea\u30af\u30a8\u30b9\u30c8\u3068\u3057\u3066\u30b5\u30fc\u30d0\u30fc\u306b\u9001\u4fe1\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30b5\u30fc\u30d0\u30fc\u3067\u306e\u8a8d\u8a3c<\/strong>: Web \u30b5\u30fc\u30d0\u30fc\u306f\u8cc7\u683c\u60c5\u5831\u3092\u53d7\u3051\u53d6\u308a\u3001\u30e6\u30fc\u30b6\u30fc \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u307e\u305f\u306f\u8a8d\u8a3c\u30b5\u30fc\u30d3\u30b9\u306b\u5bfe\u3057\u3066\u305d\u308c\u3092\u691c\u8a3c\u3057\u307e\u3059\u3002\u8cc7\u683c\u60c5\u5831\u304c\u6b63\u3057\u3044\u5834\u5408\u3001\u30b5\u30fc\u30d0\u30fc\u306f\u30bb\u30c3\u30b7\u30e7\u30f3 \u30c8\u30fc\u30af\u30f3\u307e\u305f\u306f\u8a8d\u8a3c Cookie \u3092\u751f\u6210\u3057\u3001\u305d\u308c\u3092\u30e6\u30fc\u30b6\u30fc\u306e\u30bb\u30c3\u30b7\u30e7\u30f3\u306b\u95a2\u9023\u4ed8\u3051\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30a2\u30af\u30bb\u30b9\u627f\u8a8d<\/strong>: \u8a8d\u8a3c\u304c\u6210\u529f\u3059\u308b\u3068\u3001\u30e6\u30fc\u30b6\u30fc\u306f\u8981\u6c42\u3057\u305f\u30ea\u30bd\u30fc\u30b9\u307e\u305f\u306f\u6a5f\u80fd\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u307e\u3059\u3002\u30b5\u30fc\u30d0\u30fc\u306f\u30e6\u30fc\u30b6\u30fc\u306e\u8a8d\u8a3c\u30b9\u30c6\u30fc\u30bf\u30b9\u3092\u4fdd\u5b58\u3057\u3066\u3001\u7e70\u308a\u8fd4\u3057\u30ed\u30b0\u30a4\u30f3\u3092\u8a66\u884c\u3057\u306a\u304f\u3066\u3082\u4ed6\u306e\u4fdd\u8b77\u3055\u308c\u305f\u9818\u57df\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30a2\u30af\u30bb\u30b9\u304c\u62d2\u5426\u3055\u308c\u307e\u3057\u305f<\/strong>: \u30e6\u30fc\u30b6\u30fc\u306e\u8cc7\u683c\u60c5\u5831\u304c\u6b63\u3057\u304f\u306a\u3044\u304b\u7121\u52b9\u3067\u3042\u308b\u5834\u5408\u3001\u30b5\u30fc\u30d0\u30fc\u306f\u30a2\u30af\u30bb\u30b9\u3092\u62d2\u5426\u3057\u3001\u30a8\u30e9\u30fc \u30e1\u30c3\u30bb\u30fc\u30b8\u3068\u3068\u3082\u306b\u30e6\u30fc\u30b6\u30fc\u3092\u518d\u5ea6\u30ed\u30b0\u30a4\u30f3 \u30da\u30fc\u30b8\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3059\u308b\u3053\u3068\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306e\u4e3b\u306a\u6a5f\u80fd\u306e\u5206\u6790<\/h2>\n<p>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306b\u306f\u3001Web \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4fdd\u8b77\u306b\u3088\u304f\u4f7f\u7528\u3055\u308c\u308b\u3044\u304f\u3064\u304b\u306e\u91cd\u8981\u306a\u6a5f\u80fd\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u4f7f\u3044\u3084\u3059\u3044<\/strong>: \u57fa\u672c\u8a8d\u8a3c\u30dd\u30c3\u30d7\u30a2\u30c3\u30d7\u3068\u6bd4\u8f03\u3057\u3066\u3001\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u3067\u306f\u3001Web \u30b5\u30a4\u30c8\u304c\u30ed\u30b0\u30a4\u30f3 \u30da\u30fc\u30b8\u306e\u5916\u89b3\u3068\u30d6\u30e9\u30f3\u30c9\u3092\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u3067\u304d\u308b\u305f\u3081\u3001\u3088\u308a\u30e6\u30fc\u30b6\u30fc \u30d5\u30ec\u30f3\u30c9\u30ea\u30fc\u306a\u30a8\u30af\u30b9\u30da\u30ea\u30a8\u30f3\u30b9\u304c\u63d0\u4f9b\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5b89\u5168\u306a\u8cc7\u683c\u60c5\u5831\u306e\u9001\u4fe1<\/strong>: \u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306b\u3088\u308a\u3001\u30e6\u30fc\u30b6\u30fc\u8cc7\u683c\u60c5\u5831\u304c HTTPS \u7d4c\u7531\u3067\u5b89\u5168\u306b\u9001\u4fe1\u3055\u308c\u308b\u305f\u3081\u3001\u653b\u6483\u8005\u306b\u3088\u308b\u508d\u53d7\u306e\u30ea\u30b9\u30af\u304c\u8efd\u6e1b\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30bb\u30c3\u30b7\u30e7\u30f3\u7ba1\u7406<\/strong>: \u30e6\u30fc\u30b6\u30fc\u8a8d\u8a3c\u304c\u4e00\u5b9a\u671f\u9593\u6709\u52b9\u306a\u30bb\u30c3\u30b7\u30e7\u30f3\u306e\u4f5c\u6210\u3092\u53ef\u80fd\u306b\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u306e\u30d6\u30e9\u30a6\u30b8\u30f3\u30b0 \u30bb\u30c3\u30b7\u30e7\u30f3\u4e2d\u306b\u983b\u7e41\u306b\u30ed\u30b0\u30a4\u30f3\u3059\u308b\u5fc5\u8981\u6027\u304c\u8efd\u6e1b\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u53ef\u80fd\u306a\u30a2\u30af\u30bb\u30b9\u5236\u5fa1<\/strong>: Web \u30b5\u30a4\u30c8\u3067\u306f\u3001\u30ab\u30b9\u30bf\u30e0 \u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u30ed\u30b8\u30c3\u30af\u3092\u5b9f\u88c5\u3057\u3066\u3001\u3055\u307e\u3056\u307e\u306a\u30ea\u30bd\u30fc\u30b9\u306b\u5bfe\u3057\u3066\u7570\u306a\u308b\u627f\u8a8d\u30ec\u30d9\u30eb\u3092\u5b9a\u7fa9\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30a2\u30a4\u30c7\u30f3\u30c6\u30a3\u30c6\u30a3\u30d7\u30ed\u30d0\u30a4\u30c0\u3068\u306e\u7d71\u5408<\/strong>: \u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306f\u3001LDAP\u3001Active Directory\u3001OAuth \u306a\u3069\u306e\u3055\u307e\u3056\u307e\u306a ID \u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u3068\u7d71\u5408\u3057\u3066\u3001\u96c6\u4e2d\u8a8d\u8a3c\u3068\u30b7\u30f3\u30b0\u30eb \u30b5\u30a4\u30f3\u30aa\u30f3 (SSO) \u6a5f\u80fd\u3092\u5b9f\u73fe\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306e\u7a2e\u985e<\/h2>\n<p>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306f\u3001\u8cc7\u683c\u60c5\u5831\u304c\u51e6\u7406\u304a\u3088\u3073\u4fdd\u5b58\u3055\u308c\u308b\u65b9\u6cd5\u306b\u3088\u3063\u3066\u7570\u306a\u308a\u307e\u3059\u3002\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306e\u4e3b\u306a\u7a2e\u985e\u306f\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u30bf\u30a4\u30d7<\/th>\n<th>\u8aac\u660e<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>\u30b9\u30c6\u30fc\u30c8\u30d5\u30eb<\/strong><\/td>\n<td>\u30b9\u30c6\u30fc\u30c8\u30d5\u30eb \u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u3067\u306f\u3001\u30e6\u30fc\u30b6\u30fc\u8a8d\u8a3c\u60c5\u5831\u304c\u30b5\u30fc\u30d0\u30fc\u5074 (\u901a\u5e38\u306f\u30bb\u30c3\u30b7\u30e7\u30f3\u5909\u6570\u307e\u305f\u306f\u30b5\u30fc\u30d0\u30fc\u5074\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9) \u306b\u4fdd\u5b58\u3055\u308c\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>\u30b9\u30c6\u30fc\u30c8\u30ec\u30b9<\/strong><\/td>\n<td>\u30b9\u30c6\u30fc\u30c8\u30ec\u30b9 \u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306f\u3001\u901a\u5e38\u306f\u6697\u53f7\u5316\u3055\u308c\u5b89\u5168\u306a\u3001\u30e6\u30fc\u30b6\u30fc\u8cc7\u683c\u60c5\u5831\u3068\u72b6\u614b\u60c5\u5831\u3092\u542b\u3080\u8a8d\u8a3c\u30c8\u30fc\u30af\u30f3\u307e\u305f\u306f Cookie \u306b\u4f9d\u5b58\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>\u30c8\u30fc\u30af\u30f3\u30d9\u30fc\u30b9<\/strong><\/td>\n<td>\u30c8\u30fc\u30af\u30f3\u30d9\u30fc\u30b9\u306e\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u3067\u306f\u3001\u30c8\u30fc\u30af\u30f3\u307e\u305f\u306f JWT (JSON Web \u30c8\u30fc\u30af\u30f3) \u3092\u4f7f\u7528\u3057\u3066\u30e6\u30fc\u30b6\u30fc\u306e ID \u3092\u691c\u8a3c\u3057\u3001\u30b5\u30fc\u30d0\u30fc\u5074\u306e\u30bb\u30c3\u30b7\u30e7\u30f3\u306e\u5fc5\u8981\u6027\u3092\u56de\u907f\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306e\u4f7f\u3044\u65b9\u3001\u4f7f\u7528\u4e0a\u306e\u554f\u984c\u70b9\u3068\u305d\u306e\u89e3\u6c7a\u7b56<\/h2>\n<h3>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306e\u4f7f\u7528\u65b9\u6cd5:<\/h3>\n<ol>\n<li>\n<p><strong>\u30e6\u30fc\u30b6\u30fc\u767b\u9332\u3068\u30ed\u30b0\u30a4\u30f3<\/strong>: Web \u30b5\u30a4\u30c8\u3067\u306f\u3001\u30e6\u30fc\u30b6\u30fc\u767b\u9332\u304a\u3088\u3073\u30ed\u30b0\u30a4\u30f3 \u30d7\u30ed\u30bb\u30b9\u306b\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u3092\u63a1\u7528\u3057\u3066\u3001\u30e6\u30fc\u30b6\u30fc\u3092\u8a8d\u8a3c\u304a\u3088\u3073\u627f\u8a8d\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5b89\u5168\u306a\u30a2\u30ab\u30a6\u30f3\u30c8\u7ba1\u7406<\/strong>: \u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u30e6\u30fc\u30b6\u30fc\u306e\u307f\u304c\u30a2\u30ab\u30a6\u30f3\u30c8\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3066\u7ba1\u7406\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5b89\u5168\u306a\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3<\/strong>: \u96fb\u5b50\u5546\u53d6\u5f15\u306e Web \u30b5\u30a4\u30c8\u3067\u306f\u3001\u652f\u6255\u3044\u3084\u6ce8\u6587\u51e6\u7406\u306a\u3069\u306e\u6a5f\u5bc6\u6027\u306e\u9ad8\u3044\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u3092\u4fdd\u8b77\u3059\u308b\u305f\u3081\u306b\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u3092\u4f7f\u7528\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30a2\u30af\u30bb\u30b9\u5236\u5fa1<\/strong>: \u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306f\u3001Web \u30b5\u30a4\u30c8\u306e\u7279\u5b9a\u306e\u30b3\u30f3\u30c6\u30f3\u30c4\u3001\u6a5f\u80fd\u3001\u307e\u305f\u306f\u7ba1\u7406\u9818\u57df\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u5236\u5fa1\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h3>\u4f7f\u7528\u306b\u95a2\u3059\u308b\u554f\u984c\u3068\u89e3\u6c7a\u7b56:<\/h3>\n<ol>\n<li>\n<p><strong>\u30d6\u30eb\u30fc\u30c8\u30d5\u30a9\u30fc\u30b9\u653b\u6483<\/strong>: \u653b\u6483\u8005\u306f\u30d6\u30eb\u30fc\u30c8\u30d5\u30a9\u30fc\u30b9\u653b\u6483\u306b\u3088\u3063\u3066\u30e6\u30fc\u30b6\u30fc\u306e\u8cc7\u683c\u60c5\u5831\u3092\u63a8\u6e2c\u3057\u3088\u3046\u3068\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u308c\u3092\u8efd\u6e1b\u3059\u308b\u305f\u3081\u306b\u3001Web \u30b5\u30a4\u30c8\u3067\u306f\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u30ed\u30c3\u30af\u30a2\u30a6\u30c8\u3001CAPTCHA \u30c1\u30e3\u30ec\u30f3\u30b8\u3001\u307e\u305f\u306f\u30ed\u30b0\u30a4\u30f3\u8a66\u884c\u306e\u30ec\u30fc\u30c8\u5236\u9650\u3092\u5b9f\u88c5\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30bb\u30c3\u30b7\u30e7\u30f3\u7ba1\u7406<\/strong>: \u30bb\u30c3\u30b7\u30e7\u30f3\u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u3084\u30bb\u30c3\u30b7\u30e7\u30f3\u56fa\u5b9a\u653b\u6483\u3092\u9632\u3050\u306b\u306f\u3001\u9069\u5207\u306a\u30bb\u30c3\u30b7\u30e7\u30f3\u7ba1\u7406\u304c\u4e0d\u53ef\u6b20\u3067\u3059\u3002Web \u30b5\u30a4\u30c8\u3067\u306f\u3001\u30ed\u30b0\u30a4\u30f3\/\u30ed\u30b0\u30a2\u30a6\u30c8\u6642\u306b\u30bb\u30c3\u30b7\u30e7\u30f3 ID \u3092\u518d\u751f\u6210\u3057\u305f\u308a\u3001\u30bb\u30c3\u30b7\u30e7\u30f3\u30bf\u30a4\u30e0\u30a2\u30a6\u30c8\u3092\u4f7f\u7528\u3057\u305f\u308a\u3068\u3044\u3063\u305f\u3001\u5b89\u5168\u306a\u30bb\u30c3\u30b7\u30e7\u30f3\u51e6\u7406\u6280\u8853\u3092\u4f7f\u7528\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8 \u30ea\u30af\u30a8\u30b9\u30c8 \u30d5\u30a9\u30fc\u30b8\u30a7\u30ea (CSRF)<\/strong>: CSRF \u653b\u6483\u306f\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u30e6\u30fc\u30b6\u30fc\u3092\u9a19\u3057\u3066\u610f\u56f3\u3057\u306a\u3044\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u5b9f\u884c\u3055\u305b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u30d5\u30a9\u30fc\u30e0\u306b CSRF \u30c8\u30fc\u30af\u30f3\u3092\u5b9f\u88c5\u3059\u308b\u3068\u3001\u3053\u308c\u3089\u306e\u653b\u6483\u304b\u3089\u4fdd\u8b77\u3059\u308b\u306e\u306b\u5f79\u7acb\u3061\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5b89\u5168\u306a\u8cc7\u683c\u60c5\u5831\u306e\u4fdd\u7ba1<\/strong>: \u30e6\u30fc\u30b6\u30fc\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u306f\u3001\u6c7a\u3057\u3066\u30d7\u30ec\u30fc\u30f3\u30c6\u30ad\u30b9\u30c8\u3067\u4fdd\u5b58\u3057\u306a\u3044\u3067\u304f\u3060\u3055\u3044\u3002Web \u30b5\u30a4\u30c8\u3067\u306f\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u6f0f\u6d29\u3092\u9632\u3050\u305f\u3081\u306b\u3001\u5f37\u529b\u306a\u6697\u53f7\u5316\u30cf\u30c3\u30b7\u30e5 \u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u3068\u30bd\u30eb\u30c8\u3092\u4f7f\u7528\u3057\u3066\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u4fdd\u5b58\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u4e3b\u306a\u7279\u5fb4\u3068\u985e\u4f3c\u7528\u8a9e\u3068\u306e\u6bd4\u8f03<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u7279\u6027<\/th>\n<th>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c<\/th>\n<th>\u57fa\u672c\u8a8d\u8a3c<\/th>\n<th>\u30c0\u30a4\u30b8\u30a7\u30b9\u30c8\u8a8d\u8a3c<\/th>\n<th>OAuth\u8a8d\u8a3c<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>\u8cc7\u683c\u60c5\u5831\u306e\u9001\u4fe1<\/strong><\/td>\n<td>HTTPS\u7d4c\u7531<\/td>\n<td>\u6697\u53f7\u5316\u3055\u308c\u3066\u3044\u307e\u305b\u3093<\/td>\n<td>MD5\u30cf\u30c3\u30b7\u30e5\u3067\u6697\u53f7\u5316<\/td>\n<td>\u30c8\u30fc\u30af\u30f3\u30d9\u30fc\u30b9\uff08\u30d9\u30a2\u30e9\u30fc\u30c8\u30fc\u30af\u30f3\uff09<\/td>\n<\/tr>\n<tr>\n<td><strong>\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ec\u30d9\u30eb<\/strong><\/td>\n<td>\u9069\u5ea6<\/td>\n<td>\u4f4e\u3044<\/td>\n<td>\u9069\u5ea6<\/td>\n<td>\u9ad8\u3044<\/td>\n<\/tr>\n<tr>\n<td><strong>\u30e6\u30fc\u30b6\u30fc\u4f53\u9a13<\/strong><\/td>\n<td>\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u53ef\u80fd\u306a\u30ed\u30b0\u30a4\u30f3\u30da\u30fc\u30b8<\/td>\n<td>\u30d6\u30e9\u30a6\u30b6\u306e\u30dd\u30c3\u30d7\u30a2\u30c3\u30d7<\/td>\n<td>\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u53ef\u80fd\u306a\u30ed\u30b0\u30a4\u30f3\u30da\u30fc\u30b8<\/td>\n<td>\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u30d9\u30fc\u30b9<\/td>\n<\/tr>\n<tr>\n<td><strong>\u8a8d\u8a3c\u30d5\u30ed\u30fc<\/strong><\/td>\n<td>\u30e6\u30fc\u30b6\u30fc\u540d\/\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u5165\u529b<\/td>\n<td>\u30e6\u30fc\u30b6\u30fc\u540d\/\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u5165\u529b<\/td>\n<td>\u30e6\u30fc\u30b6\u30fc\u540d\/\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u5165\u529b<\/td>\n<td>\u30c8\u30fc\u30af\u30f3\u4ea4\u63db<\/td>\n<\/tr>\n<tr>\n<td><strong>\u30af\u30c3\u30ad\u30fc\/\u30c8\u30fc\u30af\u30f3\u306e\u4f7f\u7528<\/strong><\/td>\n<td>\u30aa\u30d7\u30b7\u30e7\u30f3\u3060\u304c\u4e00\u822c\u7684<\/td>\n<td>\u4f7f\u7528\u3055\u308c\u3066\u3044\u306a\u3044<\/td>\n<td>\u4f7f\u7528\u3055\u308c\u3066\u3044\u306a\u3044<\/td>\n<td>\u4e0d\u53ef\u6b20<\/td>\n<\/tr>\n<tr>\n<td><strong>\u30b7\u30f3\u30b0\u30eb \u30b5\u30a4\u30f3\u30aa\u30f3 (SSO)<\/strong><\/td>\n<td>\u4e2d\u592eIDP\u3067\u53ef\u80fd<\/td>\n<td>\u30b5\u30dd\u30fc\u30c8\u3055\u308c\u3066\u3044\u307e\u305b\u3093<\/td>\n<td>\u30b5\u30dd\u30fc\u30c8\u3055\u308c\u3066\u3044\u307e\u305b\u3093<\/td>\n<td>\u30b3\u30a2\u6a5f\u80fd<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306b\u95a2\u3059\u308b\u4eca\u5f8c\u306e\u5c55\u671b\u3068\u6280\u8853<\/h2>\n<p>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306f\u3001\u5f53\u9762\u306e\u9593\u3001Web \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3 \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u57fa\u672c\u7684\u306a\u90e8\u5206\u3067\u3042\u308a\u7d9a\u3051\u308b\u3068\u4e88\u60f3\u3055\u308c\u307e\u3059\u3002\u305f\u3060\u3057\u3001\u8a8d\u8a3c\u30c6\u30af\u30ce\u30ed\u30b8\u306e\u9032\u6b69\u306b\u3088\u308a\u3001\u6b21\u306e\u9818\u57df\u304c\u6539\u5584\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u751f\u4f53\u8a8d\u8a3c<\/strong>: \u6307\u7d0b\u3084\u9854\u8a8d\u8b58\u306a\u3069\u306e\u751f\u4f53\u8a8d\u8a3c\u3092\u7d71\u5408\u3059\u308b\u3068\u3001\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3068\u5229\u4fbf\u6027\u304c\u5411\u4e0a\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30d1\u30b9\u30ef\u30fc\u30c9\u30ec\u30b9\u8a8d\u8a3c<\/strong>: \u5c06\u6765\u306e\u958b\u767a\u306b\u3088\u308a\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u3078\u306e\u4f9d\u5b58\u304c\u6e1b\u308a\u3001WebAuthn \u3084 FIDO2 \u306a\u3069\u306e\u3088\u308a\u5b89\u5168\u3067\u30e6\u30fc\u30b6\u30fc\u30d5\u30ec\u30f3\u30c9\u30ea\u30fc\u306a\u65b9\u6cd5\u306b\u7f6e\u304d\u63db\u3048\u3089\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u9069\u5fdc\u578b\u8a8d\u8a3c<\/strong>: \u30e6\u30fc\u30b6\u30fc\u306e\u884c\u52d5\u3068\u30ea\u30b9\u30af\u5206\u6790\u306b\u57fa\u3065\u3044\u3066\u8a8d\u8a3c\u8981\u4ef6\u3092\u9069\u5fdc\u3055\u305b\u308b\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\u306f\u3001\u3088\u308a\u30b7\u30fc\u30e0\u30ec\u30b9\u3067\u5b89\u5168\u306a\u8a8d\u8a3c\u30a8\u30af\u30b9\u30da\u30ea\u30a8\u30f3\u30b9\u3092\u63d0\u4f9b\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u591a\u8981\u7d20\u8a8d\u8a3c (MFA)<\/strong>: \u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u3068\u7d44\u307f\u5408\u308f\u305b\u3066 MFA \u3092\u5c0e\u5165\u3059\u308b\u3068\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u5c64\u304c\u8ffd\u52a0\u3055\u308c\u3001\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u306e\u30ea\u30b9\u30af\u304c\u8efd\u6e1b\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u30d7\u30ed\u30ad\u30b7\u30b5\u30fc\u30d0\u30fc\u306e\u4f7f\u7528\u65b9\u6cd5\u3084\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u3068\u306e\u95a2\u9023\u4ed8\u3051\u65b9\u6cd5<\/h2>\n<p>\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3068\u6a5f\u80fd\u3092\u5f37\u5316\u3059\u308b\u4e0a\u3067\u91cd\u8981\u306a\u5f79\u5272\u3092\u679c\u305f\u3057\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30ed\u30fc\u30c9\u30d0\u30e9\u30f3\u30b7\u30f3\u30b0<\/strong>: \u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u53d7\u4fe1\u3057\u305f\u8a8d\u8a3c\u8981\u6c42\u3092\u8907\u6570\u306e\u30d0\u30c3\u30af\u30a8\u30f3\u30c9 \u30b5\u30fc\u30d0\u30fc\u306b\u5206\u6563\u3057\u3001\u30ed\u30b0\u30a4\u30f3 \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u52b9\u7387\u7684\u306b\u51e6\u7406\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>SSL\u7d42\u7aef<\/strong>: \u30d7\u30ed\u30ad\u30b7\u306f SSL \u7d42\u4e86\u3092\u51e6\u7406\u3057\u3001\u30d0\u30c3\u30af\u30a8\u30f3\u30c9 \u30b5\u30fc\u30d0\u30fc\u304b\u3089\u6697\u53f7\u5316\u3068\u5fa9\u53f7\u5316\u306e\u8ca0\u8377\u3092\u8efd\u6e1b\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>IP\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0<\/strong>: \u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f IP \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3092\u5b9f\u88c5\u3057\u3066\u3001\u7591\u308f\u3057\u3044 IP \u30a2\u30c9\u30ec\u30b9\u3084\u60aa\u610f\u306e\u3042\u308b IP \u30a2\u30c9\u30ec\u30b9\u304c\u30ed\u30b0\u30a4\u30f3 \u30da\u30fc\u30b8\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u306e\u3092\u30d6\u30ed\u30c3\u30af\u3057\u3001\u6f5c\u5728\u7684\u306a DDoS \u653b\u6483\u3092\u8efd\u6e1b\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30ad\u30e3\u30c3\u30b7\u30f3\u30b0<\/strong>: \u30d7\u30ed\u30ad\u30b7 \u30ad\u30e3\u30c3\u30b7\u30e5\u3092\u4f7f\u7528\u3059\u308b\u3068\u3001\u30ed\u30b0\u30a4\u30f3 \u30da\u30fc\u30b8\u306e\u8aad\u307f\u8fbc\u307f\u6642\u9593\u304c\u77ed\u7e2e\u3055\u308c\u3001\u30e6\u30fc\u30b6\u30fc \u30a8\u30af\u30b9\u30da\u30ea\u30a8\u30f3\u30b9\u304c\u5411\u4e0a\u3057\u3001\u30b5\u30fc\u30d0\u30fc\u306e\u8ca0\u8377\u304c\u8efd\u6e1b\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30ed\u30ae\u30f3\u30b0\u3068\u76e3\u67fb<\/strong>: \u30d7\u30ed\u30ad\u30b7\u306f\u8a8d\u8a3c\u8981\u6c42\u3092\u30ed\u30b0\u306b\u8a18\u9332\u3057\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3068\u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306e\u76ee\u7684\u3067\u8cb4\u91cd\u306a\u76e3\u67fb\u8a3c\u8de1\u3092\u63d0\u4f9b\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u95a2\u9023\u30ea\u30f3\u30af<\/h2>\n<p>\u30d5\u30a9\u30fc\u30e0\u8a8d\u8a3c\u306e\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001\u6b21\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<ol>\n<li><a href=\"https:\/\/cheatsheetseries.owasp.org\/cheatsheets\/Authentication_Cheat_Sheet.html\" target=\"_new\" rel=\"noopener nofollow\">OWASP \u8a8d\u8a3c\u306e\u30c1\u30fc\u30c8\u30b7\u30fc\u30c8<\/a><\/li>\n<li><a href=\"https:\/\/tools.ietf.org\/html\/rfc2617\" target=\"_new\" rel=\"noopener nofollow\">RFC 2617: HTTP \u8a8d\u8a3c<\/a><\/li>\n<li><a href=\"https:\/\/www.w3.org\/TR\/webauthn\/\" target=\"_new\" rel=\"noopener nofollow\">WebAuthn: Web \u8a8d\u8a3c API<\/a><\/li>\n<li><a href=\"https:\/\/fidoalliance.org\/\" target=\"_new\" rel=\"noopener nofollow\">FIDO \u30a2\u30e9\u30a4\u30a2\u30f3\u30b9<\/a><\/li>\n<\/ol>","protected":false},"featured_media":477278,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477277","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Form Authentication for the Website of the Proxy Server Provider OneProxy (oneproxy.pro)<\/mark>","faq_items":[{"question":"What is Form authentication and how does it work?","answer":"<p>Form authentication is a security mechanism used by websites and web applications to verify the identity of users before granting them access to specific resources or functionalities. It involves the use of a custom login form where users enter their credentials, such as username and password. When a user attempts to access a secured area, the web server detects the lack of authentication and redirects the user to the login page. Once the user submits their credentials, the server validates them, and upon successful authentication, grants access to the requested resources.<\/p>"},{"question":"How does Form authentication differ from Basic authentication?","answer":"<p>Form authentication differs from Basic authentication in several aspects. While Form authentication relies on a custom login form and the use of HTML forms, Basic authentication prompts users with a browser pop-up window to enter their credentials. Additionally, Basic authentication sends user credentials in Base64 encoding with each request, whereas Form authentication sends them securely over HTTPS using a POST request.<\/p>"},{"question":"What are the key features of Form authentication?","answer":"<p>Form authentication offers several key features, making it popular for securing web applications. It is user-friendly, allowing customization of the login page's appearance. Secure credential transmission over HTTPS ensures protection against interception. Session management allows users to remain authenticated during their browsing session. Websites can implement custom access control, defining different authorization levels for various resources. Form authentication can also integrate with identity providers, enabling Single Sign-On (SSO) capabilities.<\/p>"},{"question":"What types of Form authentication exist?","answer":"<p>Form authentication can vary based on how credentials are processed and stored. The main types include:<\/p><ol><li>Stateful Form Authentication: Stores user authentication information on the server-side using sessions or databases.<\/li><li>Stateless Form Authentication: Relies on tokens or cookies containing encrypted user credentials and state information.<\/li><li>Token-based Form Authentication: Uses tokens or JWTs (JSON Web Tokens) for user identity verification without server-side sessions.<\/li><\/ol>"},{"question":"What are the potential issues with Form authentication and how can they be addressed?","answer":"<p>Some potential issues with Form authentication include:<\/p><ol><li>Brute Force Attacks: Attackers may try to guess credentials through brute force. Solutions include account lockouts and CAPTCHA challenges.<\/li><li>Session Management: Proper session handling is crucial to prevent session hijacking. Implementing session timeouts and regenerating session IDs on login\/logout helps.<\/li><li>Cross-Site Request Forgery (CSRF): To prevent CSRF attacks, websites can implement CSRF tokens in forms.<\/li><\/ol>"},{"question":"How can proxy servers enhance Form authentication?","answer":"<p>Proxy servers can enhance Form authentication in several ways, such as load balancing, SSL termination, IP filtering, caching, logging, and auditing. They help distribute login traffic efficiently, offload encryption workload, block malicious IPs, improve page load times, and provide valuable audit trails for security and compliance.<\/p>"},{"question":"What is the future outlook for Form authentication?","answer":"<p>The future of Form authentication is promising, with advancements in technologies like biometric authentication, passwordless authentication, adaptive authentication, and multi-factor authentication (MFA) likely to enhance security and user experience.<\/p>"},{"question":"Where can I find more information about Form authentication?","answer":"<p>For more in-depth knowledge about Form authentication, you can refer to the following resources:<\/p><ol><li><a href=\"https:\/\/cheatsheetseries.owasp.org\/cheatsheets\/Authentication_Cheat_Sheet.html\" target=\"_new\">OWASP Authentication Cheat Sheet<\/a><\/li><li><a href=\"https:\/\/tools.ietf.org\/html\/rfc2617\" target=\"_new\">RFC 2617: HTTP Authentication<\/a><\/li><li><a href=\"https:\/\/www.w3.org\/TR\/webauthn\/\" target=\"_new\">WebAuthn: Web Authentication API<\/a><\/li><li><a href=\"https:\/\/fidoalliance.org\/\" target=\"_new\">FIDO Alliance<\/a><\/li><\/ol>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/477277","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/477277\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media\/477278"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media?parent=477277"}],"curies":[{"name":"\u3046\u30fc\u3093","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}