search

MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.22k stars 21.38k forks source link

OAuth 2.0 is only an authorization protocol #80420

Closed danimacho72 closed 2 years ago

danimacho72 commented 3 years ago

In the article: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-auth-code-flow

You say something that is not accurate

"It's used to perform authentication and authorization in the majority of app types"

IMHO it should say: "It's used to perform authorization in the majority of app types"

It is true that end-user may be requested to enter credentials when browser is requesting new authorization code, but just to confirm consent if that feature is enabled (not applicable in the client-flow), so not so much related to authentication.

Summary:

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

JamesTran-MSFT commented 3 years ago

@danimacho72 Thanks for your feedback! I've assigned this issue to the author who will investigate and update as appropriate.

hpsin commented 3 years ago

@danimacho72 - well spotted, thanks! Think it'll be ok if we update it to say "With OIDC, it's used to perform..." ? We do generally suggest/by default recommend using OIDC on top of our oauth protocols where possible. In particular, this is the auth code flow which always has a user present.

danimacho72 commented 3 years ago

Yes, I think this will be enough, thanks a lot for confirming! :)

On Tue, Aug 31, 2021 at 11:07 PM Hirsch Singhal @.***> wrote:

@danimacho72 https://github.com/danimacho72 - well spotted, thanks! Think it'll be ok if we update it to say "With OIDC, it's used to perform..." ? We do generally suggest/by default recommend using OIDC on top of our oauth protocols where possible. In particular, this is the auth code flow which always has a user present.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/MicrosoftDocs/azure-docs/issues/80420#issuecomment-909639145, or unsubscribe https://github.com/notifications/unsubscribe-auth/ATM5SFCRTKDMYXBYIOQFL4LT7VACTANCNFSM5DEO5U3Q . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

--

Dani Macho Estudiante Doble Grado de Ingeniería Informática-A.D.E.

Universitat Oberta de Catalunya

@.***

[image: Universitat Oberta de Catalunya]

--

INFORMACIÓ SOBRE PROTECCIÓ DE DADES DE LA UNIVERSITAT OBERTA DE CATALUNYA (UOC)

Us informem que les vostres dades identificatives i les contingudes en els missatges electrònics i fitxers adjunts es poden incorporar a les nostres bases de dades amb la finalitat de gestionar les relacions i comunicacions vinculades a la UOC, i que es poden conservar mentre es mantingui la relació. Si ho voleu, podeu exercir el dret a accedir a les vostres dades, rectificar-les i suprimir-les i altres drets reconeguts normativament adreçant-vos a l'adreça de correu emissora o a @. @.>.

Aquest missatge i qualsevol fitxer que porti adjunt, si escau, tenen el caràcter de confidencials i s'adrecen únicament a la persona o entitat a qui s'han enviat.

Així mateix, posem a la vostra disposició un delegat de protecció de dades que no només s'encarregarà de supervisar tots els tractaments de dades de la nostra entitat, sinó que us podrà atendre per a qualsevol qüestió relacionada amb el tractament de dades. La seva adreça de contacte és @. @.>. INFORMACIÓN SOBRE PROTECCIÓN DE DATOS DE LA UNIVERSITAT OBERTA DE CATALUNYA (UOC) Os informamos de que vuestros datos identificativos y los contenidos en los mensajes electrónicos y ficheros adjuntos pueden incorporarse a nuestras bases de datos con el fin de gestionar las relaciones y comunicaciones vinculadas a la UOC, y de que pueden conservarse mientras se mantenga la relación. Si lo deseáis, podéis ejercer el derecho a acceder a vuestros datos, rectificarlos y suprimirlos y otros derechos reconocidos normativamente dirigiéndoos a la dirección de correo emisora o a @. @.>. Este mensaje y cualquier fichero que lleve adjunto, si procede, tienen el carácter de confidenciales y se dirigen únicamente a la persona o entidad a quien se han enviado. Así mismo, ponemos a vuestra disposición a un delegado de protección de datos que no solo se encargará de supervisar todos los tratamientos de datos de nuestra entidad, sino que podrá atenderos para cualquier cuestión relacionada con el tratamiento de datos. Su dirección de contacto es @. @.>.

UNIVERSITAT OBERTA DE CATALUNYA (UOC) DATA PROTECTION INFORMATION Your personal data and the data contained in your email messages and attached files may be stored in our databases for the purpose of maintaining relations and communications linked to the UOC, and the data may be stored for as long as these relations and communications are maintained. If you so wish, you can exercise your rights to access, rectification and erasure of your data, and any other legally held rights, by writing to the sender’s email address or @. @.>. This message and, where applicable, any attachments are confidential and addressed solely to the individual or organization they were sent to. The UOC has a data protection officer who not only supervises the data processing carried out at the University, but who will also respond to any questions you may have about this data processing. You can contact our data protection officer by writing to @. @.>.

hpsin commented 2 years ago

Fix will be live tomorrow. Thanks!

please-close