声明与 OAuth 之间的区别
基于声明的身份验证与 OAuth 提供的身份验证之间有什么区别。
我正在寻找概念差异而不是技术差异。我什么时候选择声明而不是 OAuth，反之亦然。
基于声明的身份验证由 Microsoft 提出并构建在 WS-Security 之上。但 OAuth 更多的是一个开源协议，它被提议允许基于安全令牌从不同的门户获取资源。
声明也有令牌的概念（SAML 编码或 X509 证书）。
我试图了解什么时候应该选择声明而不是 OAuth，反之亦然。
谢谢
What is the difference between Claims based authentication vs What is provided by OAuth.
I am looking for conceptual difference and not technical difference. When do I choose Claims over OAuth and vice versa.
Claims based authentication is proposed by Microsoft and build on top of WS-Security. But OAuth is more a open source protocol that is being proposed to allow fetching resources from different portals based on a security token.
Claims also has this concept of token (SAML encoded or X509 certificates).
I am trying to understand when do I choose Claims over OAuth and vice versa.
Thanks
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
基于声明的身份是一种将应用程序代码与身份协议（例如 SAML、Kerberos、WS-Security 等）细节分离的方法。它不仅适用于 Web 应用程序，而且是作为名为 WIF 的 .NET 库/框架实现的。
OAuth 是一种特定协议，一个网站可以通过该协议获得用户同意访问另一个网站上的私人数据。
事实并非如此，您必须选择其中之一，事实上它们是互补的。如果您正在构建一个通过 WIF 执行 OAuth 的 .NET Web 应用程序，那么您可能可以同时使用两者。
Claims-based identity is a way of decoupling your application code from the specifics of identity protocols (such as SAML, Kerberos, WS-Security, etc). It is not only for web applications and is implemented as a .NET library / framework called WIF.
OAuth is a specific protocol by which one web site can obtain user consent to access their private data on another web site.
It is not really the case that you would choose one or the other, in fact they are complementary. Potentially you could use both at once, if you were building a .NET web app that performed OAuth via the WIF.