Implementing open authentication_in_your_app
2 likes888 views
The document discusses implementing open authentication in apps using OAuth2.0 or individual OAuth services, noting that it allows for one-click user registration and login to attract more users without lengthy signup forms. It provides steps for setting up OAuth2.0 authentication with major social networks or using Twitter's API directly, including obtaining necessary keys and tokens to authenticate and authorize users and access their data. The document also shares links for further information on OAuth2.0 and Twitter's API documentation.
![Implementing Open
Authentication in your App
OAuth2.0 / Individual OAuth Service
[Office's Weekly Session] @ WNeeds.com](https://image.slidesharecdn.com/implementingopenauthenticationinyourapp-120317113136-phpapp01/85/Implementing-open-authentication_in_your_app-1-320.jpg)
![How it can be done?
Using OAuth2.0 Using lib/class of
individual web
● Very easy to use in your app services
● Supports major social
network's authentication
flow ● Using twitteroauth for
● facebook, Google, LinkedIn, implementing
Windows Live ... [authentication by
● Doesn't supports twiiter]
Twitter: https://dev.twitter. ● Any other web service's
com/discussions/397
API](https://image.slidesharecdn.com/implementingopenauthenticationinyourapp-120317113136-phpapp01/85/Implementing-open-authentication_in_your_app-3-320.jpg)
![Authentication Using OAuth2.0
1. Download OAuth2.0 from here: http://raynux.
com/ray/labs/projects/oauth2.zip
2. Configure [config.php] according to services you want to
implement in your app for authentication
OAuth2Consumer::getInstance('Facebook', array(
'client_id' => '...........',
'client_secret' => '...........',
3. Use the authorization method in any link/button any where
OAuth2Consumer::getInstance('Facebook')
->authorize();
4. Use any method for example grabbing access token,
$oauth = OAuth2Consumer::getInstance('Facebook');
$accessToken = $oauth->getAccessToken();
Or getting user data etc
$friends = $oauth->api('me/friendlists');](https://image.slidesharecdn.com/implementingopenauthenticationinyourapp-120317113136-phpapp01/85/Implementing-open-authentication_in_your_app-7-320.jpg)
![Using API of Individual WebSr Ex basic auth by twitter
1. To get/create [consumer key], [consumer secret] and for
basic app URL setup go here: https://dev.twitter.com/apps
2. Get [twitteroauth.php] and [OAuth.php] by downloading
twitter recommended example for PHP app from here: https:
//github.com/abraham/twitteroauth/
3. To Get [oauth_token], [oauth_token_secret]
$twitteroauth = new TwitterOAuth(CONSUMER_KEY, CONSUMER_SECRET);
$request_token = $twitteroauth
->getRequestToken('TWITTER_CALLBACK_URL');
4. Then to get [access_token] using [oauth_verifier]
$twitteroauth = new TwitterOAuth(CONSUMER_KEY, CONSUMER_SECRET,
[oauth_token], [oauth_token_secret]);
$access_token = $twitteroauth->getAccessToken($_GET['oauth_verifier']);](https://image.slidesharecdn.com/implementingopenauthenticationinyourapp-120317113136-phpapp01/85/Implementing-open-authentication_in_your_app-8-320.jpg)
Implementing open authentication_in_your_app
- 1. Implementing Open Authentication in your App OAuth2.0 / Individual OAuth Service [Office's Weekly Session] @ WNeeds.com
- 2. Why need open authentication? ● This process will give a life to users who come on your app but don't want to see a large size registration form ● Every user will try your app by simply doing the one click registration/login ● Thus It will give a large number of users to your application ● Your app will be social on internet via these users permissions ● This is smart and modern at a glance
- 3. How it can be done? Using OAuth2.0 Using lib/class of individual web ● Very easy to use in your app services ● Supports major social network's authentication flow ● Using twitteroauth for ● facebook, Google, LinkedIn, implementing Windows Live ... [authentication by ● Doesn't supports twiiter] Twitter: https://dev.twitter. ● Any other web service's com/discussions/397 API
- 4. Standard work flow of any of these
- 5. Three different steps: user authentication User authentication ensures that the user is who they say they are app authorization App authorization ensures that the user knows exactly what data and capabilities they are providing to your app Need: app_id, redirect_uri app authentication App authentication ensures that the user is giving their information to your app and not someone else Need: authorization_code, app_secret, redirect_uri
- 6. For knowing about OAuth2.0 http://hueniverse.com/2010/05/introducing-oauth-2-0/
- 7. Authentication Using OAuth2.0 1. Download OAuth2.0 from here: http://raynux. com/ray/labs/projects/oauth2.zip 2. Configure [config.php] according to services you want to implement in your app for authentication OAuth2Consumer::getInstance('Facebook', array( 'client_id' => '...........', 'client_secret' => '...........', 3. Use the authorization method in any link/button any where OAuth2Consumer::getInstance('Facebook') ->authorize(); 4. Use any method for example grabbing access token, $oauth = OAuth2Consumer::getInstance('Facebook'); $accessToken = $oauth->getAccessToken(); Or getting user data etc $friends = $oauth->api('me/friendlists');
- 8. Using API of Individual WebSr Ex basic auth by twitter 1. To get/create [consumer key], [consumer secret] and for basic app URL setup go here: https://dev.twitter.com/apps 2. Get [twitteroauth.php] and [OAuth.php] by downloading twitter recommended example for PHP app from here: https: //github.com/abraham/twitteroauth/ 3. To Get [oauth_token], [oauth_token_secret] $twitteroauth = new TwitterOAuth(CONSUMER_KEY, CONSUMER_SECRET); $request_token = $twitteroauth ->getRequestToken('TWITTER_CALLBACK_URL'); 4. Then to get [access_token] using [oauth_verifier] $twitteroauth = new TwitterOAuth(CONSUMER_KEY, CONSUMER_SECRET, [oauth_token], [oauth_token_secret]); $access_token = $twitteroauth->getAccessToken($_GET['oauth_verifier']);
- 9. continue ... 5. For getting user data: $userInfo = $twitteroauth->get('account/verify_credentials');
- 10. Lets Discuss