khuljaa sim sim

Enter the world of

0Auth & AIR December 12, 2010 acrossthinlines.com | @udayms | linkedin.com/in/udayms 1

@udayms acrossthinlines.com

Flash Camp India 2010 Chennai, India

December 12, 2010 acrossthinlines.com | @udayms | linkedin.com/in/udayms 2

•  UX/UI Evangelist •  Owns Prototyping @ Yahoo! India

In the Beginning

API.execute(userName, passWord);

Or in other words… API.execute(“give me ur life”); // and trust me to not use it or sell it later so that someone else can F&*$K you completely!

This even used to have a name!!

Password Anti-Pattern

Like a VALET KEY

Google AuthSub + aol OpenAuth + Yahoo BBAuth + Upcoming api + Flickr api + Amazon Web Services api + others

Open, generic Standard for API access

authorization

not (authentication)

How did it start?

Blain Cook, & Others

start looking at OpenId for API Services

They realize a need for a solution & start working on it

Dewitt Clinton from Google begins supporting the effort

Oauth core draft 1.0 released.

“…these days, everyone wants to build an App Store. Because every access key is a license that you can turn on and off, OAuth makes it easier for your integrations to generate revenue, and that means more and better integrations…”

-Sunir Shah (FreshBooks)

Service Provider provides your app with Keys & Secrets to uniquely identify it.

Your users who already have an account with Service Provider. They will approve your application’s request for information.

Your application that is registered with your service provider and used by your users. Your application also stored your credentials internally.

Your Oauth layer

Service Provider

Your Users

Your Application

First Handshake

Service Provider Your Users Your Application

Next time…

Facebook Your Application

Dude… My user wants access to his stuff on

your server.

Sure. Send him along. Btw, I only speak Oauth.

What’s your Pasword?

PASSWORD1234@34

Gr8! Here’s your token!

Perfect!

Dude!! Here’s my user’s credenVals, give me stuff! Sure. Here you go!!!

Code Ranger OAuth Library http://www.coderanger.com/blog/?p=59

as3corelib https://github.com/mikechambers/as3corelib

Twitter @udayms Blog acrossthinlines.com

LinkedIn linkedin.com/in/udayms

Sources I ripped off from…

•  Slideshare: factoryjoe/oauth-ftw-presentation

•  Slideshare: kellan/advanced-oauth-wrangling

•  Slideshare: mbleigh/the-present-future-of-oauth

•  http://dev.twitter.com/pages/auth

•  Google Images

•  Flickr

•  Oauth.net

khuljaa sim sim

udayms linkedin

application facebookdecember

application service

api services

flickr api

upcoming api

words api

api accessdecember

Technology

sim script

sim cloning

sim guideline wib 1 3 equipped sim cards

flash wireless sim...

for personal use only - asx · 2017-01-17 · game-changer:...

flight sim

sim – spartherm installation modules · sim varia...

modelo de pop - sso€¦ · windows 7 windows xp sp2...

sim gr3 plants sim

sim gr3 eyes sim

meta analysis presentation-sim vs. no sim

radiator sim pack - open.com.au · eap-sim, eap-aka,...

gsm gprs - philips sim sim sim gsm sim sim sim sim sim sim...

micro-sim template for ipad/iphone 4 sim cards -...

for simphony fecc final sim inq #9 tab auth sim inq #12...

modelling & simulation in aerospace - · pdf filemodelling &...

user guide - thuraya · sim 2 slot, or in both. nano sim 1...

sim card connector series - farnell element14 | electronic...

yotaphone - the informr · 2 3 sim eject tool sim card back...

making learning real: turning sim city into "sim science"!