OAuth is a technology that allows a user to connect a client to a service, but without that user needing to enter their password.
The usual way this works is that a user clicks on a button, and are taken to a page asking whether they wish to allow the connection. Under the bonnet a handshake is going on between the client and server, resulting in an exchange of tokens.
If you’ve ever used the “Facebook connect” or “Sign in with twitter” buttons, you are likely familiar with this.
Known has a comprehensive API, and while it is possible to authenticate yourself to it using signed HTTP headers, I thought it’d be handy to be able to authenticate with OAuth as well (it was an excuse for me to write the code powering the server side of an OAuth exchange, a good way to understand it!).
The plugin I wrote lets a user manage “applications” – collections of keys – which can be used by an OAuth2 client to power an exchange.
Example Usage
Here is an example of client authentication in it’s most basic…
To get a code:
https://mysite.com/oauth2/authorise/?response_type=code&client_id=<your API Key>&redirect_uri=<path to your endpoint>
You will be directed to a log in page, followed by a confirmation page as necessary, after which you will get a response code back. This response will either be a JSON encoded blob, or if you specified a redirect_uri, the values will be forwarded as get variables.
Exchanging the code for a token
https://mysite.com/oauth2/access_token/?grant_type=authorization_code&client_id=<your API Key>&redirect_uri=<path to your endpoint>
You should get back a json encoded blob with an access token, expiry and refresh token.
Once you’ve performed an OAuth exchange, you will be provided with an access token. You can pass this token along with any web service API call to authenticate your request.
favorited this.
favorited this.
So, here’s a plugin that implements a basic Known to Known cross poster, which uses the Known API authenticated with OAuth2 using my OAuth2 server.
This post will let you link an account on one Known server with an account on another Known server, and allow you to crosspost status and text posts from one to the other.
Primarily this is a demo of OAuth together with the Known API, but it might be handy if you have, say, a corporate blog but still want to post to it from your main site.
Pull it apart, play with the OAuth and see how I talk to the API!
» Visit the project on Github…
Share this:EmailLinkedInTwitterGoogleFacebookReddit
Just another quick update…
In an ongoing effort to make use of the Known API easier and more flexible, the latest version available in GitHub, or via my unofficial packages, now has built in support for OAuth2.
OAuth2 server functionality is provided by an updated version of my OAuth2 Server code, which I’ve written a bit about before.
Going forward, I’m hoping to build out an easier way for third party clients to be able to connect, paving the way for a possible mobile client.
Anyway, go grab the latest version and have a play!
Thanks for visiting! If you’ve found this useful, and you have more than a passing affection for me, please consider buying me a beer!
(I am also available to hire! Find out more…)
Follow @mapkyca
!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0],p=/^http:/.test(d.location)?’http’:’https’;if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src=p+’://platform.twitter.com/widgets.js’;fjs.parentNode.insertBefore(js,fjs);}}(document,’script’,’twitter-wjs’);
Share this:EmailLinkedInTwitterFacebookWhatsAppSkype