Questions tagged [oauth-provider]

118 questions
9
votes
1 answer

Can ASP.Net MVC 4's OAuthWebSecurity open a pop-up

I'm trying to figure out how to use ASP.Net MVC 4's new OAuthWebSecurity functionality. Is it possible when clicking on the facebook or twitter external login button to have the form post to a pop-up instead of refreshing the current page? I've…
8
votes
2 answers

Zend Framework Oauth Provider

How can I add a Oauth provider to a web application using Zend Framework? Zend Framework has support for oauth consumers, but I don't see a provider support. What do you use to implement a Oauth provider in php (with Zend Framework)?
Wienczny
  • 3,958
  • 4
  • 30
  • 35
8
votes
1 answer

OAuth2 Access Token Response

Quick question regarding the OAuth2 Spec, in particular section 5.1.5. Reading that spec, it appears that the response needs to be formatted as JSON regardless of the format requested. Is that the standard or are other formats (i.e. XML) also…
Bart Jedrocha
  • 11,450
  • 5
  • 43
  • 53
7
votes
3 answers

Create an OAuth 2.0 service provider using DotNetOpenAuth

I'm building a web app which will have an api and an authorization service using DotNetOpenAuth. I found this example on how you can authorize using a service provider that already exists but I would like an example on how to implement a service…
marcus
  • 9,616
  • 9
  • 58
  • 108
6
votes
3 answers

working oauth2 provider server implemented on java

I am searching a working oauth2 provider server implemented on java, leeloo and spring security are some that I have found, but there is no working…
6
votes
3 answers

How to implement an OAuth provider in Java?

I'm having a lot of problems trying to implement an OAuth provider. I would like to know if anyone has successfully used an Oauth provider using Java? I found a lot of libraries but all of them are really bad commented and I cant work with them.…
Winter
  • 1,896
  • 4
  • 32
  • 41
6
votes
2 answers

Oauth provider behind reverse proxy

I try to use OAuth Provider in PHP (PECL Package) behind a apache reverse-proxy the client uses POST https://api.com/resource/oauth/request-token but my oauth provider receives POST http://api.com/mywebservice/resource/oauth/request-token the…
Julien
  • 81
  • 4
5
votes
3 answers

How to provide OAuth services from website.?

OAuth allows the you the User to grant access to his private resources on one site to another site. But how exactly does this happen. And if I want to provide OAuth features in my site, (both as Service Provider and consumer), how do I go about…
Balanivash
  • 6,709
  • 9
  • 32
  • 48
5
votes
1 answer

Rspec testing for oauth provider

I'm writing a API that's also an OAuth provider. Is there any recommended way to write your rspec tests? After you enable oauth to protect all of your endpoints, how do you write rspec tests that will pass the authentication step?
etang
  • 730
  • 8
  • 23
5
votes
1 answer

How to process Oauth nonces on the server side?

I am writing the provider part of the OAuth protocol on the serverside and I'm cracking my ahead over how much of the nonces sent by OAuth consumers that I need to cache. According to twitter's docs, Twitter will only allow a nonce to be used…
Frankie Ribery
  • 11,933
  • 14
  • 50
  • 64
5
votes
2 answers

Rails two-legged OAuth provider?

I have a rails 2.3.5 application with an API I wish to protect. There is no user - it is an app to app style webservice (more like an Amazon service than facebook), and so I would like to implement it using a two-legged OAuth approach. I have been…
Andrew Kuklewicz
  • 10,621
  • 1
  • 34
  • 42
5
votes
1 answer

Using asp.net 4.5 OAuth to register google with clientid and secret

I notice in the asp.net 4.5 template, all the authorization samples besides google pass in secret and clientid. How can I pass in my google secret and clientid? Brock has a good discussion here that I'm following: …
Peter Kellner
  • 14,748
  • 25
  • 102
  • 188
5
votes
1 answer

No adapter for handler error for oauth2 provider endpoints

I would like to implement OAuth 2.0 for my Spring 3.1 and RESTEasy project. The project is a JSON based REST service. I use Spring Security 3.1 and spring-security-oauth2 version 1.0.0.RC2 (which should be the latest). So far I have the spring…
Vertongen
  • 185
  • 3
  • 14
5
votes
3 answers

Grails: Securing REST API with OAuth2.0

I am building a REST API using Grails. I want it to be protected using OAuth2.0 client_credentials flow(grant_type). My use-case is as follows: a external agent will send a request to something…
SoftDev
  • 63
  • 1
  • 4
5
votes
1 answer

Using a Facebook access token as the resource owner credentials in OAuth2.0

The OAuth 2.0 specification defines the Resource Owner Password Credentials Grant Type, which allows the resource owner password credentials (i.e. username and password) to be used directly as an authorization grant to obtain an access token. I want…
Eugene Yarmash
  • 142,882
  • 41
  • 325
  • 378