Posts

Showing posts from November, 2017

Sample OAuth protocal base servers and client

Image
this application was created by spring boot. it has 3 major component those are authorization server, resource server and client-server. each component should have unique tomcat instance to running itself. Client-Application:  this application is running on localhost:9999 port. it has 3 classes, which are in main/java directory. those classes are App.java, AppController.java and AppRestController.java also, the client application has index.html file and some other clients site languages file within the resource/static file. App.java is main class for this client application. AppConroller class sets paths for each file. last class is AppRestController. it will do OAuth follows. Authorization server:  it is running on localhost:8081 and also it has 3 classes which are AuthorizationServer.java, OAuthConfig.java and SecurityConfig.java. 1st one is main class it uses to run the application. another one contains OAuth protocol functions. the last one defines the security aspect of ea

How to make sample facebook application with firefox add ons RestClient

Image
Note: If you have any doubt about the Facebook application technology ( OAuth protocols) please refer this link and also this link teaches, how to create facebook application dashboard on your facebook account. STEP 1 ( Authorization code request ) In order to obtain the authorization code from Facebook, we have to send a HTTP GET request to the Authorize Endpoint of Facebook, which is https://www.facebook.com/dialog/oauth . Along with the request, you should have several parameters which are described below. Parameter Name Description Sample Value Response_type What will you get back from HTTP GET request code Client_id This is app id given by facebook 1746117745691626 Redirect_url Your app domain, which is given by you. Also it is called as redirection endpoint. It defined in facebook login setting. http://localhost:8080 scope What permission you Need to get from users. If you want

How to create an Facebook application account dashboard on facebook

Image
We can see these kinds of option on lots of website and also we are using lots of funny third parties application within the Facebook and other social media. before learning about the Facebook application, we have to know about the base technology of facebook application. all third-party applications are powered by OAuth protocol if you have any clarification about this protocol, you can refer this link as well. we have to create the sperate admin panel for each and every facebook application. so you can create the application dashboard by visiting "https://developers.facebook.com/". after visiting given URL, you can see "my App" option on the respective webpage right top corner. then click it. after clicking "my App" option you will redirect to another page. it has your all Facebook applications, information which is created by you and also, you can create the new Facebook application as well. after clicking on the green button you will ge

The technology behind the Facebook third-party application (OAuth protocol)

Image
In the early days, if we want to make some authorized actions for others account, we have to know others username and password. let's take Bob and Alice google calendar flow as an example. If Bob wants to make an appointment for on Alice calendar, he should want to get Alice username and password. So Alice must provide his credentials to Bob. but if Bob will get the Alice credential, he can access Alice email and other stuff as well. this was being a major security issue for everyone at the earliest stage. so people were thinking about this problem and they came with a solution. it is called oAuth. What is oAuth protocols? oAuth is a framework that allows for accessing third parties to the user resources with user permissions. but without sending user credentials( username and password) and also third parties can only access the user resources which are permitted by the resource owner. Components of oAuth Third parties application Authorization server Resource se