Im not sure there ever will be a complete complete oauth2 considering everyone who implement it have their own flavor of it.
A guide to Oauth2
11–20 of 55 posts
Re: A guide to Oauth2
#12I'm currently in the middle of implementing an OAuth 2.0 authorization server following the RFC draft of the best current practice [1]. It's been a huge pain navigating all the interlinked (and sometimes contradicting) RFCs around, especially with a distinct lack of resources for actually implementing an authorization server. RFC6749 does not suffice on its own since it says nothing about authentication or tokens pay…
I’m actually working on the same thing but in Rust. If you ever want to compare notes sometime, give me a shout out.
I’m actually kind of glad the documentation found via google searches (save one collection of Medium articles) has been disappointing. It has motivated me to look directly at the specification which I’ve found to be the most valuable resource thus far.
Re: A guide to Oauth2
#13Earlier quoted context omitted.
I would love to see a reference server implementation for OAuth 2.0 & OpenID Connect Core 1.0, as it would be quite helpful when I go to add OAuth 2.0 to the libre software suite we use at work!
May be worth checking out https://github.com/ory/hydra and related projects by ory
There's also https://github.com/panva/node-oidc-provider for Node.js
Re: A guide to Oauth2
#14This is far from a complete guide to the OAuth 2 protocol. I would recommend anyone wanting to communicate with, or implement a OAuth 2 server, to use the official RFC's as a reference.
Re: A guide to Oauth2
#15I'm currently in the middle of implementing an OAuth 2.0 authorization server following the RFC draft of the best current practice [1]. It's been a huge pain navigating all the interlinked (and sometimes contradicting) RFCs around, especially with a distinct lack of resources for actually implementing an authorization server. RFC6749 does not suffice on its own since it says nothing about authentication or tokens pay…
I’m actually working on the same thing but in Rust. If you ever want to compare notes sometime, give me a shout out. I’m actually kind of glad the documentation found via google searches (save one collection of Medium articles) has been disappointing. It has motivated me to look directly at the specification which I’ve found to be the most valuable resource thus far.
Oh yeah definitely!
Rust would be awesome but I think I'd want it to be as accessible as possible. Tagged unions and proper error handling would make it much saner though that's for sure.
Re: A guide to Oauth2
#16I'm currently in the middle of implementing an OAuth 2.0 authorization server following the RFC draft of the best current practice [1]. It's been a huge pain navigating all the interlinked (and sometimes contradicting) RFCs around, especially with a distinct lack of resources for actually implementing an authorization server. RFC6749 does not suffice on its own since it says nothing about authentication or tokens pay…
IMO, the python oauthlib does a really good job of this. they include the relevant sections of the spec into the function documentation so you can follow along:
https://github.com/oauthlib/oauthlib/blob/master/oauthlib/oa...
Re: A guide to Oauth2
#17> You want to add all your contacts in Gmail who are in skype Never once in my lifetime I wanted to do that. For any two services.
Above that I think this is rude to my contacts: You can’t just go and upload random people’s data on plattforms of your choice . I get it – people feel like it is their contacts because they collected them, but they are not. This should be illegal.
So you don't store numbers of any of your contacts? You must have some insane memory ... but then again ... maybe memorizing random people's data should also be illegal... I mean did the people who told you those details give you permission to memorize it? I think not. And when you enter those memorized details into your browser or phone ... who gave you permission to do that?! Blatant GDPR violations.
Re: A guide to Oauth2
#18Earlier quoted context omitted.
I’m actually working on the same thing but in Rust. If you ever want to compare notes sometime, give me a shout out. I’m actually kind of glad the documentation found via google searches (save one collection of Medium articles) has been disappointing. It has motivated me to look directly at the specification which I’ve found to be the most valuable resource thus far.
Oh yeah definitely! Rust would be awesome but I think I'd want it to be as accessible as possible. Tagged unions and proper error handling would make it much saner though that's for sure.
I was initially going to do it in TypeScript, as the clients that will be interacting with it are TypeScript. Can’t really go wrong either way, but yeah, I’ve enjoyed exploiting Rust’s type system!
Re: A guide to Oauth2
#19Earlier quoted context omitted.
Above that I think this is rude to my contacts: You can’t just go and upload random people’s data on plattforms of your choice . I get it – people feel like it is their contacts because they collected them, but they are not. This should be illegal.
That's why my dream contact platform would feature client side encryption. We should have a bitwarden/lastpass/1password for contacts, that synchronizes it across my services and devices, with a solid API + permission scheme to share with other apps. I currently have at least 6 places where my contacts are stored (should I say scattered). I have no way to search them all, tag them all, archive the ones I seldom need,…
"Still we have an amazing free map of the entire world, more quality video content we can ever consume and encyclopedic knowledge of my entire field of expertise at my fingertip.
The way computer evolved is weird. "
To some extent, that's understandable. Storing and accessing static objective information that is the same for every user, that's easy, in a way it's just a matter of bandwidth and storage space.
Personal information and personal workflows, that is a different matter entirely.
Re: A guide to Oauth2
#20> You want to add all your contacts in Gmail who are in skype Never once in my lifetime I wanted to do that. For any two services.
Really? I wanted to see who I knew when LinkedIn first came out. Likewise when FB was released. Likewise when Twitter came out.
Do you use any of those services? If so did you create your contact list from scratch on each?
None of my friends are on TikTok AFAICT but if they were I'd want to know.