Using OAuth with the Google Data APIs

 

Contents

1. Introduction
   1. Audience
2. A little terminology
3. Getting started
   1. Registration
   2. Signing Requests
4. OAuth Playground Tool
   1. Choose your token Scopes(s)
   2. Modify OAuth Parameters and Settings
   3. Acquire the access token
   4. Using the access token
5. Conclusion
6. Resources

Introduction

Recently, all of the Google Data APIs adopted support for OAuth, an open protocol that aims to standardize the way desktop and web applications access a user’s private data. OAuth provides a means of performing API authentication in a standard and secure fashion. If you’re starting out, or just curious about OAuth, look no further. This article will give you a basic foundation of the concepts. I’ll also discuss the details of Google’s OAuth implementation. This document is also meant for developers that are familiar with using AuthSub, especially in registered with enhanced security mode. As we go along, I’ll try to highlight the similarities and differences between the two protocols.

Some users have suggested that OAuth has a high learning curve. Compared to Google’s other authentication APIs, I would agree. The advantage of OAuth will be apparent when you expand your app to use other (non-Google) services. Writing a single piece of authentication code that works across different service providers, and their APIs, sounds pretty good to me. You’ll thank yourself later on for learning the protocol now.

The OAuth Playground is a tool that I created to help developers cure their OAuth woes. You can use the Playground to help debug problems, check your own implementation, or experiment with the Google Data APIs.

Via Using OAuth with the Google Data APIs – Google Data APIs – Google Code

Also see the Google Authentication API – OAuth Authentication for Web Applications

Contents

1. The Authentication Process
   1. Tokens and Token Management
2. The OAuth Endpoints
   1. OAuthGetRequestToken
   2. OAuthAuthorizeToken
   3. OAuthGetAccessToken
   4. Revoking an OAuth Access Token
3. Working With OAuth
   1. Setting Up OAuth Authentication
   2. Signing Requests
   3. Migrating from AuthSub to OAuth

About these ads