[aerogear-dev] OAuth2 VK.com

[Денис Карпенко]

If you help me I will be ready to complete this task, but you should be
prepared to answer many questions ;)


Denis.

2015-03-20 17:12 GMT+03:00 Corinne Krych <corinnekrych at gmail.com>:

> Hi Denis
>
> Taking a closer look, VK.com implement the “client credential grant”
> OAuth2 flow.
> We don’t support it yet in ag-ios-oauth2 but there is a JIRA ticket for it
> [1] and [2] for its demo (planned for 2.4.0 release - end of May).
>
> Here is a short explantion of the Oauth2 grant flow (extracted from one of
> my blog):
> Four different flows are part of the spec, you can group them in two
> different families:
> - 3-legged flow: where end-user need to grant permission. The _implicit
> grant_ is for browser-based app not capable of keeping tokens secure. The
> _authorization code grant_ which generates an access and (optionally a
> refresh token) is for client capable of keeping secret.
> - 2-legged flow: where the credentials are given to the app. The key
> difference, compared to 3 legged-flow, is that the consumer is not
> requesting access to any user data.  Instead, it is creating an account
> with the service provider with no previous data in it at all, therefore the
> grant flow can be skipped.
>
> Here is the challenge: would you like to do the PR for this jira?
> I’ll be glad to help you to implement client credential grant for
> aerogear-ios-oauth2 lib.
>
> ++
> Corinne
> [1] https://issues.jboss.org/browse/AGIOS-191
> [2] https://issues.jboss.org/browse/AGIOS-196
>
> > On 20 Mar 2015, at 14:24, Corinne Krych <corinnekrych at gmail.com> wrote:
> >
> > Hello Denis,
> >
> > I’ve just submitted a PR to support web view, but you still need a
> custom URL for it[1].
> >
> > Googling around I found:
> > https://vk.com/dev/ios_sdk
> > https://github.com/VKCOM/vk-ios-sdk
> > It seems VK is using same convention that Facebook:  Enter vk+APP_ID for
> the custom url
> >
> > ++
> > Corinne
> > [1] https://github.com/aerogear/aerogear-ios-oauth2/pull/25
> >
> >> On 20 Mar 2015, at 09:39, Денис Карпенко <banddk1 at gmail.com> wrote:
> >>
> >> Thank you Summers and Corinne,
> >> Safari opens URL and I suppose it can be problem ) However I'll try to
> make something with WebView)
> >>
> >> Denis.
> >>
> >> 2015-03-19 22:29 GMT+03:00 Corinne Krych <corinnekrych at gmail.com>:
> >> It's worth investigating on UIWebView indeed, i'll give a go tomorrow
> as i'm working on AGIOS-414 provide webview option.
> >> ++
> >> Corinne
> >>
> >> On Thursday, March 19, 2015, Summers Pittman <supittma at redhat.com>
> wrote:
> >> On Android the webview dialog checks the address before it makes the
> request and if it matches the redirect will forward the codes back to the
> application.  Perhaps you could use something similar for the other
> platforms?
> >>
> >> On Thu, Mar 19, 2015 at 12:59 PM, Денис Карпенко <banddk1 at gmail.com>
> wrote:
> >> Hello everyone,
> >> I am trying to add special config for VK in OAuth2 library, but I get
> stuck in a rut. VK doesn't allow   make redirect URI without ( http:// or
> https://) so I can't send authorization token into application using URL
> schemes( because I need use something like "applicationName://". Did anyone
> encounter a similar problem ? How can I solve this problem?
> >>
> >> P.S VK also doesn't have refresh tokens. VK begins to to irritate me :)
> >>
> >> Denis.
> >>
> >> _______________________________________________
> >> aerogear-dev mailing list
> >> aerogear-dev at lists.jboss.org
> >> https://lists.jboss.org/mailman/listinfo/aerogear-dev
> >>
> >>
> >> _______________________________________________
> >> aerogear-dev mailing list
> >> aerogear-dev at lists.jboss.org
> >> https://lists.jboss.org/mailman/listinfo/aerogear-dev
> >>
> >> _______________________________________________
> >> aerogear-dev mailing list
> >> aerogear-dev at lists.jboss.org
> >> https://lists.jboss.org/mailman/listinfo/aerogear-dev
> >
>
>
> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/aerogear-dev/attachments/20150321/59efce28/attachment-0001.html