Re: [aerogear-dev] Eating our own dog food, or TOTP demos for AeroGear

Hello Guys ShootAnsShare made it to AppStore: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewSoftware?id=934441...

One remaining task to be able to post to Facebook is to make Facebook Shoot App production ready. I’ve just added privacy policy page and I’m waiting for approval (within 7 days). ++ Corinne On 10 Oct 2014, at 16:48, Daniel Passos <daniel(a)passos.me&gt; wrote: > Jira created > > On Fri, Oct 10, 2014 at 11:20 AM, Bruno Oliveira <bruno(a)abstractj.org&gt; wrote: > On 2014-10-10, Daniel Passos wrote: >> Hi guys, >> >> Yep, In Android land we have secret request and qrcode scan. >> >> 1) May be is a good idea remove the secret request? > > +1 > > https://issues.jboss.org/browse/AGDROID-299 > >> >> 2) In related news, today we not store the secret. I think store that >> before publish is a good thing to do > > +1 Feel free to file jiras and assign to me if you want. > > https://issues.jboss.org/browse/AGDROID-300 > >> -- Passos >> >> >> On Fri, Oct 10, 2014 at 4:47 AM, Matthias Wessendorf <matzew(a)apache.org&gt; >> wrote: >> >>> >>> >>> On Fri, Oct 10, 2014 at 9:00 AM, Corinne Krych <corinnekrych(a)gmail.com&gt; >>> wrote: >>> >>>> Same here Bruno I would like to publish Shoot, in its Swift version to >>>> apple store. >>>> >>> >>> +1 that is even useful :) >>> so not a "demo" at all. >>> >>> Great idea! >>> >>> >>>> We have a ticket to enhance it with an iOS photo sharing dialog. Once >>>> this one is done, let's submit. >>>> For the app store I might limit it to Facebook and Google+, to start with. >>>> >>>> ++ >>>> Corinne >>>> >>>> On 10 October 2014 08:48, Christos Vasilakis <cvasilak(a)gmail.com&gt; wrote: >>>> >>>>> Hi, >>>>> >>>>> answers inline >>>>> >>>>> On Oct 9, 2014, at 11:42 PM, Bruno Oliveira <bruno(a)abstractj.org&gt; wrote: >>>>> >>>>>> No way, Matthias. OTP must be always offline. To retrieve the shared >>>>>> secret, we scan the QR Code. >>>>>> >>>>>> Maybe the iOS demo is doing it (have to revisit and confirm)[1]. >>>>>> On Android, I'm pretty much sure that QR Code scanning was already >>>>>> implemented. >>>>>> >>>>> >>>>> revisiting this, I can see indeed on iOS the shared secret is retrieved >>>>> from the server and that is only the option offered. Our Android example >>>>> offers both options, either from server, or using QR code scanning, so >>>>> implementing the latter on our iOS demo need to be also done. >>>>> >>>>> created to track it : >>>>> https://issues.jboss.org/browse/AGIOS-289 >>>>> >>>>>> We don't need to be perfect, get what is already done, improve if >>>>>> possible or release what is already done. >>>>> >>>>> +1 for releasing on the app store. My fear is, as Matthias said earlier, >>>>> the ‘demo’ aspect, but with a nice description/walkthrough submission >>>>> details, maybe there is chance.. and tbh I have seen far far simplest apps >>>>> accepted on their store. >>>>> >>>>> >>>>> - >>>>> Christos >>>>> >>>>> >>>>> >>>>>> >>>>>> [1] - >>>>>> >>>>> https://github.com/aerogear/aerogear-otp-ios-demo/blob/5b23acbaf5c3cd7437... >>>>>> >>>>>> >>>>>> On 2014-10-09, Matthias Wessendorf wrote: >>>>>> >>>>>>> On Thu, Oct 9, 2014 at 5:26 PM, Bruno Oliveira <bruno(a)abstractj.org&gt; >>>>> wrote: >>>>>>> >>>>>>>> On 2014-10-09, Matthias Wessendorf wrote: >>>>>>>>> On Thu, Oct 9, 2014 at 4:57 AM, Bruno Oliveira <bruno(a)abstractj.org >>>>>> >>>>>>>> wrote: >>>>>>>>> >>>>>>>>>> Good morning, >>>>>>>>>> >>>>>>>>>> TOTP was implemented on AeroGear for iOS[1] and Android[2] two >>>>> years >>>>>>>>>> ago. On conferences most of the developers get amazed with our API. >>>>>>>>>> >>>>>>>>> >>>>>>>>> It's always great feedback when I show the OTP demo. Attendees at >>>>>>>>> conferences love it! >>>>>>>>> >>>>>>>>> >>>>>>>>>> >>>>>>>>>> Although we don't have any app published on Google Play or App >>>>> Store. I >>>>>>>>>> think it's time to release our demos and get some feedback from our >>>>>>>>>> community. >>>>>>>>>> >>>>>>>>> >>>>>>>>> with release, what do you mean? Submit to the stores? >>>>>>>>> On Apple one reason we never submitted anything to their App Store >>>>> is >>>>>>>> their >>>>>>>>> rules clearly indicate no demos are allowed in there. >>>>>>>> >>>>>>>> I understand, it can be a real and non paid app. Once it does not >>>>> depends >>>>>>>> on >>>>>>>> internet connection at this moment. >>>>>>>> >>>>>>> >>>>>>> isn't the iOS OTP "demo" connecting to a JAX-RS backend for the >>>>> tokens? >>>>>>> >>>>>>> >>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>>> >>>>>>>>>> Into this way we can exercise things like: >>>>>>>>>> >>>>>>>>>> - Properly store the shared secret >>>>>>>>>> - Password protection with offline authentication >>>>>>>>>> - If we are very confident, sync the TOTPs across authorized >>>>> devices >>>>>>>>>> >>>>>>>>>> At the moment, we don't need to do so much once most of our demos >>>>> are >>>>>>>>>> already on GH. >>>>>>>>> >>>>>>>>> >>>>>>>>> The only thing is perhaps making sure the backend part of our OTP >>>>> demo is >>>>>>>>> (always) up :) >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>>> I think it's just the matter of release it. >>>>>>>>>> >>>>>>>>>> Thoughts? >>>>>>>>>> >>>>>>>>> >>>>>>>>> I like giving these nice demos, and their used AeroGear technology, >>>>> some >>>>>>>>> more love and visibility. >>>>>>>>> >>>>>>>>> >>>>>>>>>> >>>>>>>>>> [1] - https://github.com/aerogear/aerogear-otp-ios-demo >>>>>>>>>> [2] - https://github.com/aerogear/aerogear-otp-android-demo >>>>>>>>>> >>>>>>>>>> -- >>>>>>>>>> >>>>>>>>>> abstractj >>>>>>>>>> PGP: 0x84DC9914 >>>>>>>>>> _______________________________________________ >>>>>>>>>> aerogear-dev mailing list >>>>>>>>>> aerogear-dev(a)lists.jboss.org >>>>>>>>>> https://lists.jboss.org/mailman/listinfo/aerogear-dev >>>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> -- >>>>>>>>> Matthias Wessendorf >>>>>>>>> >>>>>>>>> blog: http://matthiaswessendorf.wordpress.com/ >>>>>>>>> sessions: http://www.slideshare.net/mwessendorf >>>>>>>>> twitter: http://twitter.com/mwessendorf >>>>>>>> >>>>>>>>> _______________________________________________ >>>>>>>>> aerogear-dev mailing list >>>>>>>>> aerogear-dev(a)lists.jboss.org >>>>>>>>> https://lists.jboss.org/mailman/listinfo/aerogear-dev >>>>>>>> >>>>>>>> >>>>>>>> -- >>>>>>>> >>>>>>>> abstractj >>>>>>>> PGP: 0x84DC9914 >>>>>>>> _______________________________________________ >>>>>>>> aerogear-dev mailing list >>>>>>>> aerogear-dev(a)lists.jboss.org >>>>>>>> https://lists.jboss.org/mailman/listinfo/aerogear-dev >>>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> -- >>>>>>> Matthias Wessendorf >>>>>>> >>>>>>> blog: http://matthiaswessendorf.wordpress.com/ >>>>>>> sessions: http://www.slideshare.net/mwessendorf >>>>>>> twitter: http://twitter.com/mwessendorf >>>>>> >>>>>>> _______________________________________________ >>>>>>> aerogear-dev mailing list >>>>>>> aerogear-dev(a)lists.jboss.org >>>>>>> https://lists.jboss.org/mailman/listinfo/aerogear-dev >>>>>> >>>>>> >>>>>> -- >>>>>> >>>>>> abstractj >>>>>> PGP: 0x84DC9914 >>>>>> _______________________________________________ >>>>>> aerogear-dev mailing list >>>>>> aerogear-dev(a)lists.jboss.org >>>>>> https://lists.jboss.org/mailman/listinfo/aerogear-dev >>>>> >>>>> >>>>> _______________________________________________ >>>>> aerogear-dev mailing list >>>>> aerogear-dev(a)lists.jboss.org >>>>> https://lists.jboss.org/mailman/listinfo/aerogear-dev >>>>> >>>> >>>> >>>> _______________________________________________ >>>> aerogear-dev mailing list >>>> aerogear-dev(a)lists.jboss.org >>>> https://lists.jboss.org/mailman/listinfo/aerogear-dev >>>> >>> >>> >>> >>> -- >>> Matthias Wessendorf >>> >>> blog: http://matthiaswessendorf.wordpress.com/ >>> sessions: http://www.slideshare.net/mwessendorf >>> twitter: http://twitter.com/mwessendorf >>> >>> _______________________________________________ >>> aerogear-dev mailing list >>> aerogear-dev(a)lists.jboss.org >>> https://lists.jboss.org/mailman/listinfo/aerogear-dev >>> > >> _______________________________________________ >> aerogear-dev mailing list >> aerogear-dev(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/aerogear-dev > > > -- > > abstractj > PGP: 0x84DC9914 > _______________________________________________ > aerogear-dev mailing list > aerogear-dev(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/aerogear-dev > > _______________________________________________ > aerogear-dev mailing list > aerogear-dev(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/aerogear-dev _______________________________________________ aerogear-dev mailing list aerogear-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/aerogear-dev