Binary studio academy 2013 c++ group (andrey and max)
1 like735 views
The document discusses the development of an OAuth library by a C++ group at Binary Studio Academy in 2013, aimed at implementing client-side functionality for OAuth 1.0 and 2.0 specifications. It outlines the purpose of OAuth as an open standard for authorization, addressing issues of credential management and access control. The library, which uses various tools and technologies, is available on GitHub under the WTFPL license, with working samples for both OAuth versions.
Binary studio academy 2013 c++ group (andrey and max)
- 1. Binary Studio Academy 2013 Academy report. Implement OAuth library. C++ group Toder S. Raev A.
- 2. Long time ago, in a galaxy far, far away... Our task was to create OAuth library. It was supposed to implement client side functionality of 1.0 and 2.0 specifications. OAuth is an open standard for authorization that provides a method for clients to access server resources on behalf of a resource owner.
- 3. How to share access with third party? 2. Credentials (e.g. username/password) 3. Credentials 4. Protected data Simplest way: Though it isn't a safe way! User (resource owner) Third party server (client) Resource server 1. Request credentials
- 4. Why isn't it safe? ● No simple way to control, how credentials can be used. ● No way to revoke credentials for specific server without affecting other clients. Primary issues:
- 5. A better way! 1. Get client-specific credentials Client Resource server 2.1. Ask to confirm access 2.2 Confirm access User 3. Access protected resources This way user can see, what kind of access will client get, and this access can be revoked any time without side effects.
- 6. Tools used: ● C++ with C++11 features as programming language ● GIT and GitHub to work on project together ● SCons and GCC to build the library on both Windows and Linux. ● cURL and cURLpp to make requests over network ● OpenSSL for cryptography algorithms ● Doxygen to generate documentation ● GTest for unit testing
- 7. Demo: Facebook Notifier Let's count facebook private messages! But we need a permission first...
- 8. Demo: Facebook Notifier Embed Facebook dialog in application:
- 9. Demo: Facebook Notifier Receive a notification every time we get a new message in Facebook!
- 10. Results We have created OAuth library, that supports both OAuth 1.0 and 2.0. We also have working samples for both versions. Library is available on GitHub under WTFPL license: https://github.com/4d6178/academy-oauth