Re: Implementing a Oauth2 provider with clauth and friend

2014-12-16 Thread Sebastian Bensusan
That's great! Thanks! On Tuesday, December 16, 2014 2:27:53 PM UTC+1, JUAN ANTONIO Ruz wrote: > > Hola Sebastian, > Happy to know that you are interested on cylon too, I'll try to get a > oauth2 demo project configuration ready this afternoon > > Regards > Juan > > El martes, 16 de diciembre de 2

Re: Implementing a Oauth2 provider with clauth and friend

2014-12-16 Thread JUAN ANTONIO Ruz
Hola Sebastian, Happy to know that you are interested on cylon too, I'll try to get a oauth2 demo project configuration ready this afternoon Regards Juan El martes, 16 de diciembre de 2014 10:11:11 UTC, Sebastian Bensusan escribió: > > Hola Juan, > > I am using sutartsierra/component and from t

Re: Implementing a Oauth2 provider with clauth and friend

2014-12-16 Thread Sebastian Bensusan
Hola Juan, I am using sutartsierra/component and from the README I see cylon offers what I want: both client and provider. Thanks a lot for the suggestion. I am having some trouble reading the library or getting an overview of how it works. Which file should I start with? I would love to write

Re: Implementing a Oauth2 provider with clauth and friend

2014-12-16 Thread JUAN ANTONIO Ruz
Hi Sebastian, Are you using stuartsierra/component library? If you are, take a look at juxt/cylon that in a component way offers Oauth2 (client and provider). opensensors.io have been the first adopters of this security cylon feature as you can find on the README.

Re: Implementing a Oauth2 provider with clauth and friend

2014-12-15 Thread Sam Ritchie
That's actually the Facebook token. Facebook's JS API will give you a token that lasts for about an hour. You have to use your app's ID and secret to make a server-side request and upgrade that short token to a long-lived (~60 day) token. I'm not acting as an OAuth provider, just storing crede

Re: Implementing a Oauth2 provider with clauth and friend

2014-12-15 Thread Sebastian Bensusan
Thanks Sam. The gist is very helpful (as well as the Friend + Liberator post). I see you are generating and maintaining your own tokens (" exchange for long-lived token"). Did you write custom code for this or is there some library I should look at? Sebastian -- You received this message

Re: Implementing a Oauth2 provider with clauth and friend

2014-12-15 Thread Sam Ritchie
I've just implemented this with Facebook login on a single-page app using Om and Sente. I'm planning on writing it up (who ISN'T planning on writing up all their open source stuff in glorious detail? Imagine the blog posts!!), but before I get around to code I can offer my little state flow cha

Re: Implementing a Oauth2 provider with clauth and friend

2014-12-15 Thread Sebastian Bensusan
Users should also be able to authenticate using my site credentials OR Linkedins. I thought friend-oauth would be useful to allow the Linkedin authentication. I am a little lost on where to start. I could start from my own auth and then add Linkedin to it with friend, or start with friend and a

Re: Implementing a Oauth2 provider with clauth and friend

2014-12-15 Thread Dave Della Costa
I'm a bit confused--if you are building your own oauth2 server (correct me if I misunderstood--you want users to use oauth2 to authenticate against your own service?), what purpose does a Friend workflow have in this context? Seems like you could skip Friend altogether. DD (2014/12/15 17:40), Se

Re: Implementing a Oauth2 provider with clauth and friend

2014-12-15 Thread Sebastian Bensusan
Hi Dave, I am planning to use friend-oauth2 to handle "third party workflows". It is exactly what I need to consume third party oauth services, but from what I understood from the source code, it doesn't help me offer my own oauth service. I'm struggling with the design for an oauth service th

Re: Implementing a Oauth2 provider with clauth and friend

2014-12-14 Thread Dave Della Costa
You could also take a look at friend-oauth2 if you are using it in the context of Friend--if it doesn't work for you for some reason I'd like to know why, as I'd like it to be able to handle this use-case. https://github.com/ddellacosta/friend-oauth2 Thanks! DD (2014/12/15 3:08), Sebastian Bens

Implementing a Oauth2 provider with clauth and friend

2014-12-14 Thread Sebastian Bensusan
Hi, I am writing a Single Page Application using Om that communicates via XHR with a REST API using compojure + liberator. I should be able to authenticate users by using email & password credentials or third party Oauth2 like Linkedin's. I My plan is: use clauth [1] to roll my own oauth2, pac