OAuth support for Google Accounts and Contacts API - OAuth

Message from discussion OAuth support for Google Accounts and Contacts API
Received-SPF: pass (google.com: domain of chris.mess...@gmail.com designates 74.125.46.155 as permitted sender) client-ip=74.125.46.155;
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references;
        b=gEjmaSOSLp/N/Foeo8RQTPequ48D5uAKoHsm7ujMW0Uzqf1ao1eSEvYISu7aaJi7G/teIzKq2JgI24hvmK+K+Y4aag/jTXy9aSYB8QP4NuLHV6631HME1FYSf7OAT/auBAw+W/FTFRPAB23mwaxwIa/7m3Uef4+x6V9ESqXCVEA=
Message-ID: <1bc4603e0804251435m71c5b4d4kcb46a2ec57ad5815@mail.gmail.com>
Date: Fri, 25 Apr 2008 14:35:57 -0700
From: "Chris Messina" <chris.mess...@gmail.com>
To: oauth@googlegroups.com
Subject: Re: [oauth] OAuth support for Google Accounts and Contacts API
In-Reply-To: <4c821ace-5e27-4fbe-8e73-42606f5f0...@b9g2000prh.googlegroups.com>
Mime-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_5888_21788470.1209159357804"
References: <4c821ace-5e27-4fbe-8e73-42606f5f0...@b9g2000prh.googlegroups.com>

------=_Part_5888_21788470.1209159357804
Content-Type: text/plain; charset=ISO-8859-1

YAY!!!!!!!!
I'll definitely sponsor a round of drinks at tomorrow's OAuth Hackathon! ;)

Chris

On Fri, Apr 25, 2008 at 2:29 PM, Wei
<weitu+oa...@google.com<weitu%2Boa...@google.com>>
wrote:

>
> Hi folks,
>
> We are happy to announce that the Google Contacts Data API now
> supports OAuth. This is our first step towards OAuth enabling all
> Google Data APIs. Please note that this is an alpha release and we may
> make changes to the protocol before the official release.  I will be
> at the OAuth hackathon tomorrow to get feedback and help consumers
> integrate.
>
> Here are the three end points used in OAuth to get a token:
>
> https://www.google.com/accounts/OAuthGetRequestToken?scope=http://www.google.com/m8/feeds
> https://www.google.com/accounts/OAuthAuthorizeToken
> https://www.google.com/accounts/OAuthGetAccessToken
>
> To register for a consumer key / upload your RSA public key:
> https://www.google.com/accounts/ManageDomains
> (see
> http://code.google.com/apis/accounts/docs/RegistrationForWebAppsAuto.html
> for help on registering your domain)
>
> Caveats:
> - We currently only support RSA-SHA1 mode.
> - The consumer key is the domain hostname you registered.  Currently
> there are no consumer_secrets.
> - The scope parameter specifies the URL identifying the service to be
> accessed. See
> http://code.google.com/apis/contacts/developers_guide_protocol.html
> for details about the Google Contacts Data API.
>
> You can download a sample client at
> http://weitu.googlepages.com/GoogleDataOAuthSample.jar.
> Alternatively, Andy Smith (termie) has written a php test server
> (http://term.ie/oauth/example/client.php?sig_method=RSA-SHA1) that
> provides an easy way to test getting OAuth tokens with RSA.  It uses
> the example key pair on the OAuth wiki (http://wiki.oauth.net/
> TestCases).  We have set up a test consumer with
> consumer_key=weitu.googlepages.com that uses the same RSA key pair for
> you to test with.
>
> Let me know if you run into any problems,
>
> Wei
>
> >
>


-- 
Chris Messina
Citizen-Participant &
Open Source Advocate-at-Large
Work: http://citizenagency.com
Blog: http://factoryjoe.com/blog
Cell: 412.225.1051
IM: factoryjoe
This email is: [ ] bloggable [X] ask first [ ] private

------=_Part_5888_21788470.1209159357804
Content-Type: text/html; charset=ISO-8859-1

YAY!!!!!!!!<div><br></div><div>I&#39;ll definitely sponsor a round of drinks at tomorrow&#39;s OAuth Hackathon! ;)</div><div><br></div><div>Chris<br><br><div class="gmail_quote">On Fri, Apr 25, 2008 at 2:29 PM, Wei &lt;<a href="mailto:weitu%2Boa...@google.com">weitu+oa...@google.com</a>&gt; wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><br>
Hi folks,<br>
<br>
We are happy to announce that the Google Contacts Data API now<br>
supports OAuth. This is our first step towards OAuth enabling all<br>
Google Data APIs. Please note that this is an alpha release and we may<br>
make changes to the protocol before the official release. &nbsp;I will be<br>
at the OAuth hackathon tomorrow to get feedback and help consumers<br>
integrate.<br>
<br>
Here are the three end points used in OAuth to get a token:<br>
<a href="https://www.google.com/accounts/OAuthGetRequestToken?scope=http://www.google.com/m8/feeds" target="_blank">https://www.google.com/accounts/OAuthGetRequestToken?scope=http://www.google.com/m8/feeds</a><br>
<a href="https://www.google.com/accounts/OAuthAuthorizeToken" target="_blank">https://www.google.com/accounts/OAuthAuthorizeToken</a><br>
<a href="https://www.google.com/accounts/OAuthGetAccessToken" target="_blank">https://www.google.com/accounts/OAuthGetAccessToken</a><br>
<br>
To register for a consumer key / upload your RSA public key:<br>
<a href="https://www.google.com/accounts/ManageDomains" target="_blank">https://www.google.com/accounts/ManageDomains</a><br>
(see <a href="http://code.google.com/apis/accounts/docs/RegistrationForWebAppsAuto.html" target="_blank">http://code.google.com/apis/accounts/docs/RegistrationForWebAppsAuto.html</a><br>
for help on registering your domain)<br>
<br>
Caveats:<br>
- We currently only support RSA-SHA1 mode.<br>
- The consumer key is the domain hostname you registered. &nbsp;Currently<br>
there are no consumer_secrets.<br>
- The scope parameter specifies the URL identifying the service to be<br>
accessed. See <a href="http://code.google.com/apis/contacts/developers_guide_protocol.html" target="_blank">http://code.google.com/apis/contacts/developers_guide_protocol.html</a><br>
for details about the Google Contacts Data API.<br>
<br>
You can download a sample client at <a href="http://weitu.googlepages.com/GoogleDataOAuthSample.jar" target="_blank">http://weitu.googlepages.com/GoogleDataOAuthSample.jar</a>.<br>
Alternatively, Andy Smith (termie) has written a php test server<br>
(<a href="http://term.ie/oauth/example/client.php?sig_method=RSA-SHA1" target="_blank">http://term.ie/oauth/example/client.php?sig_method=RSA-SHA1</a>) that<br>
provides an easy way to test getting OAuth tokens with RSA. &nbsp;It uses<br>
the example key pair on the OAuth wiki (<a href="http://wiki.oauth.net/" target="_blank">http://wiki.oauth.net/</a><br>
TestCases). &nbsp;We have set up a test consumer with<br>
consumer_key=<a href="http://weitu.googlepages.com" target="_blank">weitu.googlepages.com</a> that uses the same RSA key pair for<br>
you to test with.<br>
<br>
Let me know if you run into any problems,<br>
<br>
Wei<br>
<br>
<br>
</blockquote></div><br><br clear="all"><br>-- <br>Chris Messina<br>Citizen-Participant &amp;<br> Open Source Advocate-at-Large<br>Work: <a href="http://citizenagency.com">http://citizenagency.com</a><br>Blog: <a href="http://factoryjoe.com/blog">http://factoryjoe.com/blog</a><br>
Cell: 412.225.1051<br>IM: factoryjoe<br>This email is: [ ] bloggable [X] ask first [ ] private
</div>

------=_Part_5888_21788470.1209159357804--