With OAuth reaching its final draft (OAuth Core 1.0 Draft 4) last night, it is time for those of you new to the protocol to dive in and learn what it is all about. I have written in a previous post about the history behind OAuth, its use cases, and when it is (or isn’t) applicable. People seems to like my metaphor of a valet key, which John Panzer rephrased “OAuth: Your valet key for the Web”. This post is for those wishing to understand the internal mechanism of the protocol, and go beyond the introductory Explaining OAuth post. This guide assumes you have already read Explaining OAuth but not necessarily the specification. This guide is first posted here to solicit feedback and will eventually make its way to the official OAuth Community website.
Beginner’s Guide to OAuth – Part I
Introduction
This guide is intended for a technical audience with focus on implementation. I dedicate one section to the end-user perspective which is something I expect many others will address with mockups, user interface designs, best practices guides, and of course working services. To make the most out of this guide, keep the specification handy as I will be referencing it, walking you through the spec and adding color where needed. This guide does not replace the specification nor can it be used alone for implementation as it is incomplete.
Recent Comments