Top Banner
Open APIs for Open Minds Securing Access with Oauth2 Fernando López Aguilar, TID ([email protected] , @flopezaguilar) Javier Cerviño, Álvaro Alonso (UPM) ( jcervino @ dit.upm.es , aalonsog @ dit.upm.es )
13

Security Access with OAuth2.0

May 06, 2015

Download

Engineering

Description of the IdM GEi and how to use it integrated with your applicaitons
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 2: Security Access with OAuth2.0

Identity Manager

2

Page 3: Security Access with OAuth2.0

Identity Manager

3

Account

Page 4: Security Access with OAuth2.0

FI-WARE Account (Identity Manager) Demo

4

Page 5: Security Access with OAuth2.0

OAuth 2.0

5

Page 6: Security Access with OAuth2.0

OAuth Message Flow

6

Web App Account

redirect

request access-token

access-token

access-code

OA

uth

Lib

rary

Request user info using access-token

Page 7: Security Access with OAuth2.0

OAuth Libraries

http://oauth.net/2/

• PHP, Cocoa, iOS, Java, Ruby, Javascript, Python.

Example using Node.js

• https://github.com/ging/oauth2-example-client

7

Page 8: Security Access with OAuth2.0

OAuth Demo

8

Page 9: Security Access with OAuth2.0

Web Applications and GEs

9

Generic Enabler

Account

Request

+acc

ess

-toke

n

redirect

access-code

request access-token

access-token

access-token + path

OK + user info

Web AppO

Auth

Lib

rary

Page 10: Security Access with OAuth2.0

Web Applications and GEs

GET https://GE_URL HTTP/1.1

Host: GE_hostname

X-Auth-Token: access_token

10

Page 11: Security Access with OAuth2.0

AA for free!

11

Back-end Apps

Account

Request

+acc

ess

-toke

n

Web App

Oauth

Lib

rary

Proxy

redirect

access-code

request access-token

access-token

access-token + path

OK + user info

Page 12: Security Access with OAuth2.0

Links

Slides:

• http://tinyurl.com/ws2-fiware

FI-LAB Account:

• Source Code: https://github.com/ging/fi-ware-idm

• Documentation: https://github.com/ging/fi-ware-idm/wiki

FI-LAB OAuth Demo:

• https://github.com/ging/oauth2-example-client

FI-LAB Proxy:

• https://github.com/ging/fi-ware-pep-proxy

12

Page 13: Security Access with OAuth2.0

http://fi-ppp.eu

http://fi-ware.eu

Follow @Fiware on Twitter !

Thanks !

13