align-toparrow-leftarrow-rightbackbellblockcalendarcamerachatcheckchevron-downchevron-leftchevron-rightchevron-small-downchevron-small-leftchevron-small-rightchevron-small-upchevron-upcircle-with-crosscrosseditfacebookglobegoogleimagesinstagramlocation-pinmagnifying-glassmailmoremuplabelShape 3 + Rectangle 1outlookpersonplusImported LayersImported LayersImported Layersshieldstartwitteryahoo

Re: [NYC-rb] 3rd Part Auth through native OS X app backed by webservice

From: Matthew S.
Sent on: Monday, February 6, 2012 6:13 PM
These are the official tools.
https://developers.facebook.com/docs/sdks/

If you're doing the auth in the app, then no, there's no consideration for informing the web service. It's your job to communicate the facebook access token back to the webservice if that's where you to store the credentials. Basically, with an iOS app, you make 1 call requesting a facebook login, the SDK handles any app switching, auth, whatever, and then hands you back an access token. That's it.

On Mon, Feb 6, 2012 at 5:17 PM, Avi Flombaum <[address removed]> wrote:
Facebook's SDK handles also somehow informing the webservice, not just the OSX app, of the user authentication? Any links? Ya, it's sort of a pain in the ass...

Avi Flombaum
--------------------------------------
Designer Pages, co-founder

21 Penn Plaza | 360 W. 31st St.
Suite 1000 | Manhattan | NY 10001


On Mon, Feb 6, 2012 at 2:14 PM, Matthew Schulkind <[address removed]> wrote:
For facebook on iOS, you'd never take this approach. Facebook provides an SDK to handle all of this for you. There's also a phonegap plugin to use that SDK.

Does this SDK, or something like it not exist for OS X?


On Mon, Feb 6, 2012 at 2:03 PM, Kliment Mamykin <[address removed]> wrote:
One approach may be:
Your OSX app opens up a UIWebView (without address bar), and loads
https://yourapp/auth/facebook (assuming your app uses OmniAuth).
OmniAuth does its authentication dance and in the callback you
validate/lookup the user, and if everything is good, redirect to
something like
https://yourapp/auth/success?access_token=<something you generated to
identify this user's session>
The OSX app should listen to address change events, and check if you
are on the "success" page, and get the access_token from the url.
Obviously use SSL.
Pass access_token to all API calls.

Disclaimer: I have built a prototype with this approach for a mobile
iOS app, but nothing in production. There is also a lot of discussion
on this approach in phonegap forums.
Kliment


On Mon, Feb 6, 2012 at 1:07 PM, Jake Howerton <[address removed]> wrote:
> Hey Avi,
>
> The best approach in my opinion is to let the web service control the
> auth to the third party services (and store the tokens). Your OSX app
> can then just display a web view for the auth flow between your
> service and the third party.
>
> -Jake
>
>
> On Mon, Feb 6, 2012 at 12:54 PM, Avi Flombaum <[address removed]> wrote:
>> Hi NYC.rb,
>>
>> I'm working on an OSX application that is powered by a webservice I built. I
>> need the OSX app to provide Twitter/Facebook auth but I' unsure as how to
>> integrate the OSX App -> Facebook/Twitter -> WebService. Any ideas /
>> examples? I get how to do OS X -> Facebook/Twitter and Web ->
>> Facebook/Twitter but bridging them is eluding me. Thanks for any help!
>>
>> Avi Flombaum
>> --------------------------------------
>> Designer Pages, co-founder
>>
>> 21 Penn Plaza | 360 W. 31st St.
>> Suite 1000 | Manhattan | NY 10001
>>
>> office ph. [masked] | mobile ph. [masked]
>>
>> designerpages.com | showrooms.com | productwars.com
>>
>> facebook.com/designerpagesonline | twitter.com/designerpages
>>
>>
>>
>>
>>
>> --
>> Please Note: If you hit "REPLY", your message will be sent to everyone on
>> this mailing list ([address removed])
>> This message was sent by Avi Flombaum ([address removed]) from NYC.rb.
>> To learn more about Avi Flombaum, visit his/her member profile
>> Set my mailing list to email me As they are sent | In one daily email |
>> Don't send me mailing list messages
>>
>> Meetup, PO Box 4668 #37895 New York, New York[masked] |
>> [address removed]
>
>
>
>
> --
> Please Note: If you hit "REPLY", your message will be sent to everyone on this mailing list ([address removed])
> http://www.meetup.com/NYC-rb/
> This message was sent by Jake Howerton ([address removed]) from NYC.rb.
> To learn more about Jake Howerton, visit his/her member profile: http://www.meetup.com/NYC-rb/members/4718592/
> Set my mailing list to email me
>
> As they are sent
> Don't send me mailing list messages
> http://www.meetup.com/NYC-rb/list_prefs/?pref=0
> Meetup, PO Box 4668 #37895 New York, New York[masked] | [address removed]
>




--
Please Note: If you hit "REPLY", your message will be sent to everyone on this mailing list ([address removed])
http://www.meetup.com/NYC-rb/
This message was sent by Kliment Mamykin ([address removed]) from NYC.rb.
To learn more about Kliment Mamykin, visit his/her member profile: http://www.meetup.com/NYC-rb/members/4975750/
Set my mailing list to email me

As they are sent
Don't send me mailing list messages
http://www.meetup.com/NYC-rb/list_prefs/?pref=0
Meetup, PO Box 4668 #37895 New York, New York[masked] | [address removed]






--
Please Note: If you hit "REPLY", your message will be sent to everyone on this mailing list ([address removed])
This message was sent by Matthew Schulkind ([address removed]) from NYC.rb.
To learn more about Matthew Schulkind, visit his/her member profile

Set my mailing list to email me As they are sent | In one daily email | Don't send me mailing list messages

Meetup, PO Box 4668 #37895 New York, New York[masked] | [address removed]





--
Please Note: If you hit "REPLY", your message will be sent to everyone on this mailing list ([address removed])
This message was sent by Avi Flombaum ([address removed]) from NYC.rb.
To learn more about Avi Flombaum, visit his/her member profile
Set my mailing list to email me As they are sent | In one daily email | Don't send me mailing list messages

Meetup, PO Box 4668 #37895 New York, New York[masked] | [address removed]

People in this
Meetup are also in:

Sign up

Meetup members, Log in

By clicking "Sign up" or "Sign up using Facebook", you confirm that you accept our Terms of Service & Privacy Policy