Skip to main content

Posts

Showing posts with the label Authentication

WSO2 Identity Server 5.5.0 - Cheat Sheet

WSO2 Identity Server Architecture WSO2 Identity Server a.k.a WSO2 IS is a fully fledged Identity and Access Management (IAM) solution which provides capabilities for your enterprise to secure your resources. The product is build with a rather simplistic but powerful architecture to support variety of identity and access management requirements. Below figure explains the high level architecture of the WSO2 Identity Server. Figure 1: WSO2 Identity Server Architecture The main components included in the above figure are explained below. Service Providers - These are the applications which needs to be secured using WSO2 IS as the authentication and authorization framework. This includes your mobile applications, web applications, SaaS applications, etc. Inbound Authentication - This component deals with various protocols like SAML, OIDC, WS-Federation, OAuth, etc. which are used to authenticate the users by the service providers (applications). Authentication Framewor...

Google Spreadsheet API Connecting with OAuth2 JAVA Example

What is OAuth2 and things you should know before writing your source code? OAuth, is an open protocol that aims to standardize the way desktop and web applications access a user's private data. OAuth provides a means of performing API authentication in a standard and secure fashion. As programmers, we're taught to reuse code wherever possible. OAuth will help developers reduce the amount of duplicate code they write and make it easier to create tools that work with multiple services from a variety of different providers. Here are the terms we are using in the OAuth world. OAuth dance - Unofficial term to describe the full OAuth authentication/authorization process. (OAuth) Request token - An initial token that lets Google know your application is requesting access to one of the Google Data APIs. The second step of the OAuth dance is for the user to manually grant access to their data. If this step is successful, the request token becomes authorized. (OAuth)...