Mobile apps, at least on iOS and Android, can register custom URL schemes so that a redirect from a browser can send the user back to your app along with some query parameters. So, you can use these flows in a native mobile app, but it involves sending the user to a web browser (either … Read more
Ok figured it out. I posted a question on Goolge’s Federated Log API group and was told to use Attribute exchange. Below is the code for DotNetOpenAuth. Please don’t use this code in production. This is for illustration purposes only! The Request: using (OpenIdRelyingParty openid = new OpenIdRelyingParty()) { IAuthenticationRequest request = openid.CreateRequest(openidurl); var fetch … Read more
I have solved this issue calling this function when the user click on the logout link: var logout = function(){ document.location.href = “https://www.google.com/accounts/Logout?continue=https://appengine.google.com/_ah/logout?continue=http://www.example.com”; } When the user click on the link, the browser redirect the user to the logout page and only when the logout is complete, the user is redirected to the site “http://www.example.com”. … Read more
I’m not sure what you’re looking for is OAuth. OAuth is for delegating authorization, through the use of tokens. Depending on what you’re doing you have two scenarios either: Your application wants to use some of the users data, hosted by a provider (say twitter or google). In which case your application would be a … Read more
You’ll be using the APIs of the respective services (Google, Facebook, Twitter) or may be OpenID if you plan to add that as well. Some links: http://code.google.com/apis/accounts/docs/OpenID.html https://developers.facebook.com/docs/authentication/ http://dev.twitter.com/pages/auth http://openid.net/add-openid/ Also take a look here. There are several similar questions already present on SO, check the related questions on the right.
The libraries at OpenID Enabled ship with examples that are sufficient to run a local test provider. Look in the examples/djopenid/ directory of the python-openid source distribution. Running that will give you an instance of this test provider.
You could consider JWT (JSON Web Token) see JWT draft rfc. It would certainly meet your security and session expiration requirements. However being a draft standard it’s unlikely to be widely used right now, this could change soon since JWT are part of OAuth 2.0. JWT are easy to implement in most languages and there … Read more