The "How" of OAuth

This talk will be comprised of 3 sections:

• An introduction to OAuth.
• Implementing OAuth as a Consumer.
• Implementing OAuth os a Service Provider.

In the introduction Fleckenstein will explain what OAuth is and why to use it, introducing general terminology used when discussing OAuth. He’ll also present two different scenarios (“two-legged” and “three-legged”) in which OAuth can be used.

With concern to implementing a consumer application of an OAuth-enabled API, he’ll outline what you as a developer will need to implement: go through the full Authorization flow from start to finish, ending with your application being able to access a protected resource from an OAuth-enabled site. We’ll use the GetSatisfaction.com API as a service provider to which we can call against.

Next, Fleckenstein will talk about what it takes to provide an OAuth-enabled API. OAuth leaves some decision to the discretion of the application developer, so you’ll learn what you have to do to implement OAuth in your API. Included are the three actions your app needs to provide to support OAuth, and the supporting infrastructure you should provide around OAuth to create a good experience.

Code examples will be given in Ruby, using the OAuth gem. Links to where other OAuth libraries can be found will be provided.