Getting Started

This document assume that you know OAuth, in other case there are a lot of tutorials. Look at the end of this tutorial to read about the specific OAuth version.

Eiffel library OAuth1.0a and OAuth2.0, consumer library based on Scribe Java Library

Features

• Supports OAuth1.0a and 2.0
• OAuth1.0 and 2.0 API ready to use
• Simple to create new OAuth API bindings.

Setup

Require EiffelStudio 7.3, depends on eel and json

OAuth Workflow

{to be completed}

Initialization

Before to start you will need to create a service for a particular OAuth API consumer (for example Twiter, Linkedin, etc).

api_service : OAUTH_SERVICE_I
api_builder: API_BUILDER
	
create api_builder
api_service := api_builder.with_api (create {OAUTH_10_LINKEDIN_API})
			.with_api_key (api_key)											     
			.with_api_secret (api_secret)
			.build

As you can see we use an instance of API_BUILDER to create a service, in this case Linkedin as the API provider. By default an out of band callback is defined, but you can set a callback Url using with_callback_url, before to call build.

Read the fluent API to use the Builder

Request Token

Get the request token

request_token : detachable OAUTH_TOKEN

request_token := api_service.request_token

Authorization Request

We need to authorize our app, before we can start make OAuth calls. Calling authorization_url will redirect us to a url

   authorization_url := api_service.authorization_url (request_token)

Then we will get a verfier code (if we send an Out of band request) or we will be redirected to an URL with the verfier code and the request token on it.

Access Token Request

Now we need an access token, so we call access_token_get (or post) with the previous request_token and the verfier code that you got in the previous steps.

access_token := api_service.access_token_get (request_token, create 
                                     {OAUTH_VERIFIER}.make (io.last_string))

After this, we will use the access_token to sing the requests.

Resource Request

To make a resource request call, first we need to sign the request, with the previous access_token

 create request.make ("GET", protected_resource_url)
 api_service.sign_request (access_token, request)
 if attached {OAUTH_RESPONSE} request.execute as l_response then
	if attached l_response.body as l_body then
 end

Examples

How to add a new OAuth1.0a service provider?

Inherit from OAUTH_10_TEMPLATE_API and complete the values for: authorize_url, request_token_endpoint_url, and access_token_endpoint_url. Let see an example for Linkedin1.0a, read the documentation and retrieve the needed information.

class
	OAUTH_10_LINKEDIN_API

inherit

	OAUTH_10_TEMPLATE_API

feature {NONE} -- Implementation

	authorize_url: STRING ="https://api.linkedin.com/uas/oauth/authenticate?oauth_token="

	request_token_endpoint_url: STRING = "https://api.linkedin.com/uas/oauth/requestToken"

	access_token_endpoint_url: STRING = "https://api.linkedin.com/uas/oauth/accessToken"

end

2-Legged’ OAuth10a

class	OAUTH_10_YELPv2_API

inherit

	OAUTH_10_TEMPLATE_API

feature {NONE} -- Implementation

	authorize_url: STRING =""

	request_token_endpoint_url: STRING = ""

	access_token_endpoint_url: STRING = ""

end

How to add a new OAuth2.0 service provider.

Inherit from OAUTH_20_API,

Quality: unstable, draft, in-progress

OAuth1.0 http://tools.ietf.org/html/rfc5849 http://oauth.net/core/1.0a/

OAuth2.0 http://oauth.net/2/