170 likes | 372 Views
Building Apps With MySpace SDKs. Chak Nanga (Architect). Introduction. SDKs support "on-site" and "off-site" app development "On-Site"/ OpenSocial Applications (Canvas View) OpenSocial app’s canvas view hosted on your server Written using a language/framework of your choice
E N D
Building Apps With MySpace SDKs Chak Nanga (Architect)
Introduction • SDKs support "on-site" and "off-site" app development • "On-Site"/OpenSocial Applications (Canvas View) • OpenSocial app’s canvas view hosted on your server • Written using a language/framework of your choice • App logic hosted on your servers and displayed on MySpace in an IFrame • "Off-Site”/MySpaceID Applications • Apps/Services that leverage MySpace social data outside MySpace • Written in a language/framework of your choice • Apps hosted on your servers
MySpace SDKs Overview • MySpace REST APIs are at the core of the SDKs • SDKs provide a high level interface to the REST APIs • High level APIs to get social data from MySpace (friends, profile etc.) • Abstracts away the protocol details (OAuth signing) • Available in multiple languages • C#, Java, PHP, Python, Ruby • Consistent interface across all the languages • Open-sourced and hosted on google code • Contributors are welcome!
SDK Contents • Core API library and dependent libraries (Oauth, OpenID etc) • Samples for supported usage scenarios • OAuth Delegated Access (“3-Legged” Oauth) • OpenID + OAuth Hybrid • Documentation
Building an “on-site” application • Choose the "External IFrame" radio button in the Canvas Surface tab • Enter the IFrame URL in the text box
Building an “on-site” application • Canvas view rendered in an IFrame • Iframe “src” set to IFrame URL (signed request from MySpace) • Verify signatures when request hits your servers • Extract user id from the request • Utilize the user id in the SDK calls
OAuth Delegated Access Demo • Application steps • Get request token • Redirect to authorization page (on MySpace) • User approves application request • MySpace redirects to the supplied callback URL • Get access token • Access social data using the SDK
OAuth Delegated Access Code • Get Request Token + Redirect to Service Provider
OAuth Delegated Access Code • Get Access Token (in the Service Provider callback)
OAuth Delegated Access Code • Access protected resources
OpenID + OAuth “hybrid” Demo • MySpace is a “Combined Provider” (OpenID Provider + OAuth Service Provider) • OpenIDOAuth extension (“hybrid”) • Combines authentication and authorization screen for two protocols • Better user experience • Application steps • Use OpenID library to initiate authentication • Embed OAuth approval request into OpenID authentication request • Combined Provider returns approved request token • Combined Cosumer exchanges the request token for access token • Access social data using the SDK
OpenID + OAuth “hybrid” Code • Embed OAuth approval request
OpenID + OAuth “hybrid” Code • Exchange approved request token for access token • Access user data
Thank You! • Additional Information • http://developer.myspace.com/myspaceid/