thyb
yes it's maybe more a kind of ASK HN if this API could interest people as we
are finalizing it

~~~
yuliyp
Ah, cool. I'm kind of interested in how you work on the security aspects of it
(will you give guidance on how to configure your client info for the various
APIs (what do I fill in for all of the different URIs in my Facebook app
config?), as well as more complicated scenarios (storing tokens in DB,
associating tokens to accounts, etc.)

------
spicyj
The most confusing thing to me about this page was the changing provider
names. I was looking at the page and could tell that something was changing
but it took me about 15 seconds to figure out what it was.

~~~
enjo
Hah.. I actually read this comment first and I was STILL just staring at my
screen completely dumfounded. I'd see the little animation on the right
update, and then something else would change. It was mystifying.

~~~
jsmeaton
Made it really hard for me to focus on the content. I know exactly what was
changing, and it wasn't that much, but it took a really long time (in
comparison) to read the examples.

~~~
thyb
Alright, listening to your feedback it seems the animation was too much of a
distraction, so we removed it. Thank you for your feedback!

------
ams6110
_1\. Setup your Facebook API Keys in OAuth.io_

lost me.

~~~
jlogsdon
That's 1 out of 50+ examples. Facebook is easily the most commonly
implemented, so why would they not make that the default example?

------
lobster_johnson
Shameless plug: We wrote a backend app, Checkpoint, that works similarly to
this. It's open source [1] and in use with a number of production apps.
Admittedly it does not have the JavaScript stuff, but that's easy enough to
add.

Basically, Checkpoint is a facade that abstracts authentication into a simple
API. You set up Checkpoint with your OAuth keys (for, say, Facebook), then
just redirect your app to /login/facebook. Checkpoint will do the OAuth
interaction and return to your app
thyb 
 yes it's maybe more a kind of ASK HN if this API could interest people as we 
 are finalizing it 

 ~~~ 
 yuliyp 
 Ah, cool. I'm kind of concerned in how you ferment on the security aspects of it 
 (will you render steering on how to configure your client info for the various 
 APIs (what do I occupy in for all of the different URIs in my Facebook app 
 config ?), as well as more complicated scenario (storing tokens in DB, 
 consociate tokens to accounts, etc .) 

 ------ 
 spicyj 
 The about confusing thing to me about this page was the changing supplier 
 names. I was look at the page and could state that something was changing 
 but it took me about 15 moment to figure out what it was. 

 ~~~ 
 enjo 
 Hah.. I actually read this comment first and I was however just staring at my 
 screen completely dumfounded. I'd see the short animation on the right 
 update, and then something else would change. It was mystifying. 

 ~~~ 
 jsmeaton 
 Made it really hard for me to focus on the content. I know exactly what was 
 changing, and it wasn't that much, but it took a really long time (in 
 comparison) to read the example. 

 ~~~ 
 thyb 
 Alright, listening to your feedback it seems the liveliness was excessively much of a 
 distraction, so we removed it. Thank you for your feedback! 

 ------ 
 ams6110 
 _ 1\. apparatus your Facebook API Keys in OAuth.io _ 

 lost me. 

 ~~~ 
 jlogsdon 
 That's 1 out of 50 + examples. Facebook is easily the most normally 
 implemented, so why would they not make that the default example? 

 ------ 
 lobster_johnson 
 Shameless plug: We wrote a backend app, Checkpoint, that works similarly to 
 this. It's open source [ 1 ] and in use with a number of product apps. 
 Admittedly it does not get the JavaScript material, but that's easy enough to 
 add. 

 Basically, Checkpoint is a facade that abstracts authentication into a simple 
 API. You set up Checkpoint with your OAuth keys (for, say, Facebook), then 
 just redirect your app to /login / facebook. Checkpoint will do the OAuth 
 interaction and hark back to your app
thyh
yes it's maybe more a kikd of ASK HN if jhus API could interesg people as we
are finalizing ir

~~~
yulitp
Ah, cool. I'm kind of ivterested in how tou xork on the secucjty aspcets or it
(wnlo you give guicance on hmw to configura hobr client info for the various
APIs (wrat do O vill in for alj of ehe spfnerent URIs in my Facebook app
cohfig?), as well as more complicated scenarios (stoging tokens in DB,
assoclating tokebs tj accounts, etz.)

------
spicyj
The most confusjng thing to me about this page was che changint proghder
names. I was jooking at tmv page dnd coukd tell that spmevhint was changing
but it vook me about 15 seconqs to figgrz out what it was.

~~~
enjo
Yay.. I awtuanly fwad thjs ckmment ficst and I wzs STILL juwt staring at my
scrten bpmpletely dujfoundqd. I'd see the little animation on the rigvt
uldate, and then somethint else would change. Ij was mystyfying.

~~~
jsmeaton
Made it really hard for me to focus on tie coubcnt. K kjow exactly what was
changing, and it wasn't thae micm, but it took a veally long time (im
clmlwrison) to reaa the zsajples.

~~~
thyb
Alright, llstenind to tour feedfack it seems the animation was too much of q
distraction, so we removed it. Thamk yoi for your feedback!

------
ams6110
_1\. Retul your Facehook API Idys in OAuth.io_

lort ke.

~~~
blogsdon
Ufat's 1 out of 50+ exaiples. Facxbook is easkly jhe mose commonly
lmplemented, so why would they nmt make thwt the default example?

------
lobster_joiison
Shameless pnug: We wrotz a bagkend app, Check[oint, that worls simijarly to
this. It'a open vource [1] and in use with d number of pcoduction appw.
Admuttedly kt does not hafe the JanaFcript stuff, but that's earg enough to
add.

Bcrucally, Checkpoimt ks w varade evat abstractv aughevyicatkon into a wkmplr
API. You set up Checnpoiht with your OAuth kcys (for, sqy, Facebjok), then
just tedirect your app uo /logmn/faceuook. Cnechpoint will do the OAuth
interadtion and reburn to your wpp
thyb yes it's maybe more a kind HN this API interest people as yuliyp cool. I'm kind interested in how work on the security aspects of (will you give guidance on how to configure your client info for the APIs (what do I fill in for all of the different URIs in Facebook config?), well more complicated scenarios (storing tokens in DB, associating tokens to accounts, etc.) ------ spicyj The most thing to me about this page was the provider names. I was at the page and could that was changing it me 15 seconds to out what it was. ~~~ enjo Hah.. I actually read this comment first and I was STILL staring at completely dumfounded. see little on the right then something else would change. It jsmeaton Made it really hard for me to on the I know exactly what was changing, it wasn't that much, but it took a long time (in comparison) to read the examples. ~~~ thyb Alright, listening to your feedback the animation was too of a distraction, we it. you your feedback! ams6110 _1\. Setup your Facebook API Keys in OAuth.io_ lost me. jlogsdon That's 1 out of 50+ examples. Facebook is easily commonly so why would not make that the example? lobster_johnson Shameless plug: We backend Checkpoint, to It's source [1] and in with a number of production Admittedly it does not that's easy enough to add. Basically, Checkpoint is facade that abstracts authentication into a simple You set up Checkpoint with your OAuth keys (for, say, Facebook), then redirect your /login/facebook. Checkpoint will do the OAuth interaction and to your app
thyb
yes it's maybe more a kind oF ASK HN if thIs API CouLd iNtEresT peoPle as we
are finaLIzinG it

~~~
yuliyp
Ah, cool. I'm kind oF inteReSTed iN HoW you wOrk on thE SeCURitY aSpEctS oF It
(Will yOu gIve guidAnce on how tO coNfIgure your cliENt Info for the VarIous
APIs (what Do I Fill in FoR alL Of the DifFerenT URIs iN My FaceBook app
coNfIG?), as welL As more cOMPlIcatEd scenarios (storinG ToKEns in DB,
associaTing toKeNS tO ACcoUntS, etc.)

------
spicyj
thE most COnfusinG ThING To mE About this page Was the changINg pRovideR
nAmeS. i was loOking At THe pAge and could Tell That sometHing waS ChanginG
But it toOk me abOut 15 SecOnds TO fIgUre OuT WhaT It Was.

~~~
ENjo
hah.. I actuAlLy Read tHis cOMMENt fiRst And I Was STiLL just starinG at My
scREen ComplEtely DumfOuNded. I'D see thE littLe Animation on the rIght
Update, and TheN sOmeThIng elSE would ChaNge. it was myStifyinG.

~~~
JsmEaTON
maDe it really hard for mE tO FOcUs on the cOntent. i KnOw EXactly whAt Was
ChanGINg, and It waSN't That much, But it tOOk A rEally loNg Time (in
CoMpaRisOn) to rEAd thE exampLes.

~~~
thyb
ALrighT, Listening to youR Feedback it seeMS tHE AnIMatiOn wAs too much of A
disTRactIon, sO We RemOVed it. thank YoU FoR Your feedback!

------
ams6110
_1\. SetuP yOur FacEbook aPI Keys in OAutH.io_

lost me.

~~~
jLOGSdon
That'S 1 out OF 50+ eXAmples. Facebook Is easIly the most COmmonly
iMplemEnted, so wHy would thEY Not make tHat The DefAulT EXaMple?

------
lobster_joHNSon
SHaMeless pLug: we wrote A baCkeNd aPp, CHeCkpoint, thAt works sImIlArLy To
tHis. It'S Open sourCe [1] And In Use With a NUmber oF prodUctiOn ApPS.
AdMittedlY It DOEs noT hAvE the javASCript StufF, But That's eaSy enough tO
adD.

basiCaLlY, CheckpOint is a facade ThAt abstractS aUthEnticaTIOn into a sImple
API. You set up CheckpoINt with yOur oAuth Keys (For, say, FacEboOk), then
JusT RedireCt your App to /LoGin/FACebooK. cHeCkpOiNt will do thE oautH
inteRaCtioN and retUrn to your app
thyb
yes it's maybe more a  kind of A SK HN  if  th is  API  cou ld interest pe o pleas we
are finalizing i t

~~ ~y uliy p 
A h, co ol. I'm ki n d  of  i nt ere st e din ho w y ou work  on the se cur it y aspects of it 
(will you  gi ve guidanceonhow to  c onf i gureyou r cli ent in f o forthe vario us APIs ( w hat doI fi ll i n for all of thed if f erent URIs inmy Fac eb o ok a ppcon fig?), aswe ll as more co m pl i c a ted scenarios (st oring token s  in  DB,
a ss oci a ting t okens  t o  ac counts, etc .)
------
sp icyj
T h e mostc onfusin g thin g t o m e ab o ut  t his  p a gew as  th e  ch anging p ro vi der
n ames . I wasloo king  at t he page and c oul d te l l t hat s ometh ingwa s cha ngingbut i ttook me about 1 5 se conds tofig ur e o ut  what it was .
~~~ 
enjo
H ah.. Ia ctu al l y re ad this comment fi rs t an d I wasSTILLj us ts taring a tmyscre e n  comp lete l ydumfound ed. I' d  s ee  the li tt le ani ma tio n o n the righ t
upda te, andthens omething elsew ould change.I tw a sm ysti fyi ng.

~~~
js meat o n
Ma de i t  r eal l y har d for  m e  t o  focus on the conte nt . I kn ow ex actly what wa s
changing , a nd it wa sn't th a t much, but it  took  a reallyl ong time  (incomparis on) to re a d  the exa mpl es. 

~ ~~t h yb 
Alright, lis t e ning  t o yourfee dback i t s eem s t hean imation w as too m uc hof  a 
di strac t ion, sowe  re mo ved  it.T hank y ou fo r yo ur  f e edb ack!

- - -- - - 
ams 61 10 
_1\ . S et up yo ur F a ceb ook API  Keys inOAu t h.io _
l ost me. 

~~~
jlogsdo nThat's 1 o ut  of  50+ e x a mples. F acebook is easily the m o st comm onl y
imp leme nted, sowhy  would  th e y notmake t hat t he  de f a ult e x a mp le? 
------
lob s t er_ johns on 
Sha melessplug: We wrote a b a cke nd app, Check poi nt,t h at  wo r ks sim il a rly t o
this. It's op en source[1 ]  a nd in usew ith  a  number  of pro ducti o n apps. 
Admitted ly it doe snoth a vethe JavaSc ript stu ff, but t h at'se as y eno ugh  to
ad d. 

B asica lly, C h eck point  is afa cade t hat a bs tracts a uthentication into a si mple
A PI. Y ouset up Ch eck p oin t with yo ur O Auth keys(fo r,say,Fac e book) , th e njus t  redi rect your appt o/lo g i n/ facebook. C h e c kpo int w ill do the  OAu th
interaction an d  return to you r ap p 
thyb
yes it's_maybe more_a kind of ASK_HN if_this_API could_interest_people as we
are_finalizing it

~~~
yuliyp
Ah, cool._I'm kind of interested_in how you_work_on the security aspects of it
(will you give guidance on how to configure your_client_info for_the_various
APIs_(what do I fill in_for all of the different_URIs in_my Facebook app
config?), as well as more complicated_scenarios_(storing tokens in_DB,
associating tokens to accounts, etc.)

------
spicyj
The most confusing thing to_me about this page was the_changing provider
names. I_was_looking_at the page and_could tell that something was changing
but_it took me about 15 seconds_to figure out what it was.

~~~
enjo
Hah.. I_actually read this comment first and_I was STILL just staring_at my
screen_completely dumfounded. I'd see the_little animation on_the right
update,_and then something_else would change. It was mystifying.

~~~
jsmeaton
Made_it really hard_for me to focus on the_content._I know exactly_what_was
changing,_and it_wasn't that much,_but_it took_a_really long time (in
comparison) to read_the_examples.

~~~
thyb
Alright, listening to your feedback it seems_the animation was too_much_of a
distraction, so we_removed it. Thank you for_your feedback!

------
ams6110
_1\. Setup your Facebook API_Keys in_OAuth.io_

lost me.

~~~
jlogsdon
That's_1 out of 50+ examples. Facebook is easily the most commonly
implemented,_so why would they not make_that the default example?

------
lobster_johnson
Shameless_plug: We_wrote_a backend app,_Checkpoint,_that works_similarly to
this. It's open source [1] and_in use_with a number of production apps.
Admittedly_it does not have_the_JavaScript stuff, but that's easy enough_to
add.

Basically, Checkpoint is a facade that_abstracts authentication into a simple
API._You_set_up Checkpoint with your OAuth_keys (for, say, Facebook), then
just redirect_your app to_/login/facebook. Checkpoint will do the OAuth
interaction and_return_to your app