This commit is contained in:
Bill Burke 2016-06-03 10:36:51 -04:00
parent 7f4ac37258
commit 87f784f6d1
8 changed files with 13 additions and 13 deletions

View file

@ -76,13 +76,13 @@ _direct access only_::
*Root URL* *Root URL*
If {{book.project.name}} uses any configured relative URLs, this value is prepended to them. If {{book.project.name}} uses any configured relative URLs, this value is prepended to them.
*Valid Redirect URIs* *Valid Redirect URIs*
This is a required field. Enter in a URL pattern and click the + sign to add. Click the - sign next to URLs you want to remove. This is a required field. Enter in a URL pattern and click the + sign to add. Click the - sign next to URLs you want to remove.
Remember that you still have to click the `Save` button! Remember that you still have to click the `Save` button!
Only wildcards, * ,are allowed at the end of of a URI, i.e. http://host.com/* Wildcards (*) are only allowed at the end of of a URI, i.e. http://host.com/*
You should take extra precautions when registering valid redirect URI patterns. If you make You should take extra precautions when registering valid redirect URI patterns. If you make
them too general you are vulnerable to attacks. See <<fake/../../threat/redirect.adoc#_unspecific-redirect-uris, Threat Model Mitigation>> chapter them too general you are vulnerable to attacks. See <<fake/../../threat/redirect.adoc#_unspecific-redirect-uris, Threat Model Mitigation>> chapter

View file

@ -99,7 +99,7 @@ Root URL::
Valid Redirect URIs:: Valid Redirect URIs::
This is an optional field. Enter in a URL pattern and click the + sign to add. Click the - sign next to URLs you want to remove. This is an optional field. Enter in a URL pattern and click the + sign to add. Click the - sign next to URLs you want to remove.
Remember that you still have to click the `Save` button! Remember that you still have to click the `Save` button!
Only wildcards, * ,are allowed at the end of of a URI, i.e. http://host.com/*. This field is used when the exact SAML Wildcards (*) are only allowed at the end of of a URI, i.e. http://host.com/*. This field is used when the exact SAML
endpoints are not registered and {{book.project.name}} is pull the Assertion Consumer URL from the request. endpoints are not registered and {{book.project.name}} is pull the Assertion Consumer URL from the request.
Base URL:: Base URL::

View file

@ -4,5 +4,5 @@
For Internet facing applications, it is quite burdensome for users to have to register at your site to obtain access. For Internet facing applications, it is quite burdensome for users to have to register at your site to obtain access.
It requires them to remember yet another username and password combination. Social identity providers allow you to delegate It requires them to remember yet another username and password combination. Social identity providers allow you to delegate
authentication to a semi-trusted and respected entity where the user probably already has an account. authentication to a semi-trusted and respected entity where the user probably already has an account.
{{book.project.name}} provides built-in support for the most common social networks out there, such as Google, Facebook, Twitter, Github, LinkedId, Microsoft and StackOverflow. {{book.project.name}} provides built-in support for the most common social networks out there, such as Google, Facebook, Twitter, Github, LinkedIn, Microsoft and StackOverflow.

View file

@ -34,7 +34,7 @@ for the application. Click the `Settings` left menu item.
.Create a New App ID .Create a New App ID
image:../../../images/facebook-app-settings.png[] image:../../../images/facebook-app-settings.png[]
Click on the `+ Add Platform` button at the end of this page and select the `Website` icon. Cut and past the `Redirect URI` from the Click on the `+ Add Platform` button at the end of this page and select the `Website` icon. Copy and paste the `Redirect URI` from the
{{book.project.name}} `Add identity provider` page into the `Site URL` of the Facebook `Website` settings block. {{book.project.name}} `Add identity provider` page into the `Site URL` of the Facebook `Website` settings block.
.Specify Website .Specify Website

View file

@ -38,7 +38,7 @@ and click the `Google+ API` link.
image:../../../images/google-api-list.png[] image:../../../images/google-api-list.png[]
Click the `Enable` button on this page. You will get a message that you must create the credentials of your project. Click the `Enable` button on this page. You will get a message that you must create the credentials of your project.
So click the `Go to Credentials` button So click the `Go to Credentials` button.
.Go To Credentials .Go To Credentials
image:../../../images/google-go-to-credentials.png[] image:../../../images/google-go-to-credentials.png[]
@ -59,7 +59,7 @@ Select `Web server` and `User data` and click the `What credentials do I need?`
image:../../../images/google-create-oauth-id.png[] image:../../../images/google-create-oauth-id.png[]
Next you'll need to create an OAuth 2.0 client ID. Specify the name you want for your client. You'll also need to Next you'll need to create an OAuth 2.0 client ID. Specify the name you want for your client. You'll also need to
cut and paste the `Redirect URI` from the {{book.project.name}} `Add Identity Provider` page into the copy and paste the `Redirect URI` from the {{book.project.name}} `Add Identity Provider` page into the
`Authorized redirect URIs` field. After you do this, click the `Create client ID` button. `Authorized redirect URIs` field. After you do this, click the `Create client ID` button.
When users log into Google from {{book.project.name}} they will see a consent screen from Google which will ask the user When users log into Google from {{book.project.name}} they will see a consent screen from Google which will ask the user
@ -78,5 +78,5 @@ Go back to {{book.project.name}} and specify those items.
One config option to note on the `Add identity provider` page for Google is the `Default Scopes` field. One config option to note on the `Add identity provider` page for Google is the `Default Scopes` field.
This field allows you to manually specify the scopes that users must authorize when authenticating with this provider. This field allows you to manually specify the scopes that users must authorize when authenticating with this provider.
For a complete list of scopes, please take a look at link:https://developers.google.com/oauthplayground/. By default, {{book.project.name}} For a complete list of scopes, please take a look at https://developers.google.com/oauthplayground/. By default, {{book.project.name}}
uses the following scopes: `openid` `profile` `email`. uses the following scopes: `openid` `profile` `email`.

View file

@ -25,13 +25,13 @@ Click on the `Create Application` button. This will bring you to the `Create a
.Create App .Create App
image:../../../images/linked-in-create-app.png[] image:../../../images/linked-in-create-app.png[]
Use any value for `Application Name`, `Website URL`, `Description`, `Developer Contact Email` and `Phone` you want. Use any value for `Company Name`, `Name`, `Description`, and `Application Use`.
Select `r_basicprofile` and `r_emailaddress` in the `Default Scope` section. Click the `Submit` button. This will bring you to the new application's settings page.
Click the `Add Application` button. This will bring you to the new application's settings page.
.App Settings .App Settings
image:../../../images/linked-in-app-settings.png[] image:../../../images/linked-in-app-settings.png[]
Select `r_basicprofile` and `r_emailaddress` in the `Default Application Permissions` section.
You'll have to copy the `Redirect URI` from the {{book.project.name}} `Add Identity Provider` page and enter it into the You'll have to copy the `Redirect URI` from the {{book.project.name}} `Add Identity Provider` page and enter it into the
`OAuth 2.0` `Authorized Redirect URLs` field on the LinkedIn app settings page. Don't forget to click `Update` button after `OAuth 2.0` `Authorized Redirect URLs` field on the LinkedIn app settings page. Don't forget to click `Update` button after
you do this! you do this!

View file

@ -16,7 +16,7 @@ NOTE: StackOverflow often changes the look and feel of application registration,
.Register Application .Register Application
image:../../../images/stack-overflow-app-register.png[] image:../../../images/stack-overflow-app-register.png[]
Enter in the application name and the dns domain name of your application and click `Register your Application`. Type in anything you want Enter in the application name and the OAuth Domain Name of your application and click `Register your Application`. Type in anything you want
for the other items. for the other items.
.Settings .Settings

View file

@ -11,7 +11,7 @@ You can't click save yet, as you'll need to obtain a `Client ID` and `Client Sec
page is the `Redirect URI`. You'll have to provide that to Twitter when you register {{book.project.name}} as a client there, so page is the `Redirect URI`. You'll have to provide that to Twitter when you register {{book.project.name}} as a client there, so
copy this URI to your clipboard. copy this URI to your clipboard.
To enable login with Twtter you first have to create an application in the https://dev.twitter.com/apps[Twitter Developer Console]. To enable login with Twtter you first have to create an application in the https://dev.twitter.com/apps[Twitter Application Management].
.Register Application .Register Application
image:../../../images/twitter-app-register.png[] image:../../../images/twitter-app-register.png[]