3 ms·

to be honest I am currently lost on the state of oauth in python, has sth changed since this post http://pydanny.com/the-sorry-state-of-python-oauth-providers.h

by zalew 14y ago

to be honest I am currently lost on the state of oauth in python, has sth changed since this post http://pydanny.com/the-sorry-state-of-python-oauth-providers.html http://pydanny.com/the-sorry-state-of-python-oauth-providers...? as OP is a client lib, could somebody with practical experience tell me what's the current best library for setting up an oauth provider? bonus question: should I bother with 2.0 or stick to 1.0 (3rd party apps and mobile) http://hueniverse.com/2012/07/oauth-2-0-and-the-road-to-hell/ http://hueniverse.com/2012/07/oauth-2-0-and-the-road-to-hell... ?

peter_l_downs 14y ago
Not much has changed. I'm currently working to open source an implementation I worked on that's compliant with the finalized version of the spec. The most up-to-date implementation I've seen in the open is https://github.com/hiidef/oauth2app https://github.com/hiidef/oauth2app, which implements draft 16.
- zalew 14y ago
  thanks, looks sane.
marquis 14y ago
https://github.com/hasgeek/lastuser https://github.com/hasgeek/lastuser was the least painless method in my experience but I never tried any non-lastuser clients with it so I can't comment on library compatibility.
- zalew 14y ago
  it doesn't have any docs and even from the page I have no idea what it actually does, it doesn't look like an oauth provider (?)
  - marquis 14y ago
    It implements oauth 2.0 draft 16. http://www.slideshare.net/jace/user-management-with-lastuser http://www.slideshare.net/jace/user-management-with-lastuser It's not complicated to break down the UI as you need it.
    - jace 14y ago
      I've moved up to draft 22. The OAuth2 spec is now final, but I haven't been keeping track of what's changed. The final revisions seemed to be all around SAML.
      - marquis 14y ago
        Serious thanks for releasing this - it's been great to work with and really enjoyable to use as an entire platform for auth. We integrated it with our own openID service but great to have the functionality there if we want to open it to other sign-ons. Are you expecting any major changes once OAuth2 is final?

by zalew 14y ago

peter_l_downs 14y ago

Not much has changed. I'm currently working to open source an implementation I worked on that's compliant with the finalized version of the spec. The most up-to-date implementation I've seen in the open is https://github.com/hiidef/oauth2app https://github.com/hiidef/oauth2app, which implements draft 16.

zalew 14y ago
thanks, looks sane.

marquis 14y ago

https://github.com/hasgeek/lastuser https://github.com/hasgeek/lastuser was the least painless method in my experience but I never tried any non-lastuser clients with it so I can't comment on library compatibility.

zalew 14y ago
it doesn't have any docs and even from the page I have no idea what it actually does, it doesn't look like an oauth provider (?)
- marquis 14y ago
  It implements oauth 2.0 draft 16. http://www.slideshare.net/jace/user-management-with-lastuser http://www.slideshare.net/jace/user-management-with-lastuser It's not complicated to break down the UI as you need it.
  - jace 14y ago
    I've moved up to draft 22. The OAuth2 spec is now final, but I haven't been keeping track of what's changed. The final revisions seemed to be all around SAML.
    - marquis 14y ago
      Serious thanks for releasing this - it's been great to work with and really enjoyable to use as an entire platform for auth. We integrated it with our own openID service but great to have the functionality there if we want to open it to other sign-ons. Are you expecting any major changes once OAuth2 is final?