Oauth2 - Redigeerimiste ajalugu

Kaupo: /* Standard Booksi ja Oauth 2 testimine "Google OAuth 2.0 playground" keskkonnaga. */

2021-08-19T12:16:27Z

Standard Booksi ja Oauth 2 testimine "Google OAuth 2.0 playground" keskkonnaga.

←Vanem redaktsioon		Redaktsioon: 19. august 2021, kell 12:16
12. rida:		12. rida:
	===Standard Booksi ja Oauth 2 testimine "Google OAuth 2.0 playground" keskkonnaga.===		===Standard Booksi ja Oauth 2 testimine "Google OAuth 2.0 playground" keskkonnaga.===

	#Palun tee endale Google Developeri konto. Ja veendu, et ~~saasisse~~ logitud <code><nowiki>https://developers.google.com/</nowiki></code>		#Kui veel ei ole, loo Standard Booksis, vajalikus ettevõttes kasutaja valideeritud emailiaadressiga. See emailiaadress ja emaili lingi abil loodud parool ongi ligipääs MyStandard kontole. NB: See ei peaks olema adminni konto! Selle konto õigused Booksis saavad olema ka andmete pärija õigused. On soovitatav luua API kasutajale eraldi konto, eraldi emailiaadressiga.
	#Palun ~~mine~~ Mystandardisse ja loo developer credentials (selle tulemuena luuakse hiljem vajalikud "Client ID" ja "Client Secret"). Loomisel kasuta endale sobilikku kirjeldust ja ''Allowed Redirect''siks pane <code><nowiki>https://developers.google.com/oauthplayground</nowiki></code>. [[Fail:Mystandard Setting.png\|raamita\|785x785px]]		#Palun tee endale (võib olla tavalise Google kontoga seotud) Google Developeri konto. Ja veendu, et saad sisse logitud <code><nowiki>https://developers.google.com/</nowiki></code>
			#Palun logi Mystandardisse korrektse kontoga ja loo developer credentials (selle tulemuena luuakse hiljem vajalikud "Client ID" ja "Client Secret"). Loomisel kasuta endale sobilikku kirjeldust ja ''Allowed Redirect''siks pane <code><nowiki>https://developers.google.com/oauthplayground</nowiki></code>. [[Fail:Mystandard Setting.png\|raamita\|785x785px]]
	#Mine lehele <code>https://developers.google.com/oauthplayground/</code>		#Mine lehele <code>https://developers.google.com/oauthplayground/</code>
	#Vajut aOAuth 2.0 seadistuse nupule, nö hammasratas.		#Vajut aOAuth 2.0 seadistuse nupule, nö hammasratas.

Kaupo – 1. aprill 2021, kell 10:12

2021-04-01T10:12:31Z

←Vanem redaktsioon		Redaktsioon: 1. aprill 2021, kell 10:12
7. rida:		7. rida:

	Oauthi testimiseks ja kasutamiseks meil vaja tarkvara ja keskkonda, mis on ligi pääsetav veebist. Seega me ei saa (enamasti) kasutada rakendust enda arvutis. Sest meie arvutid ei ole enamasti ligipääsetavad otse veebist.		Oauthi testimiseks ja kasutamiseks meil vaja tarkvara ja keskkonda, mis on ligi pääsetav veebist. Seega me ei saa (enamasti) kasutada rakendust enda arvutis. Sest meie arvutid ei ole enamasti ligipääsetavad otse veebist.

			Olulisim punkt Standard Booksi võtmes, mis puudutab Oauth kasutamist: Kui kasutaja tuvastamine toimub Oauth2, siis on serveris API päringuid teenindad thread mitte-primaarne. St suured API päringud ei sega teiste kasutajate tööd.

	===Standard Booksi ja Oauth 2 testimine "Google OAuth 2.0 playground" keskkonnaga.===		===Standard Booksi ja Oauth 2 testimine "Google OAuth 2.0 playground" keskkonnaga.===

Kaupo – 1. aprill 2021, kell 08:49

2021-04-01T08:49:14Z

←Vanem redaktsioon		Redaktsioon: 1. aprill 2021, kell 08:49
8. rida:		8. rida:
	Oauthi testimiseks ja kasutamiseks meil vaja tarkvara ja keskkonda, mis on ligi pääsetav veebist. Seega me ei saa (enamasti) kasutada rakendust enda arvutis. Sest meie arvutid ei ole enamasti ligipääsetavad otse veebist.		Oauthi testimiseks ja kasutamiseks meil vaja tarkvara ja keskkonda, mis on ligi pääsetav veebist. Seega me ei saa (enamasti) kasutada rakendust enda arvutis. Sest meie arvutid ei ole enamasti ligipääsetavad otse veebist.

	=== Standard Booksi ja Oauth 2 testimine "Google OAuth 2.0 playground" keskkonnaga. ===		===Standard Booksi ja Oauth 2 testimine "Google OAuth 2.0 playground" keskkonnaga.===

	# Palun tee endale Google Developeri konto. Ja veendu, et saasisse logitud <code><nowiki>https://developers.google.com/</nowiki></code>		#Palun tee endale Google Developeri konto. Ja veendu, et saasisse logitud <code><nowiki>https://developers.google.com/</nowiki></code>
	# Palun mine Mystandardisse ja loo developer credentials (selle tulemuena luuakse hiljem vajalikud "Client ID" ja "Client Secret"). Loomisel kasuta endale sobilikku kirjeldust ja ''Allowed Redirect''siks pane <code><nowiki>https://developers.google.com/oauthplayground</nowiki></code>. [[Fail:Mystandard Setting.png\|raamita\|785x785px]]		#Palun mine Mystandardisse ja loo developer credentials (selle tulemuena luuakse hiljem vajalikud "Client ID" ja "Client Secret"). Loomisel kasuta endale sobilikku kirjeldust ja ''Allowed Redirect''siks pane <code><nowiki>https://developers.google.com/oauthplayground</nowiki></code>. [[Fail:Mystandard Setting.png\|raamita\|785x785px]]
	# Mine lehele <code>https://developers.google.com/oauthplayground/</code>		#Mine lehele <code>https://developers.google.com/oauthplayground/</code>
	# Vajut aOAuth 2.0 seadistuse nupule, nö hammasratas.		#Vajut aOAuth 2.0 seadistuse nupule, nö hammasratas.
	#Muuda seadistus järgmiselt		#Muuda seadistus järgmiselt
	##OAuth Endpoints: Custom		##OAuth Endpoints: Custom
20. rida:		20. rida:
	##OAuth Client ID: Client ID from MyStandard page		##OAuth Client ID: Client ID from MyStandard page
	##OAuth Client Secret: Client Secret from MyStandard page. [[Fail:Google lehe setting.png\|raamita\|385x385px]]		##OAuth Client Secret: Client Secret from MyStandard page. [[Fail:Google lehe setting.png\|raamita\|385x385px]]
	#Vasakul lehe servas tuleb valida / kirjeldada teenust , mida me autoriseerida soovime. Meie teenust seal kirjeldatud pole. Seega sisestage ''"Input your own scopes"'' lahtrisse mingi suvaline vabatekst ja vajutage ''"Authorize APIs"''		#Vasakul lehe servas tuleb valida / kirjeldada teenust , mida me autoriseerida soovime. Meie teenust seal kirjeldatud pole. Seega sisestage ''"Input your own scopes"'' lahtrisse mingi suvaline vabatekst ja vajutage ''"Authorize APIs"''
	#Kui kõik seadistused on korrektsed, suunatakse teid Mystandard sisselogimislehele. Seal peate sisestama oma kasutajanime ja parooli.		#Kui kõik seadistused on korrektsed, suunatakse teid Mystandard sisselogimislehele. Seal peate sisestama oma kasutajanime ja parooli.
	#Kui teie tuvastamine õnnestus, suunatakse teid tagasi ''google playgroundi.''		#Kui teie tuvastamine õnnestus, suunatakse teid tagasi ''google playgroundi.''
	#Siis on teil valik: ''"Exchange authorization code for tokens"'' - vajutage seda nuppu. Selle peale küsib Googe Palyground Mystandard serverit tokenid, millda kasutatakse päringute tegemisel.		#Siis on teil valik: ''"Exchange authorization code for tokens"'' - vajutage seda nuppu. Selle peale küsib Googe Palyground Mystandard serverit tokenid, millda kasutatakse päringute tegemisel.
	#Nüüd peate sisestama päringu URLi. Palun tehke seda (Näiteks: <code><nowiki>https://books392.excellent.ee:1234/api/1/CUVc</nowiki></code> ). NB: Kui kasutate HTTPSi, siis peab teil olema ka kehtiv, mitte ''self-signed'' sertifikaat! Google Playground ei võimalda vigasest SSL sertifikaadist tekkinud erroreid supressida.		#Nüüd peate sisestama päringu URLi. Palun tehke seda (Näiteks: <code><nowiki>https://books392.excellent.ee:1234/api/1/CUVc</nowiki></code> ). NB: Kui kasutate HTTPSi, siis peab teil olema ka kehtiv, mitte ''self-signed'' sertifikaat! Google Playground ei võimalda vigasest SSL sertifikaadist tekkinud erroreid supressida.
	#Vajuta ''"Send the request",'' paremale aknasse ilmub päringu vastus.		#Vajuta ''"Send the request",'' paremale aknasse ilmub päringu vastus.




	* Goto page <code>https://developers.google.com/oauthplayground/</code>
	* Click on OAuth 2.0 Configuration button
	*Change the folling settings
	*#OAuth Endpoints: Custom
	*#Authorization endpoint: <code><nowiki>https://standard-id.hansaworld.com/oauth-authorize</nowiki></code>
	*#Token endpoint: <code><nowiki>https://standard-id.hansaworld.com/oauth-token</nowiki></code>
	*#OAuth Client ID: Client ID from MyStandard page
	*#OAuth Client Secret: Client Secret from MyStandard page.
	*On left size you need to specify the scope that you want to authorize for. For HW Rest API there is no scope to specify so you can write anything in free text and click button "Authorize APIs
	*If everything was fine with the request you will be redirected to StandardID website to authorize for the application
	*After that you will be redirected back to google's playground
	*Then you will be give option to "Exchange authorization code for tokens" - click the button. This will ask StandardID server for tokens that will be used for making API request
	*Now you will be asked to specify request URL - specify your servers url with fill Rest API path. IMPORTANT - from this website the URL needs to have valid certificates. You can't put expired or invalid certificates on the server and there is no way how to go around this (at least I couldn't find - i have a server for testing with url <code><nowiki>https://restapi.hansaworld.com:1098</nowiki></code>). Full URL would look like this <code><nowiki>https://restapiserver.excellent.ee:1098/api/1/CUVc</nowiki></code>
	*Click button "Send the request" - this will make the call to your server and return the data.

Kaupo – 1. aprill 2021, kell 08:48

2021-04-01T08:48:36Z

←Vanem redaktsioon		Redaktsioon: 1. aprill 2021, kell 08:48
1. rida:		1. rida:
	~~OAuth Testing Tool with Google OAuth~~ 2.0 ~~playground~~		Oauth 2.0 on kasutaja tuvastamise süsteem, kus kasutaja konto infot (kasutajanime, parooli, nõudeid paroolile, kontaktinfot jne) ei halda mitte teenusserver (''Recource server'', Meie puhul '''Standard Booksi''' server) vaid väline server (''Authorizaton server'', Meie puhul '''Mystandard''' keskkond).

	~~You can create developer credentials before visiting the website. Use "<nowiki>https://developers.google.com/oauthplayground</nowiki>" as allowed redirect url~~.		Lihtne ülevaade andmevahetusest, mis toimub, kui kasutada Oauth 2 kasutaja tuvastamist.

	#~~Goto page~~ <code>https://developers.google.com/oauthplayground/</code>		[[Fail:How Oauth 2.0 Works.png\|raamita\|561x561px]]
	#~~Click on OAuth~~ 2.0 ~~Configuration button~~
	#~~Change the folling settings~~
			Oauthi testimiseks ja kasutamiseks meil vaja tarkvara ja keskkonda, mis on ligi pääsetav veebist. Seega me ei saa (enamasti) kasutada rakendust enda arvutis. Sest meie arvutid ei ole enamasti ligipääsetavad otse veebist.

			=== Standard Booksi ja Oauth 2 testimine "Google OAuth 2.0 playground" keskkonnaga. ===

			# Palun tee endale Google Developeri konto. Ja veendu, et saasisse logitud <code><nowiki>https://developers.google.com/</nowiki></code>
			# Palun mine Mystandardisse ja loo developer credentials (selle tulemuena luuakse hiljem vajalikud "Client ID" ja "Client Secret"). Loomisel kasuta endale sobilikku kirjeldust ja ''Allowed Redirect''siks pane <code><nowiki>https://developers.google.com/oauthplayground</nowiki></code>. [[Fail:Mystandard Setting.png\|raamita\|785x785px]]
			# Mine lehele <code>https://developers.google.com/oauthplayground/</code>
			# Vajut aOAuth 2.0 seadistuse nupule, nö hammasratas.
			#Muuda seadistus järgmiselt
	##OAuth Endpoints: Custom		##OAuth Endpoints: Custom
	##Authorization endpoint: <code><nowiki>https://standard-id.hansaworld.com/oauth-authorize</nowiki></code>		##Authorization endpoint: <code><nowiki>https://standard-id.hansaworld.com/oauth-authorize</nowiki></code>
	##Token endpoint: <code><nowiki>https://standard-id.hansaworld.com/oauth-token</nowiki></code>		##Token endpoint: <code><nowiki>https://standard-id.hansaworld.com/oauth-token</nowiki></code>
	##OAuth Client ID: Client ID from MyStandard page		##OAuth Client ID: Client ID from MyStandard page
	##OAuth Client Secret: Client Secret from MyStandard page.		##OAuth Client Secret: Client Secret from MyStandard page. [[Fail:Google lehe setting.png\|raamita\|385x385px]]
	#On left size you need to specify the scope that you want to authorize for. For HW Rest API there is no scope to specify so you can write anything in free text and click button "Authorize APIs		#Vasakul lehe servas tuleb valida / kirjeldada teenust , mida me autoriseerida soovime. Meie teenust seal kirjeldatud pole. Seega sisestage ''"Input your own scopes"'' lahtrisse mingi suvaline vabatekst ja vajutage ''"Authorize APIs"''
	#If everything was fine with the request you will be redirected to StandardID website to authorize for the application		#Kui kõik seadistused on korrektsed, suunatakse teid Mystandard sisselogimislehele. Seal peate sisestama oma kasutajanime ja parooli.
	#After that you will be redirected back to google's playground		#Kui teie tuvastamine õnnestus, suunatakse teid tagasi ''google playgroundi.''
	#Then you will be give option to "Exchange authorization code for tokens" - click the button. This will ask StandardID server for tokens that will be used for making API request		#Siis on teil valik: ''"Exchange authorization code for tokens"'' - vajutage seda nuppu. Selle peale küsib Googe Palyground Mystandard serverit tokenid, millda kasutatakse päringute tegemisel.
	#Now you will be asked to specify request URL - specify your servers url with fill Rest API path. IMPORTANT - from this website the URL needs to have valid certificates. You can't put expired or invalid certificates on the server and there is no way how to go around this (at least I couldn't find - i have a server for testing with url <code><nowiki>https://restapi.hansaworld.com:1098</nowiki></code>). Full URL would look like this <code><nowiki>https://restapiserver.excellent.ee:1098/api/1/CUVc</nowiki></code>		#Nüüd peate sisestama päringu URLi. Palun tehke seda (Näiteks: <code><nowiki>https://books392.excellent.ee:1234/api/1/CUVc</nowiki></code> ). NB: Kui kasutate HTTPSi, siis peab teil olema ka kehtiv, mitte ''self-signed'' sertifikaat! Google Playground ei võimalda vigasest SSL sertifikaadist tekkinud erroreid supressida.
	#Click button "Send the request" - this will make the call to your server and return the data.		#Vajuta ''"Send the request",'' paremale aknasse ilmub päringu vastus.




			* Goto page <code>https://developers.google.com/oauthplayground/</code>
			* Click on OAuth 2.0 Configuration button
			*Change the folling settings
			*#OAuth Endpoints: Custom
			*#Authorization endpoint: <code><nowiki>https://standard-id.hansaworld.com/oauth-authorize</nowiki></code>
			*#Token endpoint: <code><nowiki>https://standard-id.hansaworld.com/oauth-token</nowiki></code>
			*#OAuth Client ID: Client ID from MyStandard page
			*#OAuth Client Secret: Client Secret from MyStandard page.
			*On left size you need to specify the scope that you want to authorize for. For HW Rest API there is no scope to specify so you can write anything in free text and click button "Authorize APIs
			*If everything was fine with the request you will be redirected to StandardID website to authorize for the application
			*After that you will be redirected back to google's playground
			*Then you will be give option to "Exchange authorization code for tokens" - click the button. This will ask StandardID server for tokens that will be used for making API request
			*Now you will be asked to specify request URL - specify your servers url with fill Rest API path. IMPORTANT - from this website the URL needs to have valid certificates. You can't put expired or invalid certificates on the server and there is no way how to go around this (at least I couldn't find - i have a server for testing with url <code><nowiki>https://restapi.hansaworld.com:1098</nowiki></code>). Full URL would look like this <code><nowiki>https://restapiserver.excellent.ee:1098/api/1/CUVc</nowiki></code>
			*Click button "Send the request" - this will make the call to your server and return the data.

Kaupo – 25. märts 2021, kell 15:03

2021-03-25T15:03:03Z

Kaupo: Uus lehekülg: 'OAuth Testing Tool with Google OAuth 2.0 playground You can create developer credentials before visiting the website. Use "https://developers.google.com/oauthplayground<...'

2021-03-25T15:01:52Z

Uus lehekülg: 'OAuth Testing Tool with Google OAuth 2.0 playground You can create developer credentials before visiting the website. Use "<nowiki>https://developers.google.com/oauthplayground<...'

Uus lehekülg

OAuth Testing Tool with Google OAuth 2.0 playground

You can create developer credentials before visiting the website. Use "<nowiki>https://developers.google.com/oauthplayground</nowiki>" as allowed redirect url.

# Goto page <code>https://developers.google.com/oauthplayground/</code>
# Click on OAuth 2.0 Configuration button
# Change the folling settings
## OAuth Endpoints: Custom
## Authorization endpoint: <code><nowiki>https://standard-id.hansaworld.com/oauth-authorize</nowiki></code>
## Token endpoint: <code><nowiki>https://standard-id.hansaworld.com/oauth-token</nowiki></code>
## OAuth Client ID: Client ID from MyStandard page
## OAuth Client Secret: Client Secret from MyStandard page.
# On left size you need to specify the scope that you want to authorize for. For HW Rest API there is no scope to specify so you can write anything in free text and click button "Authorize APIs
# If everything was fine with the request you will be redirected to StandardID website to authorize for the application
# After that you will be redirected back to google's playground
# Then you will be give option to "Exchange authorization code for tokens" - click the button. This will ask StandardID server for tokens that will be used for making API request
# Now you will be asked to specify request URL - specify your servers url with fill Rest API path. IMPORTANT - from this website the URL needs to have valid certificates. You can't put expired or invalid certificates on the server and there is no way how to go around this (at least I couldn't find - i have a server for testing with url <code><nowiki>https://restapi.hansaworld.com:1098</nowiki></code>). Full URL would look like this <code><nowiki>https://restapiserver.excellent.ee:1098/api/1/CUVc</nowiki></code>
# Click button "Send the request" - this will make the call to your server and return the data.

←Vanem redaktsioon		Redaktsioon: 25. märts 2021, kell 15:03
3. rida:		3. rida:
	You can create developer credentials before visiting the website. Use "<nowiki>https://developers.google.com/oauthplayground</nowiki>" as allowed redirect url.		You can create developer credentials before visiting the website. Use "<nowiki>https://developers.google.com/oauthplayground</nowiki>" as allowed redirect url.

	# Goto page <code>https://developers.google.com/oauthplayground/</code>		#Goto page <code>https://developers.google.com/oauthplayground/</code>
	# Click on OAuth 2.0 Configuration button		#Click on OAuth 2.0 Configuration button
	# Change the folling settings		#Change the folling settings
	## OAuth Endpoints: Custom		##OAuth Endpoints: Custom
	## Authorization endpoint: <code><nowiki>https://standard-id.hansaworld.com/oauth-authorize</nowiki></code>		##Authorization endpoint: <code><nowiki>https://standard-id.hansaworld.com/oauth-authorize</nowiki></code>
	## Token endpoint: <code><nowiki>https://standard-id.hansaworld.com/oauth-token</nowiki></code>		##Token endpoint: <code><nowiki>https://standard-id.hansaworld.com/oauth-token</nowiki></code>
	## OAuth Client ID: Client ID from MyStandard page		##OAuth Client ID: Client ID from MyStandard page
	## OAuth Client Secret: Client Secret from MyStandard page.		##OAuth Client Secret: Client Secret from MyStandard page.
	# On left size you need to specify the scope that you want to authorize for. For HW Rest API there is no scope to specify so you can write anything in free text and click button "Authorize APIs		#On left size you need to specify the scope that you want to authorize for. For HW Rest API there is no scope to specify so you can write anything in free text and click button "Authorize APIs
	# If everything was fine with the request you will be redirected to StandardID website to authorize for the application		#If everything was fine with the request you will be redirected to StandardID website to authorize for the application
	# After that you will be redirected back to google's playground		#After that you will be redirected back to google's playground
	# Then you will be give option to "Exchange authorization code for tokens" - click the button. This will ask StandardID server for tokens that will be used for making API request		#Then you will be give option to "Exchange authorization code for tokens" - click the button. This will ask StandardID server for tokens that will be used for making API request
	# Now you will be asked to specify request URL - specify your servers url with fill Rest API path. IMPORTANT - from this website the URL needs to have valid certificates. You can't put expired or invalid certificates on the server and there is no way how to go around this (at least I couldn't find - i have a server for testing with url <code><nowiki>https://restapi.hansaworld.com:1098</nowiki></code>). Full URL would look like this <code><nowiki>https://restapiserver.excellent.ee:1098/api/1/CUVc</nowiki></code>		#Now you will be asked to specify request URL - specify your servers url with fill Rest API path. IMPORTANT - from this website the URL needs to have valid certificates. You can't put expired or invalid certificates on the server and there is no way how to go around this (at least I couldn't find - i have a server for testing with url <code><nowiki>https://restapi.hansaworld.com:1098</nowiki></code>). Full URL would look like this <code><nowiki>https://restapiserver.excellent.ee:1098/api/1/CUVc</nowiki></code>
	# Click button "Send the request" - this will make the call to your server and return the data.		#Click button "Send the request" - this will make the call to your server and return the data.