17.4.7.OAuth QA

MySpace Tools

In order to use the MySpace OAuth Testing Tool :

  1. Need to have registered myspace account.

  2. Need to apply to build apps on the MySpace Developer Platform.

Google Tools

Google's OAuth playground tool can be tried here .

Register your domain in Google

In order to use the tool, you need to register the web application as domain:

  1. Login at your gmail account

  2. Go to https://www.google.com/accounts/ManageDomains

  3. Enter in the field for ex. the QA server ec2-67-202-42-146.compute-1.amazonaws.com and click the "Add Domain" button.

    Note: for now registered domains cannot be deleted (not supported from the Google UI)

  4. As result the domain will be created and the manage domain page will be opened. Here you need to verify you have admin privileges by choosing verification method

  5. Choose "Upload an HTML file" and follow further the instructions.

  6. Once the file is put in the correct server root, you should get the confirmation page:

    Figure17.43.Google OAuth

    Google OAuth

  7. Click the "Agree .." buttons.

  8. As result will be additional setting page you need to change. Type in for "Target URL path prefix:": http://ec2-67-202-42-146.compute-1.amazonaws.com/ods

    Figure17.44.Google OAuth

    Google OAuth

  9. Click the "Save" button.

  10. As result will be shown the generated OAuth Consumer Secret for the OAuth Consumer Key: ec2-67-202-42-146.compute-1.amazonaws.com:

    OAuth Consumer Key:      ec2-67-202-42-146.compute-1.amazonaws.com
    OAuth Consumer Secret:  uEkfBvpMhTTT/VyFItEnEYt4
  11. Also will be shown "test" link "Test your AuthSub registration here". Click it.

  12. As result will be opened new window with OAuth request

  13. Click the "Grant Access" button.

    Figure17.45.Google OAuth

    Google OAuth

  14. As result will be redirected to http://ec2-67-202-42-146.compute-1.amazonaws.com/ods/

  15. Now lets return to our initial window and click there the button "Save".

  16. Note that already is shown for the domain that is "Active":

    Figure17.46.Google OAuth

    Google OAuth

The Playground Tool qa steps

Let's try the playground tool:

  1. Go to http://googlecodesamples.com/oauth_playground/

  2. Select Scope, for ex. check the check-box for "Blogger".

  3. Change oauth signature_method to HMAC-SHA1

  4. Enter for "oauth consumer_key": ec2-67-202-42-146.compute-1.amazonaws.com

  5. Enter for "consumer secret" the value generated from above.

  6. Click the "Request token" button.

  7. As result will get Response with Status Ok

    Figure17.47.Google OAuth

    Google OAuth

    • the Signature base string:

    • the Authorization header:

      Authorization: OAuth oauth_version="1.0",
    • the Response body:

      HTTP/1.1 200 OK
      Content-Type: text/plain; charset=UTF-8
      Date: Thu, 16 Oct 2008 21:17:37 GMT
      X-Content-Type-Options: nosniff
      Expires: Thu, 16 Oct 2008 21:17:37 GMT
      Cache-Control: private, max-age=0
      Content-Length: 76
      Server: GFE/1.3
  8. And also in the "Get the Token" section now will be active the "Authorize" button. Click it.

    Figure17.48.Google OAuth

    Google OAuth

  9. As result will be shown the authentication page where you need to click the "Grant Access" button:

    Figure17.49.Google OAuth

    Google OAuth

  10. As result now in the "Get the Token" section will be active the "Access token" button. Click it.

    Figure17.50.Google OAuth

    Google OAuth

  11. As result the access_token will be obtained:

    Figure17.51.Google OAuth

    Google OAuth

  12. Click the "available feeds" button marked as 6.

  13. As result in the "Response" body section will be shown:

  14. Copy the 1st URL and paste in the field after the method GET.

  15. Click "execute".

  16. As result will find your blogs, post, info at Blogger:

    Figure17.52.Google OAuth

    Google OAuth