OAuth 1.0 is deprecated!
Was ist OAuth?
Für Entwickler von Endanwendungen ist OAuth eine Methode, um unter Einbeziehung geschützter Daten zu arbeiten. Für Entwickler von Diensten bietet OAuth den Benutzern Zugriff auf deren Daten, während die Account Credentials geschützt bleiben. Mit anderen Worten, OAuth erlaubt einem Benutzer einer Website (die des Dienstanbieters) Zugriff auf seine Informationen auf einer anderen Website zu erlauben, ohne alle Details seiner Identität preiszugeben.
(
http://de.wikipedia.org/wiki/OAuth)
What is OAuth?
OAuth is an open protocol that allows users to share their private resources (e.g. photos, videos, contact lists) stored on one site with another site without having to hand out their username and password.
OAuth allows users to hand out tokens instead of usernames and passwords to their data hosted by a given service provider.
Thus OAuth allows a user to grant a third party site access to their information stored with another service provider, without sharing their access permissions or the full extent of their data.
(
http://en.wikipedia.org/wiki/OAuth)
Since it would be a bad idea for every 3rd-party site or application to ask for your xREL login data, xREL uses OAuth for this.
For application developers who wish to interface their applications with xREL this means that all they have to do is use an OAuth library, fill in their consumer key and secret, and the xREL URL endpoints, and their users can log in with xREL
For a desktop application that wants to provide users with functions specific to their xREL account, the login/authorization flow with OAuth looks like this:
Desktop App Auth Flow
For a website that wants to provide users with information specific to data from their xREL account, or that wants to allow users to log in using their xREL log in data instead of having to create a new account, the login flow will look like this:
Website Auth Flow
Zuletzt aktualisiert: 15. Apr. 2016, 18:26 Uhr.
