Implementing OAuth 2.0 Provider using Coldfusion - coldfusion

I need to implement the OAuth 2.0 Provider using Coldfusion. Do you know of any library I could use? Only thing I've found is this, but it's based on the Core 1.0 specification.
What are you thoughts on this? Maybe I should use the Java libraries? Any help will be appreciated.
Thanks,
Lucas

You could use a pre-existing Java provider implementation and use ColdFusion's cfinvoke/cfobject syntax to implement the provider in your ColdFusion application. The oAuth site maintains a list of server/provider implementations by language here. Using this sort of solution might even give you more flexibility in the long run if you have other Java apps that need to provide oAuth provider services.

There is this OAuth library from Harry Klein used in several ColdFusion projects involving OAuth 2.0 (IE. twitter clients) - http://oauth.riaforge.org/

To implement OpenID 2.0 Auth framework using ColdFusion go to this link and download "OpenID CFC" Library.
This is really a nice one to implement OpenID 2.0 using ColdFusion.

Related

Writing a bridge for OAuth 1.0

for authentication I'm using AWS cognito. but the issue im facing now is that Cognito do not support OAuth 1.0. I know its very old now but still the client I'm dealing with don't want to upgrade so I have to make this OAuth 1.0 compatible with cognito.
what I'm thinking now is to build a bridge between Cognito and OAuth 1.0 using custom OpenID app. this solution was suggested here.but I'm still wondering if there's a better solution for this? or if I want to create this bridge what should i consider ?. and if anyone have build solution like this ? i cant seems to find anything like this.

WSO2 IS 5.5 - Are there rest APIs available for calling admin services?

We recently upgraded WSO2 IS from 5.3 to 5.5. As per the WSO2 IS documentation, it says "From 5.4.0 onwards, the functionality provided by these SOAP APIs are provided through REST APIs. We recommend using REST APIs instead."
But i could not find the rest URLs for calling the AdminServices .
Hereis the URL that i am referring to:
https://docs.wso2.com/display/IS550/SOAP+APIs
Can anyone help me in finding out the rest APIs for the SOAP services - "RemoteUserStoreManagerService" and "UserIdentityManagementAdminService" please?
Documentation you have pointed seems be little bit misleading.
The topic "Calling Admin Services" does not explain about a particular API. Instead it explains how to invoke a SOAP service in the Identity Server in general.
Next, each of the topic in the list does not have a exactly matching REST endpoints. For an example RemoteUserStoreManagerService SOAP API can be used for user management operations. For this you can use SCIM 2.0 REST APIs.
Can you explain the use case you are trying to achieve with UserIdentityManagementAdminService, so that I can help you with finding the correct REST endpoint for it.

Google Apps Calendar Resource API in PHP

I implemented a php application that creates events in google calendar. But i need also to create resources, and i found the documentation for Google Apps Calendar Resource API
My first question is: where can I download the API files.
And second: i can use this in PHP? Because in the examples that they provide, they use only .NET and Python.
Thank you!
This API uses an older Google APIs technology stack called GData. There is a GData PHP client library built into the Zend framework, but it doesn't support OAuth2 and doesn't include support for this particular API. You're only option is to construct the OAuth2 tokens, XML body, and HTTP requests yourself using the documentation as a guide.

SAML with Django authentication

I'm using Django and nginx hosted on AWS. I'm trying to integrate with a university for SAML authentication, using their idp. There are plenty of outdated answers on SO, but is there anything more relevant with current standards?
Many of the apps i've seen are for django 1.2 and lower. Specifically i'm looking for resources that would allow me to more easily manage the SAML authentication through some middleware or anything else.
Some of the things I have seen are:
https://github.com/unomena/django-saml2-idp
https://github.com/WiserTogether/django-saml2-sp
The project I found is below:
https://bitbucket.org/lgs/djangosaml2/overview
The project uses psaml2 for SAML support. Pysaml2 can be found here:
https://github.com/rohe/pysaml2
Bear in mind that djangosaml2 may not use the latest version of pysaml2. I tested it and its working fine.
UPDATE
djangosaml2 works with latest version of pysaml2, but make sure to add this line to make it work:
SESSION_SERIALIZER = 'django.contrib.sessions.serializers.PickleSerializer'
This should be in your settings.py.
SAML is two sides:
IDP -> Identity Provider side -> i.e. the university
SP -> Service Provider -> i.e. your application
Sounds like this one is what you want: https://github.com/WiserTogether/django-saml2-sp.
You have to take into account that SAML as a standard is complex, so you might find issues getting the library talk to the SAML implementation in the university. You will also have to get from them the identity provider cert public key and ask them to add your application on their side with a specific entity id. And when you start managing a couple of them it gets complex.
You might also want to check out something like Auth0 to handle all those SAML connections. There is a very simple python sample https://gist.github.com/woloski/8149412
Hi I just created a django saml2 authentication plugin.
https://github.com/fangli/django-saml2-auth
It's quite easy to integrate with your SAML2 provider, hope you enjoy.
This library is actively maintained: https://github.com/onelogin/python3-saml/tree/master/demo-django

Dart authentication registration

I am building a single page javascript app using dart, what are the recommended ways to handle user authentication and registration?
Take a look at http://code.google.com/p/google-api-dart-client/ for information about using oAuth with Dart.
I noticed that you tagged this with django. I'm assuming then that you are using Django in some way. If that is the case, can you not use the authentication provided by Django itself?
There is now the easy to use Google OAuth2 Library, which you can get from Pub.
Here is a great guide on how to use the package from Dartwatch.