Description of the IdM GEi and how to use it integrated with your applicaitons

1. Open APIs for Open Minds
Securing Access with Oauth2
Fernando López Aguilar, TID
(fla@tid.es, @flopezaguilar)
Javier Cerviño, Álvaro Alonso (UPM)
(jcervino@dit.upm.es, aalonsog@dit.upm.es)

2. Identity Manager
1

3. Identity Manager
2
Account

4. FI-WARE Account (Identity Manager)
Demo
3

5. OAuth 2.0
4

6. OAuth Message Flow
5
Web App Account
redirect
request access-token
access-token
access-code
OAuthLibrary
Request user info using access-token

7. OAuth Libraries
http://oauth.net/2/
• PHP, Cocoa, iOS, Java, Ruby, Javascript, Python.
Example using Node.js
• https://github.com/ging/oauth2-example-client
6

8. OAuth Demo
7

9. Web Applications and GEs
8
Generic Enabler
Account
Request+
access-token
redirect
access-code
request access-token
access-token
access-token + path
OK + user info
Web App
OAuthLibrary

10. Web Applications and GEs
GET https://GE_URL HTTP/1.1
Host: GE_hostname
X-Auth-Token: access_token
9

11. AA for free!
10
Back-end Apps
Account
Request+
access-token
Web App
OauthLibrary
Proxy
redirect
access-code
request access-token
access-token
access-token + path
OK + user info

12. Links
Slides:
• http://tinyurl.com/ws2-fiware
FI-LAB Account:
• Source Code: https://github.com/ging/fi-ware-idm
• Documentation: https://github.com/ging/fi-ware-idm/wiki
FI-LAB OAuth Demo:
• https://github.com/ging/oauth2-example-client
FI-LAB Proxy:
• https://github.com/ging/fi-ware-pep-proxy
11

13.  http://fi-ppp.eu
 http://fi-ware.eu
 Follow @Fiware on Twitter !
Thanks !
12