WMarket For Developers API && Authorization.

Slides:



Advertisements
Similar presentations
The How of OAuth OAuth Hackathon – Six Apart
Advertisements

FI-WARE Testbed Access Control temporary solution.
SOAP SOAP is a protocol for accessing a Web Service. SOAP stands for Simple Object Access Protocol * SOAP is a communication protocol * SOAP is for communication.
Prabath Siriwardena | Johann Nallathamby.
FIspace Security Components FIspace Security Components NetFutures 2015 FIspace project Javier Romero Negrín Javier Hitado Simarro ATOS Serdar Arslan KoçSistem.
The Basic Authentication Scheme of HTTP. Access Restriction Sometimes, we want to restrict access to certain Web pages to certain users A user is identified.
1 Basic Authentication Herng-Yow Chen. 2 Outline Explains HTTP authentication Delve into the most common form of HTTP authentication, basic authentication.
Automating Bespoke Attack Ruei-Jiun Chapter 13. Outline Uses of bespoke automation ◦ Enumerating identifiers ◦ Harvesting data ◦ Web application fuzzing.
Hypertext Transfer Protocol Kyle Roth Mark Hoover.
2/9/2004 Web and HTTP February 9, /9/2004 Assignments Due – Reading and Warmup Work on Message of the Day.
Web Application Vulnerabilities Checklist. EC-Council Parameter Checklist  URL request  URL encoding  Query string  Header  Cookie  Form field 
OAuth 2.0 in Depth By Rohit Ghatol SynerzipSynerzip Passionate about TechNextTechNext.
Today, global enterprises run on Windows Server Active Directory 90% of US enterprises and 70% of international corporations use Active Directory.
Survey of Identity Repository Security Models JSR 351, Sep 2012.
SIP OAuth Rifaat Shekh-Yusef IETF 90, SIPCore WG, Toronto, Canada July 21,
Google Cloud Messaging for Android (GCM) is a free service that helps developers send data from servers to their Android.
Module 14: WCF Send Adapters. Overview Lesson 1: Introduction to WCF Send Adapters Lesson 2: Consuming a Web Service Lesson 3: Consuming Services from.
2-levels Access control for HTTP binding Group Name: WG4 (& WG2/WG3 for information) Source: Shingo Fujimoto, FUJITSU, Meeting.
Visual Studio Online Load Testing Git / Version Control Testing Build and release Analytics Team Collab Agile Planning / Work items Test Mgmt.
FIspace SPT Seyhun Futaci. Technology behind FIspace Authentication and Authorization IDM service of Fispace provides SSO solution for web apps, mobile.
Today, global enterprises run on Windows Server Active Directory 90% of US enterprises and 70% of international corporations use Active Directory.
HTTP config.Routes.MapHttpRoute( name: “TodosForTodoList", routeTemplate: "api/todolists/{id}/todos", defaults: new { controller = “todolists”,
How to Log-in to EPIC for the First Time. to FY 2015 Form 471 Authorized Signer Looks Like:
Hannes Tschofenig, Blaine Cook. 6/4/2016 IETF #77, SAAG 2 The Problem.
Simple Object Access Protocol. Web Services: SOAP2 Why Simple Object Access Protocol Light weight replacement for complicated distributed object technology.
PHP-based Authentication
ASP.NET Web API – Sigurnosna pitanja i odgovori Ivan Marković Cloud Solutions Program Manager/Technology Evangelist SPAN.
ICM – API Server & Forms Gary Ratcliffe.
Esri UC 2014 | Demo Theater | Using ArcGIS Online App Logins in Node.js James Tedrick.
Agenda Pattern Authenticate a user against UCWA Operations happen using the user’s identity Interact with the UCWA service endpoint Make HTTP requests.
Comments on Procedures for RBAC (doc#0056) Group Name: WG4(SEC), WG2(ARC) and WG5(MAS) Source: Suresh Nair, Alcatel-Lucent,
ASSIGNMENT 2 Salim Malakouti. Ticketing Website  User submits tickets  Admins answer tickets or take appropriate actions.
API Auth By Kyle Bradley. Role Definitions  User (Resource Owner)  The resource owner is the person who is giving access to some portion of their account.
Insert Your Name Insert Your Title Insert Date Client Registration Examples Alan Frindell 2/18/2011.
WEB-API & MVC5 - Identity & Security Mait Poska & Andres Käver, IT Kolledž 2014.
Simple Web Services. Internet Basics The Internet is based on a communication protocol named TCP (Transmission Control Protocol) TCP allows programs running.
WMarket For Adminstrators Manual Installation. Basic Dependencies To install your own WMarket instance, you are required to install the following software:
Azure Active Directory is becoming one of, if not the, primary user identity management services for cloud applications. One of Azure Active Directory's.
Survey of Identity Repository Security Models JSR 351, Sep 2012.
Application program interface (API)
Hypertext Transfer Protocol
Embed Power BI in your Web application
API Security Auditing Be Aware,Be Safe
WEB-API & MVC5 - Identity & Security
Bert Greevenbosch, ACE comparison Bert Greevenbosch, draft-greevenbosch-ace-comparison.
Content - Introduction. - Problem statement. - Objectives.
Hypertext Transport Protocol
What is REST API ? A REST (Representational State Transfer) Server simply provides access to resources and the REST client accesses and presents the.
All about social networking
Fix Thunderbird Error 5.7.1 Call Toll-free
Unit 2.3 Robust Programs Lesson 1 - Defensive Design Consideration
Addressing the Beast: Single Sign-On II
WStore Programmer Guide
Dominik Pinter, CMS.IO, Authentication Dominik Pinter,
Gmail Tech Support Phone Number. Why Your Gmail Account Not Working? If your Gmail Customer Support account is not working, you may be.
Testing REST IPA using POSTMAN
Azure AD Line Of Business Application Integration
BY: SHIVI AGRAWAL ( ) CSE-(6)C
Generating the Server Response: HTTP Status Codes
What is OAuth and Why?.
Face2Gene- DPDL integration
A Private Key System KERBEROS.
SMART on FHIR for managed authorised access to medical records
Requests and Server Response Codes
CS5220 Advanced Topics in Web Programming Secure REST API
Web Server Design Week 11 Old Dominion University
Generate Header & URL Install PostMan for Chrome (looks like a man with a jetpack) Under the auth tab, set it to basic Put in the admin username and password.
HTTP Hypertext Transfer Protocol
Getting more out of Flow connectors
D Guidance 26-Jun: Would like to see a refresh of this title slide
Presentation transcript:

WMarket For Developers API && Authorization

API The whole API documentation is available at APIAry: http://docs.fiwaremarketplace.apiary.io We encourage you to check all the operations that you can do by using this API

Default HTT Codes 200: OK 201: The entity has been properly created The location header is included so you can access the entity 204: The entity has been properly removed 400: Invalid request: the body contains mistakes A message to give further details is included in the response 401: you need to send your credentials to make this request 403: you are not authorized to update/delete the requested entity 404: the requested entity does not exist 500: Internal Server Error

authorization

Authorization Request to WMarket must be authorized The way to authenticate the request depends on the Authentication system WMarket is using: Local Authentication: Include Basic Authentication header Authorization: Basic XXX Replacing XXX by a string that is obtained as follows: Combine your user name and password in a string using the pattern: “username:password” Encode the resulting string in base 64 IdM Authentication: Include Bearer Authentiation header Authorization: Bearer XXX Replacing XXX by the user’s OAuth2 token