5. Windows 8 Application Microsoft Word with Apps For Office Internal O365 SharePoint Site Windows Azure Cloud Services Windows Azure Workflow Server Public O365 SharePoint Site Windows Azure SQL Database Clients (Desktop/Tablet/Mobile) Cloud View / approve SOWs Display Excel Services charts in Word View client companies View sales leads Receive toast and tile and raw notifications View Excel Services charts Create estimates Contact internal sales personnel to follow up on requests for quotes Contact vendors to follow up on requests for quotes Approve SOWs Display, Create, Update, Delete Sales Leads Store Excel Documents Store SOWs Host team sites for projects BCS External List Submit requests for quote Send notifications Create SOWs Update data in Excel documents Create SharePoint project sites Facilitate SOW creation, approval, submission, and follow up tasks Store sales request data Windows Azure Access Control Service OAuth

8. Introducing the all new _api _API Client/Server/Mobile Symmetrical OAuth Enabled 2,000+ Classes Declarative, Remote Events Fully Remote 6,000+ Members OData JQuery Compatible Private and Public Clouds JSON

9. JavaScript Library Silverlight Library.Net CLR Library Custom Client Code Client SharePoint _api SharePoint Foundation Execute Query SharePoint 2013 and SharePoint Online _api OData / REST User Profile SearchTaxonomyFeedsMore…

10. Consistent Access to Services APIREST URLScriptClient Namespace Webhttp://weburl/_api/WebSPMicrosoft.SharePoint.Client Searchhttp://weburl/_api/SearchSP.SearchMicrosoft.SharePoint.Client.Search Taxonomyhttp://weburl/_api/TaxonomySP.TaxonomyMicrosoft.SharePoint.Client.Taxonomy Socialhttp://weburl/_api/SocialSP.SocialMicrosoft.SharePoint.Client.Social

11. Consistent Usage

12. Sample REST / OData Calls

15. (Rob)

18. Contoso photo

19. Contoso

20. ? Contoso photo Contoso

21. Contoso photo Contoso

22. View Contoso photo Contoso

23. View, Upload, Tag, Comment Contoso photo Contoso

24. View, Upload, Tag, Comment, Change Password Contoso photo Contoso

25. View, Upload, Tag, Comment, Change Password Contoso photo Contoso

26. View, Upload, Tag, Comment, Change Password Contoso photo Contoso

27. View, Upload, Tag, Comment, Change Password Contoso photo Contoso

28. View, Upload, Tag, Comment, Change Password View Contoso photo Contoso

29. View, Upload, Tag, Comment, Change Password View Contoso photo Contoso

30. SharePoint SharePoint 2007 Sandbox SharePoint 2010 SharePoint Azure, IIS, LAMP, etc… _api SharePoint 2013 App Model: Past, Present and Future

31. OAuth 2.0

32. User credentials provided? Start End User only context App only context User + App context Anonymous context App token provided? App token Includes user?

33. SharePoint Context Token

35. https:// rhoward.sharepo

38. SP API Review https:// rhoward.sharepo POST https://app.com/ … SPAppToken=eyJ0eXAiOiJKV 1QiLCJhbGciOiJIUzI1NiJ9.e…

39. SP API Review https:// rhoward.sharepo

40. SP API Review https:// rhoward.sharepo

41. SP API Review https:// rhoward.sharepo

42. SP API Review https:// rhoward.sharepo

43. SP API Review https:// rhoward.sharepo

44. SP API Review https:// rhoward.sharepo 7 Unassigned Changes 21 Pending Reviews 17 Active API Bugs Nag Mail Auto-Assign

46. The OAuth 2.0 Authorization Protocol The OAuth 2.0 Authorization Protocol: Bearer Tokens JSON Web Token (JWT) IETF OAuth WG homepage

47. SharePoint 2013 & Windows Azure Workflow PeopleContentEventsCollab Visual Studio SharePoint Designer SharePoint WF3 Host SharePoint OM _API Workflow Services Manager MTW Azure Service Bus Azure Workflow Azure Access Control OAuth2 InstancesInterop DeploymentMessaging WF4 Service Application Proxy

51. Takeaways

56. Two Aspects to Access Control

57. SharePoint “Host” Web App Web JavaScript App Authentication SharePoint “AppWeb”

58. SharePoint “Host” Web App Authentication JavaScript (cross domain) SharePoint “AppWeb”

59. SharePoint “Host” Web App Authentication OAuth SharePoint “AppWeb”

60. App Identity Online and On-Prem Azure AD AppOffice 365 Cloud

61. App Identity Online and On-Prem AppSharePoint On-Prem Azure AD AppOffice 365 Cloud

62. App Identity Online and On-Prem Azure AD AppOffice 365 AppSharePoint Cloud On-Prem

66. Scope="http://sharepoint/content/sitecollection" Right="Read"/> ProductPermission ProviderSpecific component Capability

67. App Name Here

68. http://sharepoint/content/tenantRead;Write;Manage;FullControl http://sharepoint/content/sitecollectionRead;Write;Manage;FullControl http://sharepoint/content/sitecollection/webRead;Write;Manage;FullControl http://sharepoint/content/sitecollection/web/listRead;Write;Manage;FullControl http://sharepoint/bcs/connectionRead http://sharepoint/searchQueryAsUserIgnoreAppPrincipal http://sharepoint/projectserverManage http://sharepoint/projectserver/projectsRead;Write http://sharepoint/projectserver/projects/projectRead;Write http://sharepoint/projectserver/enterpriseresourcesRead;Write http://sharepoint/projectserver/statusingSubmitStatus http://sharepoint/projectserver/reportingRead http://sharepoint/projectserver/workflowElevate http://sharepoint/social/tenantRead;Write;Manage;FullControl http://sharepoint/social/coreRead;Write;Manage;FullControl http://sharepoint/social/microfeedRead;Write;Manage;FullControl http://sharepoint/taxonomyRead;Write