Uploaded image for project: 'Help-Desk'
  1. Help-Desk
  2. HELP-5377

FIWARE.Request.Tech.Security.IDM-KeyRock.Android

    Details

    • Type: extRequest
    • Status: Closed
    • Priority: Major
    • Resolution: Done
    • Fix Version/s: 2021
    • Component/s: FIWARE-TECH-HELP
    • Labels:
      None

      Description

      Hi,

      Part of our project is to implement a mobile native Android application.
      Our question is if it is possible to use KeyRock so that our users could
      potentially login with their Fiware account.
      Other OAuth solutions like Google, provide a SDK for this, which prompts
      users to Google Sign in.
      Is there any user friendly way to achieve this with KeyRock?

      To make it clear, the application will be written in Android Java and not
      an HTML5 app.

      Thank you,
      Marios Protogiros

      [Created via e-mail received from: Marios Protogiros <mariosprotos@gmail.com>]

        Activity

        Hide
        fw.ext.user FW External User added a comment -

        Hi Mario,

        OAuth2 is a standard so any OAuth2 library/SDK should be compatible with Keyrock.

        BR

        Álvaro

        Show
        fw.ext.user FW External User added a comment - Hi Mario, OAuth2 is a standard so any OAuth2 library/SDK should be compatible with Keyrock. BR – Álvaro
        Hide
        fw.ext.user FW External User added a comment -

        Hi Alvaro,
        thank you for the reply.
        Regarding the OAuth support in Android, there are libraries that support
        this, but to well known providers, like Google,Faceboook,Twitter,etc.
        They provide SDKs for that.
        However when considering using KeyRock, and since there is no SDK for that,
        a custom solution should be implemented, as the redirecting to KeyRock
        sign-in page, should be handled inside the app.
        I dont know if someone else has tried to do that, and I would like to know
        if you have any references that would help us.
        I would say that if there is no native mobile support for KeyRock, what
        would you suggest on implementing something like that?
        Any use case we have seen is only for the web.

        Regards,
        Marios Protogiros

        Show
        fw.ext.user FW External User added a comment - Hi Alvaro, thank you for the reply. Regarding the OAuth support in Android, there are libraries that support this, but to well known providers, like Google,Faceboook,Twitter,etc. They provide SDKs for that. However when considering using KeyRock, and since there is no SDK for that, a custom solution should be implemented, as the redirecting to KeyRock sign-in page, should be handled inside the app. I dont know if someone else has tried to do that, and I would like to know if you have any references that would help us. I would say that if there is no native mobile support for KeyRock, what would you suggest on implementing something like that? Any use case we have seen is only for the web. Regards, Marios Protogiros
        Hide
        fw.ext.user FW External User added a comment -

        Hi Marios,

        No one has used Keyrock oauth from Android that I know and we don't have
        any specific SDK for it, but it should be straightforward to implement it
        using a generic library like this one
        https://github.com/scribejava/scribejava (for example)

        Follow the examples for other providers and modify them with Keyrock's urls:

        https://github.com/scribejava/scribejava/wiki/FAQ#when-will-you-support-insert_api_here-

        https://github.com/scribejava/scribejava/blob/master/scribejava-apis/src/main/java/com/github/scribejava/apis/GitHubApi.java

        https://github.com/scribejava/scribejava/blob/master/scribejava-apis/src/test/java/com/github/scribejava/apis/examples/GitHubExample.java

        On a side note, since you are implementing oauth2 on a mobile app, apart
        from the Authorization Code Grant you can also take a look at the Resource
        Owner Credentials Grant, to avoid the redirection, although this will
        require the users of your app to trust you giving you your password.

        Best regards,
        Enrique

        On Mon, 23 Nov 2015 at 16:19 Marios Protogiros <mariosprotos@gmail.com>

        Show
        fw.ext.user FW External User added a comment - Hi Marios, No one has used Keyrock oauth from Android that I know and we don't have any specific SDK for it, but it should be straightforward to implement it using a generic library like this one https://github.com/scribejava/scribejava (for example) Follow the examples for other providers and modify them with Keyrock's urls: https://github.com/scribejava/scribejava/wiki/FAQ#when-will-you-support-insert_api_here- https://github.com/scribejava/scribejava/blob/master/scribejava-apis/src/main/java/com/github/scribejava/apis/GitHubApi.java https://github.com/scribejava/scribejava/blob/master/scribejava-apis/src/test/java/com/github/scribejava/apis/examples/GitHubExample.java On a side note, since you are implementing oauth2 on a mobile app, apart from the Authorization Code Grant you can also take a look at the Resource Owner Credentials Grant, to avoid the redirection, although this will require the users of your app to trust you giving you your password. Best regards, Enrique On Mon, 23 Nov 2015 at 16:19 Marios Protogiros <mariosprotos@gmail.com>

          People

          • Assignee:
            aalonsog Alvaro Alonso
            Reporter:
            fw.ext.user FW External User
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: