Read both OAuth 2 (and it's Bearer and MAC specs) and the OAuth 1 RFC.
I would probably avoid reading the PHP code for it. I have a feeling that
it's
going to do nothing but give you some wrong ideas about how OAuth should
be implemented.
--
~Daniel Friesen (Dantman, Nadir-Seen-Fire) [
http://daniel.friesen.name]
On Thu, 16 Aug 2012 12:11:05 -0700, Tyler Romeo
tylerromeo@gmail.com
wrote:
> Yeah I've noticed. I decided to start with reading the OAuth IETF
> document
> first so I'm totally familiarized with the protocol. Then I'm going to
> look
> at the PHP extension (although in the long run I don't want to have it
> as a
> dependency), and finally I'm going to look through the mailing list and
> other stuff. Then I'll draft some stuff and put it out here for
> discussion.
>
> *--*
> *Tyler Romeo*
> Stevens Institute of Technology, Class of 2015
> Major in Computer Science
> www.whizkidztech.com | tylerromeo@gmail.com
>
>
>
> On Thu, Aug 16, 2012 at 3:02 PM, Daniel Friesen
>
lists@nadir-seen-fire.comwrote:
>
>> On Thu, 16 Aug 2012 11:39:54 -0700, Tyler Romeo
tylerromeo@gmail.com
>> wrote:
>>
>> Is anybody working on OAuth for MediaWiki? Because if not I might put
>>> something together (i.e., start putting together design documents
>>> based on
>>>
http://www.mediawiki.org/wiki/**OAuthhttp://www.mediawiki.org/wiki/OAuth
>>> ).
>>>
>>> *--*
>>> *Tyler Romeo*
>>>
>>> Stevens Institute of Technology, Class of 2015
>>> Major in Computer Science
>>> www.whizkidztech.com | tylerromeo@gmail.com
>>>
>>
>> That OAuth page is actually quite old.
>>
>> You should read over all the mailing list and Talk:OAuth topics.
>> Especially the stuff on writing this type of auth into core as an
>> abstract
>> system.
>> As well please take a good long read over:
>>
https://www.mediawiki.org/**wiki/OAuth/Issueshttps://www.mediawiki.org/wiki/OAuth/Issues
>>
>> Also note I don't think we've had a real discussion over OAuth yet. The
>> OAuth discussions I've tried to spark up haven't gone far. And whoever
>> is
>> in the subgroup here that actually understands OAuth haven't even had a
>> discussion over it.
>>
>> --
>> ~Daniel Friesen (Dantman, Nadir-Seen-Fire) [
http://daniel.friesen.name]