In the world of the Web, it's common for sites to push and pull data to and from other sites & services. One example is that of sharing friends lists between social networks. All too often, however, websites ask their users to hand over passwords for different services; this is the Password Anti-Pattern. Using APIs protected by OAuth, an open authorization protocol, we can allow websites to collaborate without falling prey of the Password Anti-Pattern. The talk features demos and examples built in .NET using OAuth.net: http://lab.madgex.com/oauth-net/ NB: Download the PowerPoint for full notes on the slides

1. Barcamp Brighton 3 OAuth versus the Password Anti-Pattern Bruce Boughton 6-7 September 2008 http://lab.madgex.com/oauth-net/ [email_address] http://siliconbea.ch/

2. The Password Anti-Pattern

5. http://lab.madgex.com/oauth-net/googlecontacts/

6. http://whereami.lab.madgex.com/

7. consumers service providers users

10. OAuth.net Open source .NET library http://lab.madgex.com/oauth-net/ [email_address]

12. Configuring the Fire Eagle service

13. Requesting the user’s location

14. Handling authorization (when required)

15. Using the protected resource

16. http://oauthproviderdemo.madgex.com/