Yahoo! Application Platform (YAP) Jonathan LeBlanc – Technology Evangelist Yahoo! Developer Network – Partner Integrations Twitter: @jcleblanc

YAP Applications What’s a YAP Application?

YAP Applications What’s a YAP Application?

Runs on YAP Supports 2- & 3- legged OAuth Supports OpenSocial 0.8 JavaScript APIs Open Applications

Runs on YAP

Supports 2- & 3- legged OAuth

Supports OpenSocial 0.8 JavaScript APIs

Open Application - Views Small View Large View

Runs off platform Supports 2- & 3-legged OAuth Does not contain views Requires users to authenticate session OAuth Applications

Runs off platform

Supports 2- & 3-legged OAuth

Does not contain views

Requires users to authenticate session

Y!OS Components How does it work?

Y!OS Components How does it work?

Y!OS Components – Open Authentication (OAuth) 2-legged & 3-legged OAuth Consumer / Shared Secret keys Similar to proprietary BBAuth, but open standard http://developer.yahoo.com/oauth/

2-legged & 3-legged OAuth

Consumer / Shared Secret keys

Similar to proprietary BBAuth, but open standard

http://developer.yahoo.com/oauth/

Allows secured access to private data Whitelisted components Will begin integrating into OSML http://developer.yahoo.com/yap/yml Y!OS Components – Yahoo Markup Language (YML)

Allows secured access to private data

Whitelisted components

Will begin integrating into OSML

http://developer.yahoo.com/yap/yml

Social Directory (read) Contacts (read) User Status (read / write) Updates (read / write) http://developer.yahoo.com/social Y!OS Components – Social APIs

Social Directory (read)

Contacts (read)

User Status (read / write)

Updates (read / write)

http://developer.yahoo.com/social

HTML / CSS / JavaScript securer Enforces standards Includes JSLint (http://www.jslint.com) One of the first to integrate Caja http://code.google.com/p/google-caja http://developer.yahoo.com/yap/guide/caja-support.html Y!OS Components – Caja

HTML / CSS / JavaScript securer

Enforces standards

Includes JSLint (http://www.jslint.com)

One of the first to integrate Caja

http://code.google.com/p/google-caja

http://developer.yahoo.com/yap/guide/caja-support.html

Caja - IFrame Security Concerns IFrame Concerns Drive-by downloads No real content restrictions Other known exploits Caja Implementation Blacklist all / Whitelist some model Secure OpenSocial container

IFrame Concerns

Drive-by downloads

No real content restrictions

Other known exploits

Caja Implementation

Blacklist all / Whitelist some model

Secure OpenSocial container

PHP SDK Currently Available Open and OAuth Applications ActionScript 3 SDK Currently Available Open Applications Y!OS Components – SDKs

SQL-like syntax Private / Public Data Use of many YDN APIs Captures external data feeds Allows custom tables with the “Open Data Tables” feature http://developer.yahoo.com/yql Y!OS Components – Yahoo! Query Language (YQL)

SQL-like syntax

Private / Public Data

Use of many YDN APIs

Captures external data feeds

Allows custom tables with the “Open Data Tables” feature

http://developer.yahoo.com/yql

Thank You Questions?

Thank You Questions?