Building end-to-end apps for SharePoint with Windows Azure and Windows 8

5. Microsoft
Internal O365 Windows Azure
Word with
SharePoint Site Cloud Services
Apps For
Office • Send notifications
• View / approve SOWs • Contact internal sales personnel • Create SOWs
• Display Excel Services to follow up on requests for • Update data in Excel documents
charts in Word quotes • Create SharePoint project sites
• Contact vendors to follow up on
requests for quotes
Windows Azure
• Approve SOWs
• Display, Create, Update, Delete Workflow Server
Windows 8 Sales Leads • Facilitate SOW creation,
Application • Store Excel Documents approval, submission, and follow
• Store SOWs up tasks
• View client companies • Host team sites for projects
• View sales leads • BCS External List Windows Azure
• Receive toast and tile and Access Control
raw notifications Service
Public O365 • OAuth
• View Excel Services charts
• Create estimates SharePoint
Site Windows
Azure SQL
• Submit requests for quote
• StoreDatabase
sales request data
Clients Cloud

8. Introducing the all new _api
OAuth Enabled
Client/Server/Mobile Symmetrical 2,000+ Classes
_API
JSON
Declarative, Remote Events
Fully Remote
JQuery Compatible OData 6,000+ Members
Private and Public Clouds

9. SharePoint 2013 and SharePoint Online
_api
SharePoint User
Search Taxonomy Feeds More…
Foundation Profile
_api
SharePoint
Execute
Client Query OData /
REST
JavaScript Silverlight .Net CLR
Library Library Library
Custom Client Code

10. Consistent Access to Services
API REST URL Script Client Namespace
Web http://weburl/_api/Web SP Microsoft.SharePoint.Client
Search http://weburl/_api/Search SP.Search Microsoft.SharePoint.Client.Search
Taxonomy http://weburl/_api/Taxonomy SP.Taxonomy Microsoft.SharePoint.Client.Taxonomy
Social http://weburl/_api/Social SP.Social Microsoft.SharePoint.Client.Social

11. Consistent Usage
REST/OData
Managed Code
ClientContext ctx = new ClientContext("https://contoso.sharepoint.com");
ctx.Load(ctx.Web.Title);
ctx.ExecuteQuery();
JavaScript

12. Sample REST / OData Calls
Base endpoint
Get the web’s title
Get the collection of lists in the web
Get the lists in the web with a BaseTemplate of 104 (announcement lists)
Create a new list

15. (Rob)

18. Contoso photo

19. Contoso photo
Contoso

20. Contoso photo ?
Contoso

21. Contoso photo
Contoso

22. View
Contoso photo
Contoso
View

23. View, Upload, Tag,
Comment
Contoso photo
Contoso
View, Upload, Tag,
Comment

24. View, Upload, Tag,
Comment, Change
Password
Contoso photo
Contoso
View, Upload, Tag,
Comment, Change
Password

25. Contoso photo
Contoso
View, Upload, Tag,
Comment, Change
Password

26. Contoso photo
Contoso
View, Upload, Tag,
Comment, Change
Password

27. Contoso photo
Contoso
View, Upload, Tag,
Comment, Change
Password

28. View
Contoso photo
Contoso
View, Upload, Tag,
Comment, Change
Password

29. View
Contoso photo
Contoso
View, Upload, Tag,
Comment, Change
Password

30. App Model: Past, Present and Future
SharePoint 2010
2007
SharePoint
2013

31. OAuth 2.0

32. User credentials User only
Start
provided? context
App token App token User + App
provided? Includes user? context
App only
context
Anonymous
End
context

33. SharePoint Context Token
SharePoint Server
App.com
Browser

34. STS (ACS)
SharePoint Server
Browser App.com

35. https://rhoward.sharepo STS (ACS)
1
SharePoint Server
Browser App.com

36. https://rhoward.sharepo STS (ACS)
2
1
SharePoint Server
Browser App.com

37. https://rhoward.sharepo STS (ACS)
3
2
1
SharePoint Server
Browser App.com

38. https://rhoward.sharepo SP API Review STS (ACS)
3
2
1
4
SharePoint Server
Browser App.com
POST https://app.com/
…
SPAppToken=eyJ0eXAiOiJKV
1QiLCJhbGciOiJIUzI1NiJ9.e…

39. https://rhoward.sharepo SP API Review STS (ACS)
3
2
1
4
SharePoint Server
5
Browser App.com

40. https://rhoward.sharepo SP API Review STS (ACS)
3
6
2
1
4
SharePoint Server
5
Browser App.com

41. https://rhoward.sharepo SP API Review
7
STS (ACS)
3
6
2
1
4
SharePoint Server
5
Browser App.com

42. https://rhoward.sharepo SP API Review
7
STS (ACS)
3
6
2
1
4 8
SharePoint Server
5
Browser App.com

43. https://rhoward.sharepo SP API Review
7
STS (ACS)
3
6
2
1
9
4 8
SharePoint Server
5
Browser App.com

44. https://rhoward.sharepo SP API Review
7
STS (ACS)
3
6
2
1
9
4 8
SharePoint Server
5
7 Unassigned Changes
10
Auto-Assign
Browser App.com
21 Pending Reviews Nag Mail
17 Active API Bugs Nag Mail

46. The OAuth 2.0 Authorization Protocol
The OAuth 2.0 Authorization Protocol: Bearer
Tokens
JSON Web Token (JWT)
IETF OAuth WG homepage

47. SharePoint 2013 & Windows Azure Workflow
Azure
SharePoint Access Control
Events Content Collab People WF3 Host
SharePoint Designer
SharePoint OM OAuth2
MTW
Visual Studio
_API
Azure
Workflow
Workflow Services Manager
Instances Interop
Azure
Deployment Messaging
Service Bus
WF4 Service Application Proxy

51. Takeaways

53. http://dev.office.com
http://blogs.msdn.com/b/officeapps
http://dev.windows.com
http://windowsazure.com
http://aka.ms/BuildSessions

56. Two Aspects to Access Control
Authentication Authorization

57. App Authentication
SharePoint
“Host” Web
App Web
JavaScript
SharePoint
“AppWeb”

58. App Authentication
SharePoint
“Host” Web
JavaScript
(cross domain)
SharePoint
“AppWeb”

59. App Authentication
SharePoint
“Host” Web
SharePoint
“AppWeb”
OAuth

60. App Identity Online and On-Prem
Azure AD
Cloud
App Office 365

61. App Identity Online and On-Prem
Azure AD
Cloud
App Office 365
On-Prem
App SharePoint

62. App Identity Online and On-Prem
Azure AD
Cloud
App Office 365
On-Prem
App SharePoint

66. Scope="http://sharepoint/content/sitecollection" Right="Read"/>
Product Permission Provider Specific component Capability

67. App Name Here

68. http://sharepoint/content/tenant Read;Write;Manage;FullControl
http://sharepoint/content/sitecollection Read;Write;Manage;FullControl
http://sharepoint/content/sitecollection/web Read;Write;Manage;FullControl
http://sharepoint/content/sitecollection/web/list Read;Write;Manage;FullControl
http://sharepoint/bcs/connection Read
http://sharepoint/search QueryAsUserIgnoreAppPrincipal
http://sharepoint/projectserver Manage
http://sharepoint/projectserver/projects Read;Write
http://sharepoint/projectserver/projects/project Read;Write
http://sharepoint/projectserver/enterpriseresources Read;Write
http://sharepoint/projectserver/statusing SubmitStatus
http://sharepoint/projectserver/reporting Read
http://sharepoint/projectserver/workflow Elevate
http://sharepoint/social/tenant Read;Write;Manage;FullControl
http://sharepoint/social/core Read;Write;Manage;FullControl
http://sharepoint/social/microfeed Read;Write;Manage;FullControl
http://sharepoint/taxonomy Read;Write