This deck runs through some of the core utilities used by many of the social networking sites out today to host third party applications on their sites, taken from the perspective of OpenSocial containers such as the Yahoo! Application Platform, MySpace, Orkut, etc. Providing an in depth look into open standards for security, authentication and cross platform migrations, this presentation seeks to compare some of the major platform implementations currently used and provide code examples on how to build real world applications.

1. The Foundations of a Social Application Platform Jonathan LeBlanc Technology Evangelist Yahoo! Developer Network Twitter: @jcleblanc

2. EXAMPLES | TUTORIALS | CODE SAMPLES developer.yahoo.com

4. Open Authentication (OAuth)

5. Software Development Kits (SDKs)

6. OpenSocial and Using Social Data

7. Application Security

9. OAuth - Open Authentication

11. OAuth – What Does the End-User See?

12. OAuth – What Does the End-User See?

13. SDKs (Software Development Kits) PHP, Python, Java, ActionScript 3, Objective-C, and OpenSocial REST APIs http://www.github.com/yahoo

14. SDKs (Software Development Kits) – Abstraction Using PHP //create session variables $ysession = YahooSession::requireSession(API_KEY, API_SECRET, APP_ID); $yuser = $ysession->getSessionedUser(); //get user profile $yprofile = $yuser->loadProfile(); //get user connections $connections = $yuser->getConnections($start,$count, $total);

15. What is OpenSocial? For developing applications on social networks Accessing social data (profiles, connections) Fetching and inserting activities Implemented by many containers YAP, MySpace, Orkut, etc. Develop once, distribute broadly

17. Collecting User Data With OpenSocial 0.8 /* OpenSocialPERSON data request */ varreq = opensocial.newDataRequest(); varparams = {}; params[opensocial.DataRequest.PeopleRequestFields.PROFILE_DETAILS] = [ opensocial.Person.Field.NAME, opensocial.Person.Field.THUMBNAIL_URL ]; req.add(req.newFetchPersonRequest('VIEWER', params), 'viewer_profile'); req.send(response);

18. Collecting User Data With OpenSocial 0.8 /* response handler */ function response(data){ var viewer = data.get('viewer_profile').getData(); var aboutme = viewer.getField(opensocial.Person.Field.NAME); }

19. Fetching Updates with OpenSocial 0.8

20. Getting Updates With OpenSocial 0.8 var req = opensocial.newDataRequest(); var spec = new opensocial.IdSpec(); spec.setField(opensocial.IdSpec.Field.USER_ID, opensocial.IdSpec.PersonId.OWNER); req.add(req.newFetchActivitiesRequest(spec), 'ownerActivities'); req.send(handleActivities);

21. Getting Updates With OpenSocial 0.8 function handleActivities(dataResponse) { varownerActivities = dataResponse.get('ownerActivities').getData(); //parse owner activities }

22. Inserting Updates with OpenSocial 0.8 var params = {}, activity; params[opensocial.Activity.Field.TITLE] = title; params[opensocial.Activity.Field.BODY] = body; activity = opensocial.newActivity(params); opensocial.requestCreateActivity( activity, opensocial.CreateActivityPriority.LOW, callback);

23. Fetching Connections With OpenSocial 0.8

24. Fetching Connections With OpenSocial 0.8 /* get owner and owner friends */ varidspec = opensocial.newIdSpec({ 'userId' : 'OWNER', 'groupId' : 'FRIENDS' }); varreq = opensocial.newDataRequest(); req.add(req.newFetchPeopleRequest(idspec), 'get_friends'); req.send(responseFriends);

25. Fetching Connections With OpenSocial 0.8 /* connection response function */ function responseFriends(data){ varobjFriends = data.get('get_friends').getData(); var html = ''; objFriends.each(function(person) { html += person.getDisplayName() + '<br />'; }); }

26. Front-end Security

30. Aims to protect end-users

32. Difficult to configure

34. Front-end Security: Caja Cajoling Process var $dis = $v.getOuters(); $v.initOuter('onerror'); $v.so('response', ___.markFuncFreeze(function () { function response$_caller($dis, obj) { if ($v.r(obj, 'text')) { $v.cm($v.cm($v.ro('document'), 'getElementById', [ 'interact' ]), 'setInnerHTML', [ 'Populated!' ]); $v.cm($v.cm($v.ro('document'), 'getElementById', [ 'population' ]), 'setInnerHTML', [ $v.r(obj, 'errors') ]); } } response$_caller.FUNC___ = 'response$_caller'; var response;; response = $v.dis(___.primFreeze(response$_caller), 'response'); return response;

35. Querying Languages

36. Querying Languages – Yahoo! Query Language (YQL)

38. Abstract difficult programming tasks with SDKs

39. Leverage the Social Graph