This document discusses OAuth protocols for authorizing third-party applications to access user data. It describes OAuth 2.0 and 1.0, the main participants in OAuth (resource owner, server, consumer), and how to implement OAuth 2.0 authorization in a .NET application using DotNetOpenAuth and obtaining a request token from Facebook to access user data.

1. Author: Matyukevich Sergey

2.  OAuth protocol goal and main participants
description
 OAuth 2.0 implementation step by step
 OAuth 1.0 protocol overview
 Integration in .NET application
(DotNetOpenAuth, MVC 4 simple
authentication)

3. The OAuth 2.0 authorization framework
enables a third-party application to obtain
limited access to an HTTP service, either on
behalf of a resource owner by orchestrating an
approval interaction between the resource
owner and the HTTP service, or by allowing the
third-party application to obtain access on its
own behalf.

4.  Resource owner (User)
 Resource server (Service provider)
 Resource consumer (Client)

5.  Request token is generated by Service
Provider and should be obtained before
development.
 In Facebook Request token = App ID

7. http://localhost/oauth-test-app/user/login?code=AQCwqBa0W...

9.  scope - A comma separated list
of Permissions to request from the user
 state - An arbitrary unique string created by
your app to guard against Cross site request
forgery
 response_type – code or token