[Labs-l] OAuth with RSA key

Sat Oct 22 00:56:54 UTC 2016

Well I tried to do this using the "pre-shared secret key" method described
at https://tools.wmflabs.org/oauth-hello-world/ and I just get an invalid
key error, so I'm doing something wrong.

You can take this email off the public list if you would prefer, and I
apologize ahead of time for using up your valuable time.

On Mon, Oct 17, 2016 at 10:36 AM, Brad Jorsch (Anomie) <
bjorsch at wikimedia.org> wrote:

> On Sun, Oct 16, 2016 at 11:28 PM, Magog The Ogre <magog.the.ogre at gmail.com
> > wrote:
>
>> The one example program makes only a vague reference to it (
>> https://tools.wmflabs.org/oauth-hello-world/index.php?action=download),
>> and the other (https://www.mediawiki.org/wik
>> i/OAuth/For_Developers#PHP_demo_cli_client_with_RSA_keys) presupposes
>> that I have preexisting libraries installed, for some reason.
>>
>
> In any case using RSA keys is going to want you to have some sort of
> library installed to deal with using RSA keys, if not a library to handle
> all the OAuth stuff itself.
>
> The libraries needed for your second link are included in the OAuth
> extension itself. The most relevant bit for your question here is the
> OAuthSignatureMethod_RSA_SHA1::build_signature() method[1] which uses
> PHP's openssl extension to do the actual signing.[2]
>
>  [1]: https://phabricator.wikimedia.org/diffusion/EOAU/browse/
> master/lib/OAuth.php;51cd54d332d1b6c0647f3be699c000833cb9d54e$235-252
>  [2]: https://secure.php.net/openssl
>
>
>> I just want to be able to authenticate the identity of users. Magnus
>> Manske has said he doesn't want to maintain TUSC anymore, but I cannot
>> figure out how to do this with the documentation provided.
>>
>
> Note that using RSA-SHA1 rather than HMAC-SHA1 is in no way required.
>
>
> --
> Brad Jorsch (Anomie)
> Senior Software Engineer
> Wikimedia Foundation
>
> _______________________________________________
> Labs-l mailing list
> Labs-l at lists.wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/labs-l
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.wikimedia.org/pipermail/labs-l/attachments/20161021/9aab76d7/attachment.html>