[oauth] Re: Refresh a token

2013-11-01 Thread hitoshi uchida
Below would be helpful for you to take a look how to get the refreshed access token by refresh token. https://developers.google.com/accounts/docs/OAuth2WebServer#refresh On Wednesday, July 31, 2013 5:31:11 AM UTC-4, Baptiste wrote: Hi guys, I'm a french guy, new to OAuth and Google Group,

[oauth] Re: Refresh a token

2013-11-01 Thread hitoshi uchida
Below would be helpful for you to take a look how to get the refreshed access token by refresh token. https://developers.google.com/accounts/docs/OAuth2WebServer#refresh On Wednesday, July 31, 2013 5:31:11 AM UTC-4, Baptiste wrote: Hi guys, I'm a french guy, new to OAuth and Google Group,

[oauth] Re: Oauth 2.0 login restriction

2013-11-01 Thread hitoshi uchida
Hi, If you use Google OAuth2.0 API, how about using login_hint parameter to identify the domain of user's email address ? https://developers.google.com/accounts/docs/OAuth2Login?hl=ja#sendauthrequest Please note the login_hint isn't a standardized parameter of IETF OAuth2, just available with

[oauth] Re: Joomla Security REST API OAuth

2013-11-01 Thread hitoshi uchida
Hi, Will you manage user accounts like id and password by yourself ? I recommend not to create the authentication system by yourself because of security risk and you need to take the responsibility if you unintentionally disclose account information to public. In addition, OAuth protocol isn't

[oauth] Re: Some generic questions

2013-11-01 Thread Hitoshi Uchida
Hi, Here are my doubts: 1) First, would it make any sense nowadays to set up a security system based on OAuth 1.0a? Should it be considered too old and hence a completely wrong pick? Though I don't think OAuth1.0 is wrong pick because security is considered well, if you select OAuth2.0,