Re: [Virtuoso-users] OAuth request_token endpoint returns OAuth Verification Failed: Bad Signature

[Hugh Williams]

Hi Sunday,

What you really need is fine-grained ACLs using the Virtuoso Authentication 
Layer (VAL) for controlling user access to data/graphs, which is a commercial 
only feature ie not part of the open source product. See the following 
presentation on this feature:


http://www.slideshare.net/kidehen/how-virtuoso-enables-attributed-based-access-controls

We are in the process of updating the online documentation on OAuth integration 
with VAL, but there are some details on how this can be used with the Virtuoso 
sponger middleware at:


http://virtuoso.openlinksw.com/dataspace/doc/dav/wiki/Main/SpongerOAuthSupport

There is a programmers guide for OAuth documented at:


http://virtuoso.openlinksw.com/dataspace/doc/dav/wiki/Main/VirtuosoOAuthProgrammersGuide

and is applicable to open source.

Best Regards
Hugh Williams
Professional Services
OpenLink Software, Inc.  //  http://www.openlinksw.com/
Weblog   -- http://www.openlinksw.com/blogs/
LinkedIn -- http://www.linkedin.com/company/openlink-software/
Twitter  -- http://twitter.com/OpenLink
Google+  -- http://plus.google.com/100570109519069333827/
Facebook -- http://www.facebook.com/OpenLinkSoftware
Universal Data Access, Integration, and Management Technology Providers



> On 6 Apr 2016, at 18:08, Sunday Ayandokun  wrote:
> 
> Hi Hughs,
> 
> Once again, thanks. I checked out the updated docs and I was able to use the 
> /oauth endpoint.
> 
> I have a scenario I will like to get more insight on it.
> 
> This is my scenario, 
> I have an application that connects to users personal graph on virtuosos, 
> which allows individual user manages their data.
> 
> My implementation should allow other external applications to access user 
> data when the user delegate that application to do so via oauth access. 
> 
> My initial thought is to make use of the oauth/ access mechanism for each 
> user to grant access to their data. 
> 
> But I see that from here http://localhost:8890/oauth/oauth_apps.vspx I can 
> only generate token for SPARQL and Discussion applications.
> 
> I want to be able to generate consumer_key and consumer_secret for each 
> application that wants to fetch users data.
> 
> Questions
> 1. Is there any other way to achieve this with oauth in virtuosos.
> 2. Is it possible to make a request to /oauth to programmatically generate 
> the consumer_key and consumer_secret for different applications(developers). 
> 
> 
> Kind Regards.
> Sunday Ayandokun
> University of Tartu
> Tel: +37256724770
> Skype: sunday.ayandokun
> 
>> On Mar 31, 2016, at 3:07 PM, Hugh Williams  wrote:
>> 
>> Hi Sunday,
>> 
>> The 
>> http://virtuoso.openlinksw.com/dataspace/doc/dav/wiki/Main/VirtOAuthSPARQL  
>> was pointing to and old ods framework vad and has been updated to point to 
>> the latest one for the 7.2.2 release. Note also that a different ods 
>> framework vad is require for open source and commercial as indicated on the 
>> page also. 
>> 
>> You can also build the required ods framework vad if compiling from open 
>> source archive by passing the --enable-ods-vad configure option …
>> 
>> Best Regards
>> Hugh Williams
>> Professional Services
>> OpenLink Software, Inc.  //  http://www.openlinksw.com/
>> Weblog   -- http://www.openlinksw.com/blogs/
>> LinkedIn -- http://www.linkedin.com/company/openlink-software/
>> Twitter  -- http://twitter.com/OpenLink
>> Google+  -- http://plus.google.com/100570109519069333827/
>> Facebook -- http://www.facebook.com/OpenLinkSoftware
>> Universal Data Access, Integration, and Management Technology Providers
>> 
>> 
>> 
>>> On 30 Mar 2016, at 21:29, Sunday Ayandokun  
>>> wrote:
>>> 
>>> Hello,
>>> 
>>> I am having issue connecting to the OAuth to get token.
>>> 
>>> I installed the ods_framework_dav.vad package and generated SPARQL 
>>> application token and secret following the example here 
>>> http://virtuoso.openlinksw.com/dataspace/doc/dav/wiki/Main/VirtOAuthSPARQL
>>> 
>>> 
>>> I read this http://docs.openlinksw.com/virtuoso/voauth.html to understand 
>>> how Oauth request should be made to Virtuoso Oauth endpoint.
>>> 
>>> 
>>> http://localhost:8890/OAuth/request_token?oauth_version=1.0_nonce=72180780940317254641459358880_timestamp=1459299214_consumer_key=client_key_signature_method=HMAC-SHA1_signature=KmF8ngGHSBQJIDHTDw%2FWP%2Fdqgmc%3D
>>> 
>>> I am using a python library to sign the request.
>>> 
>>> client_key= token
>>> client_secret = secret
>>> 
>>> client = oauth1.Client(client_key, client_secret=client_secret)
>>> uri, headers, body = client.sign(request_token_url)
>>> 
>>> I am getting this response 'OAuth Verification Failed: Bad Signature'
>>> 
>>> 
>>> Kindly point me to the best approach.
>>> 
>>> 
>>> Kind Regards.
>>> Sunday Ayandokun
>>> University of Tartu
>>> Tel: +37256724770
>>> Skype: sunday.ayandokun
>>> 
>>> 

Re: [Virtuoso-users] OAuth request_token endpoint returns OAuth Verification Failed: Bad Signature

[Sunday Ayandokun]

Hi Hughs,

Once again, thanks. I checked out the updated docs and I was able to use the 
/oauth endpoint.

I have a scenario I will like to get more insight on it.

This is my scenario, 
I have an application that connects to users personal graph on virtuosos, which 
allows individual user manages their data.

My implementation should allow other external applications to access user data 
when the user delegate that application to do so via oauth access. 

My initial thought is to make use of the oauth/ access mechanism for each user 
to grant access to their data. 

But I see that from here http://localhost:8890/oauth/oauth_apps.vspx 
 I can only generate token for 
SPARQL and Discussion applications.

I want to be able to generate consumer_key and consumer_secret for each 
application that wants to fetch users data.

Questions
1. Is there any other way to achieve this with oauth in virtuosos.
2. Is it possible to make a request to /oauth to programmatically generate the 
consumer_key and consumer_secret for different applications(developers). 


Kind Regards.
Sunday Ayandokun
University of Tartu
Tel: +37256724770
Skype: sunday.ayandokun

> On Mar 31, 2016, at 3:07 PM, Hugh Williams  wrote:
> 
> Hi Sunday,
> 
> The 
> http://virtuoso.openlinksw.com/dataspace/doc/dav/wiki/Main/VirtOAuthSPARQL 
>   
> was pointing to and old ods framework vad and has been updated to point to 
> the latest one for the 7.2.2 release. Note also that a different ods 
> framework vad is require for open source and commercial as indicated on the 
> page also. 
> 
> You can also build the required ods framework vad if compiling from open 
> source archive by passing the --enable-ods-vad configure option …
> 
> Best Regards
> Hugh Williams
> Professional Services
> OpenLink Software, Inc.  //  http://www.openlinksw.com/ 
> 
> Weblog   -- http://www.openlinksw.com/blogs/ 
> 
> LinkedIn -- http://www.linkedin.com/company/openlink-software/ 
> 
> Twitter  -- http://twitter.com/OpenLink 
> Google+  -- http://plus.google.com/100570109519069333827/ 
> 
> Facebook -- http://www.facebook.com/OpenLinkSoftware 
> 
> Universal Data Access, Integration, and Management Technology Providers
> 
> 
> 
>> On 30 Mar 2016, at 21:29, Sunday Ayandokun > > wrote:
>> 
>> Hello,
>> 
>> I am having issue connecting to the OAuth to get token.
>> 
>> I installed the ods_framework_dav.vad package and generated SPARQL 
>> application token and secret following the example here 
>> http://virtuoso.openlinksw.com/dataspace/doc/dav/wiki/Main/VirtOAuthSPARQL 
>> 
>> 
>> 
>> I read this http://docs.openlinksw.com/virtuoso/voauth.html 
>>  to understand how Oauth 
>> request should be made to Virtuoso Oauth endpoint.
>> 
>> 
>> http://localhost:8890/OAuth/request_token?oauth_version=1.0_nonce=72180780940317254641459358880_timestamp=1459299214_consumer_key=client_key_signature_method=HMAC-SHA1_signature=KmF8ngGHSBQJIDHTDw%2FWP%2Fdqgmc%3D
>>  
>> 
>> 
>> I am using a python library to sign the request.
>> 
>> client_key= token
>> client_secret = secret
>> 
>> client = oauth1.Client(client_key, client_secret=client_secret)
>> uri, headers, body = client.sign(request_token_url)
>> 
>> I am getting this response 'OAuth Verification Failed: Bad Signature'
>> 
>> 
>> Kindly point me to the best approach.
>> 
>> 
>> Kind Regards.
>> Sunday Ayandokun
>> University of Tartu
>> Tel: +37256724770
>> Skype: sunday.ayandokun
>> 
>> --
>> Transform Data into Opportunity.
>> Accelerate data analysis in your applications with
>> Intel Data Analytics Acceleration Library.
>> Click to learn more.
>> http://pubads.g.doubleclick.net/gampad/clk?id=278785471=/4140___
>>  
>> 
>> Virtuoso-users mailing list
>> Virtuoso-users@lists.sourceforge.net 
>> 
>> https://lists.sourceforge.net/lists/listinfo/virtuoso-users
> 

--

Re: [Virtuoso-users] OAuth request_token endpoint returns OAuth Verification Failed: Bad Signature

[Sunday Ayandokun]

Hi Hughs,

Once again, thanks. I checked out the updated docs and I was able to use the 
/oauth endpoint.

I have a scenario I will like to get more insight on it.

This is my scenario, 
I have an application that connects to users personal graph on virtuosos, which 
allows individual user manages their data.

My implementation should allow other external applications to access user data 
when the user delegate that application to do so via oauth access. 

My initial thought is to make use of the oauth/ access mechanism for each user 
to grant access to their data. 

But I see that from here http://localhost:8890/oauth/oauth_apps.vspx 
 I can only generate token for 
SPARQL and Discussion applications.

I want to be able to generate consumer_key and consumer_secret for each 
application that wants to fetch users data.

Questions
1. Is there any other way to achieve this with oauth in virtuosos.
2. Is it possible to make a request to /oauth to programmatically generate the 
consumer_key and consumer_secret for different applications(developers). 


Kind Regards.
Sunday Ayandokun
University of Tartu
Tel: +37256724770
Skype: sunday.ayandokun

> On Mar 31, 2016, at 3:07 PM, Hugh Williams  wrote:
> 
> Hi Sunday,
> 
> The 
> http://virtuoso.openlinksw.com/dataspace/doc/dav/wiki/Main/VirtOAuthSPARQL 
>   
> was pointing to and old ods framework vad and has been updated to point to 
> the latest one for the 7.2.2 release. Note also that a different ods 
> framework vad is require for open source and commercial as indicated on the 
> page also. 
> 
> You can also build the required ods framework vad if compiling from open 
> source archive by passing the --enable-ods-vad configure option …
> 
> Best Regards
> Hugh Williams
> Professional Services
> OpenLink Software, Inc.  //  http://www.openlinksw.com/ 
> 
> Weblog   -- http://www.openlinksw.com/blogs/ 
> 
> LinkedIn -- http://www.linkedin.com/company/openlink-software/ 
> 
> Twitter  -- http://twitter.com/OpenLink 
> Google+  -- http://plus.google.com/100570109519069333827/ 
> 
> Facebook -- http://www.facebook.com/OpenLinkSoftware 
> 
> Universal Data Access, Integration, and Management Technology Providers
> 
> 
> 
>> On 30 Mar 2016, at 21:29, Sunday Ayandokun > > wrote:
>> 
>> Hello,
>> 
>> I am having issue connecting to the OAuth to get token.
>> 
>> I installed the ods_framework_dav.vad package and generated SPARQL 
>> application token and secret following the example here 
>> http://virtuoso.openlinksw.com/dataspace/doc/dav/wiki/Main/VirtOAuthSPARQL 
>> 
>> 
>> 
>> I read this http://docs.openlinksw.com/virtuoso/voauth.html 
>>  to understand how Oauth 
>> request should be made to Virtuoso Oauth endpoint.
>> 
>> 
>> http://localhost:8890/OAuth/request_token?oauth_version=1.0_nonce=72180780940317254641459358880_timestamp=1459299214_consumer_key=client_key_signature_method=HMAC-SHA1_signature=KmF8ngGHSBQJIDHTDw%2FWP%2Fdqgmc%3D
>>  
>> 
>> 
>> I am using a python library to sign the request.
>> 
>> client_key= token
>> client_secret = secret
>> 
>> client = oauth1.Client(client_key, client_secret=client_secret)
>> uri, headers, body = client.sign(request_token_url)
>> 
>> I am getting this response 'OAuth Verification Failed: Bad Signature'
>> 
>> 
>> Kindly point me to the best approach.
>> 
>> 
>> Kind Regards.
>> Sunday Ayandokun
>> University of Tartu
>> Tel: +37256724770
>> Skype: sunday.ayandokun
>> 
>> --
>> Transform Data into Opportunity.
>> Accelerate data analysis in your applications with
>> Intel Data Analytics Acceleration Library.
>> Click to learn more.
>> http://pubads.g.doubleclick.net/gampad/clk?id=278785471=/4140___
>>  
>> 
>> Virtuoso-users mailing list
>> Virtuoso-users@lists.sourceforge.net 
>> 
>> https://lists.sourceforge.net/lists/listinfo/virtuoso-users
> 

--

Re: [Virtuoso-users] OAuth request_token endpoint returns OAuth Verification Failed: Bad Signature

[Hugh Williams]

Hi Sunday,

The http://virtuoso.openlinksw.com/dataspace/doc/dav/wiki/Main/VirtOAuthSPARQL 
  
was pointing to and old ods framework vad and has been updated to point to the 
latest one for the 7.2.2 release. Note also that a different ods framework vad 
is require for open source and commercial as indicated on the page also. 

You can also build the required ods framework vad if compiling from open source 
archive by passing the --enable-ods-vad configure option …

Best Regards
Hugh Williams
Professional Services
OpenLink Software, Inc.  //  http://www.openlinksw.com/ 

Weblog   -- http://www.openlinksw.com/blogs/ 
LinkedIn -- http://www.linkedin.com/company/openlink-software/ 

Twitter  -- http://twitter.com/OpenLink 
Google+  -- http://plus.google.com/100570109519069333827/ 

Facebook -- http://www.facebook.com/OpenLinkSoftware 

Universal Data Access, Integration, and Management Technology Providers



> On 30 Mar 2016, at 21:29, Sunday Ayandokun  > wrote:
> 
> Hello,
> 
> I am having issue connecting to the OAuth to get token.
> 
> I installed the ods_framework_dav.vad package and generated SPARQL 
> application token and secret following the example here 
> http://virtuoso.openlinksw.com/dataspace/doc/dav/wiki/Main/VirtOAuthSPARQL 
> 
> 
> 
> I read this http://docs.openlinksw.com/virtuoso/voauth.html 
>  to understand how Oauth 
> request should be made to Virtuoso Oauth endpoint.
> 
> 
> http://localhost:8890/OAuth/request_token?oauth_version=1.0_nonce=72180780940317254641459358880_timestamp=1459299214_consumer_key=client_key_signature_method=HMAC-SHA1_signature=KmF8ngGHSBQJIDHTDw%2FWP%2Fdqgmc%3D
>  
> 
> 
> I am using a python library to sign the request.
> 
> client_key= token
> client_secret = secret
> 
> client = oauth1.Client(client_key, client_secret=client_secret)
> uri, headers, body = client.sign(request_token_url)
> 
> I am getting this response 'OAuth Verification Failed: Bad Signature'
> 
> 
> Kindly point me to the best approach.
> 
> 
> Kind Regards.
> Sunday Ayandokun
> University of Tartu
> Tel: +37256724770
> Skype: sunday.ayandokun
> 
> --
> Transform Data into Opportunity.
> Accelerate data analysis in your applications with
> Intel Data Analytics Acceleration Library.
> Click to learn more.
> http://pubads.g.doubleclick.net/gampad/clk?id=278785471=/4140___
>  
> 
> Virtuoso-users mailing list
> Virtuoso-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/virtuoso-users



smime.p7s
Description: S/MIME cryptographic signature
--
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785471=/4140___
Virtuoso-users mailing list
Virtuoso-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/virtuoso-users

[Virtuoso-users] OAuth request_token endpoint returns OAuth Verification Failed: Bad Signature

[Sunday Ayandokun]

Hello,

I am having issue connecting to the OAuth to get token.

I installed the ods_framework_dav.vad package and generated SPARQL application 
token and secret following the example here 
http://virtuoso.openlinksw.com/dataspace/doc/dav/wiki/Main/VirtOAuthSPARQL 



I read this http://docs.openlinksw.com/virtuoso/voauth.html 
 to understand how Oauth 
request should be made to Virtuoso Oauth endpoint.


http://localhost:8890/OAuth/request_token?oauth_version=1.0_nonce=72180780940317254641459358880_timestamp=1459299214_consumer_key=client_key_signature_method=HMAC-SHA1_signature=KmF8ngGHSBQJIDHTDw%2FWP%2Fdqgmc%3D
 


I am using a python library to sign the request.

client_key= token
client_secret = secret

client = oauth1.Client(client_key, client_secret=client_secret)
uri, headers, body = client.sign(request_token_url)

I am getting this response 'OAuth Verification Failed: Bad Signature'


Kindly point me to the best approach.


Kind Regards.
Sunday Ayandokun
University of Tartu
Tel: +37256724770
Skype: sunday.ayandokun

--
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785471=/4140___
Virtuoso-users mailing list
Virtuoso-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/virtuoso-users