Integrating Web Services with OAuth and PHP

Table of Contents

1. Dedication
2. Foreword
3. HTTP Basics
   1. The Problems with Authentication
   2. Breaking Down HTTP Requests/Responses
4. Introduction to OAuth
   1. Challenges of Authorization and Authentication
   2. Differences Between OAuth 1 and 2
   3. When Do I Need a Client/Server
   4. Solving Auth Challenges with OAuth
   5. Removing the Magic
   6. Using Existing Libraries is Good
   7. Decoupling Auth
5. OAuth 1 Client
   1. Components of an OAuth 1 Signature
   2. Understanding Tokens
   3. Understanding the Signature
   4. Understanding the Nonce
   5. Forming a Valid OAuth 1.0 Request
6. OAuth 1 Server
   1. Analyzing Request Components
   2. Verifying Signatures
   3. Distributing Tokens
   4. Handling Authentication Failures
   5. Handling Authorization Failures
   6. Summary
7. OAuth 1 Implementation
   1. Existing Libraries
   2. Frameworks
   3. Service Providers
   4. Summary
8. OAuth 2 Client
   1. Authorization Flow
   2. Scopes
   3. Grants
   4. Implicit Grant
   5. Resource Owner Password Credentials Grant
   6. Client Credential Grant
   7. Presenting the Access Token
9. OAuth 2 Server
   1. SSL/TLS
   2. Tokens and Grants
   3. Access Control
   4. Conclusion
10. OAuth 2 Implementation
    1. Existing Libraries
    2. Service Providers
    3. Conclusion
11. Security
    1. Application Security
    2. Social Engineering
    3. User IDs
    4. Token Expiration
    5. Conclusion
12. Credits