Hello, please sign in or register
You are here: Home

OAUTH WRAP on Google's AppEngine

I recently threw up OAUTH_WRAP for Messenger Connect on Google's AppEngine. Docs are a bit sketchy: A rather obtuse implementation of FriendFeed OAUTH_WRAP on gitHub and a convoluted SDK to download from MSDN ("OAUTH Callback Handlers"). I thought i'd share my rather graceful and elegant works...

 #!/usr/bin/env python
"""Demonstrates OAuth WRAP authorization on Windows Live
For more information on OAuth WRAP, see http://wiki.oauth.net/OAuth-WRAP.

import re
import Cookie
import datetime
import email.utils
import logging
import time
import os
import cgi
import wsgiref.handlers
import urllib

from google.appengine.api import urlfetch
from google.appengine.ext import webapp
from google.appengine.ext.webapp import util

  "www.example.com": {
"key":"0000000000000000", "secret":"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" }, "dev.example.com": { "key":"0000000000000000", "secret":"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
} }[re.sub(r":.*", r"", os.environ.get('HTTP_HOST'))] class MainHandler(webapp.RequestHandler): def get(self): """Callback for the OAuth WRAP authorization handler.""" code = self.request.get("wrap_verification_code") if not code: self.response.out.write("There is no wrap_vertification_token"); return 1 callback = self.request.get("callback") if callback: callback = '?callback=' + callback try: # BUILD DATA STRING data = urllib.urlencode(dict( wrap_client_id=LIVE_API_TOKEN["key"], wrap_client_secret=LIVE_API_TOKEN["secret"], wrap_callback=self.request.host_url + self.request.path + callback, wrap_verification_code=code )) # GET ACCESS TOKEN resp = urlfetch.fetch(url="https://consent.live.com/AccessToken.aspx", payload=data, method="POST"); # Raise error if we dont get a good response from the server if resp.status_code != 200: raise response = cgi.parse_qs(resp.content) access_token = response["wrap_access_token"][0] # SET COOKIES cookies = dict( accessToken =access_token, c_accessToken=access_token, c_expiry = response["wrap_access_token_expires_in"][0], c_uid = response["uid"][0], c_clientId = LIVE_API_TOKEN["key"], c_clientState = self.request.get("wrap_client_state"), c_scope = self.request.get("exp"), lca = "done" ) for name in cookies: cookie = Cookie.BaseCookie() cookie[name] = cookies[name] cookie[name]["path"] = "/" cookie[name]["expires"] = email.utils.formatdate( time.time() + 30 * 86400, localtime=False, usegmt=True ) self.response.headers._headers.append(("Set-Cookie", cookie.output()[12:])) # ATTACH CALLBACK callback = self.request.get("callback") if callback: callback = "window.opener." + callback +"(\""+access_token+"\","+cookies["c_expiry"]+");" # PRINT OUT HTML self.response.out.write("<html><head><script>function callback(){" + callback + "self.close();}setTimeout(callback,500);</script></head><body onload='callback()'></body></html>"); except: self.response.out.write("Authentication failed") def main(): app = webapp.WSGIApplication([('.*', MainHandler)], debug=True) util.run_wsgi_app(app) if __name__ == '__main__': main()


s ralph lauren outlet Ray Ban Sunglasses,Ray Ban Outlet,Ray Ban Sale,Cheap Ray Bans,Cheap Ray Ban Sunglasses,ray ban sunglasses outlet,ray ban,rayb...
Created 21/10/15
“I canada goose outlet think it doesn’t swarovski jewelry bode very
Created 21/01/16
The michael--kors.org.uk next ralph lauren outlet day patriots jersey Mrs
Created 01/03/16
Tyrion 5c cases watched her ray ban sunglasses read. His timber...
Created 18/04/16
Bond grinned. pandora-bracciali.it "We bcbgmax.in.net only chaussure...
Created 15/06/16
Bond grinned. pandora-bracciali.it "We bcbgmax.in.net only chaussure...
Created 15/06/16
Bond grinned. pandora-bracciali.it "We bcbgmax.in.net only chaussure...
Created 15/06/16
Bond grinned. pandora-bracciali.it "We bcbgmax.in.net only chaussure...
Created 15/06/16
ninest123 One canada goose pas cher gucci outlet thing
Created 21/07/16

Prove you are not a robot

To prove you are not a robot, please type in the six character code you see in the picture below
Security confirmation codeI can't see this!
Email never shown*
Home Page


Andrew Dodson
Since:Feb 2007

Comment | flag


Bookmark and Share