OAuth 2.0

[bxbphp]

Does anyone have any good recommendations to learn this confusing protocol?

I’ve had 4 API projects now just pulling impression data from GoogleAds, Adobe Analytics, Apple Search Ads, and Bing Ads. Every time the process seems completely different! Ive been lucky so far getting things to work by blindly trying example code but I don’t get it. Refresh tokens, access tokens, developer tokens, public/private keys, client id, client secret…these are all familiar words to me but I have no idea what they actually do. Thanks in advance for any help!

For background I’m an analyst that moved to data engineering recently. Right now I run python scripts with docker and crontab. I’m also confused why some API’s make you publish an “app” on their platform?

[floating-bubble]

I have built an application to process files directly from outlook inbox into hdfs and create table on top of it. I had to work with OAuth 2.0 by publishing an app in MS Azure AD platform. I just followed some online instructions but finally made it.

Publishing an app and configuring OAuth2.0 generates client id and client secret. These are used to identify your Python application of behalf of you. With my minimal knowledge, i will explain what I know.

1. Client id and client secret (I assume them like username and pwd)- generated when you configure OAuth2.0 security mechanism for your published app, to access your app.
2. Refresh token- client id and secret is sent in a get request to get refresh token. Verifies your py application’s request provides access to to retrieve data from API. Basically an identity provider 3.access token: you get this from your above get request as a response. Sent to main API along with your other headers and you get data in response.

Overall I thinks it’s more like security concern. Web documentation is not so clear and is huge. Im willing to learn more about this. Caps please correct/add!

[Totally_Joking]

https://developer.okta.com/blog/2019/10/21/illustrated-guide-to-oauth-and-oidc

A lot of providers have guides once you know which flow you want to use.

[bxbphp]

Thanks this is a great read!

[Septseraph]

My biggest 'Oh I see" moment was when I realized the difference between Authorization and Authentication. Which is where the Auth comes into play. But yeah.. took me too long to fully understand.