AuthSub in the Google Data Protocol Client Libraries

http://code.google.com/intl/ru/apis/gdata/docs/auth/authsub.html

This document describes how to use the Google Data API client libraries to connect to Google's AuthSub Authentication for Web Applications.

The AuthSub interface allows a web-based application to access a Google service on behalf of a user. To maintain a high level of security, the AuthSub interface enables the application to get an authentication token without ever handling the user's account login information.

The Google Data API client libraries provide methods to help you use AuthSub in your web application. Specifically, there are methods for constructing the request URL, acquiring a single-use authentication token, exchanging the single-use token for a session token, and signing the request.

Note: The JavaScript client library has its own flavor of AuthSub, called AuthSubJS. For information on how to use AuthSubJS in your JavaScript applications, see Using "AuthSub" Authentication with the JavaScript Client Library.

Contents

1. Audience
2. Using AuthSub and the Google Data APIs without the client libraries
3. Working with AuthSub and the Google Data APIs: client library examples
   1. Decide what type of token to use (session=0 or session=1)
   2. Decide whether to register your web application (secure=0 or secure=1)
   3. Determine the scope of your data access
   4. Request a single-use authentication token
   5. Request a session token
   6. Use the session token
   7. Retrieving information about a session token
   8. Revoke a session token
   9. Additional Resources and Samples
4. Generating a self-signing private key and public certificate for use with secure AuthSub
   1. Generating keys using OpenSSL
   2. Generating keys using the Java keytool utility