Post on 10-May-2015
description
30 May 2014Bruno Pedro
The Importance of /me
pict
ure
© W
erne
r Kra
use
Bruno Pedro Web and Cloud Computing Technologist with over ten years’ experience. CTO of GetApp. Editor at APIUX.com.
http://brunopedro.com/
Web giants are waging a battle over your online identity. — WSJ, May 21 2014
Facebook and Google will eventually be removed from all Yahoo properties. – Reuters, March 5 2014
53%
Social login preferencesJanuary – March 2014
source: Gigya
Facebook business is about monetizing the people in their network. — Businessweek, 2009
Use Facebook to actually prefill data that your users might have to type. – Smashing Magazine
OAuth2 + proper scopes.
pict
ure
© W
erne
r Kra
use
/me is a way to expose information about the authorized user.
/me
‘me’ person ID
/account/verify_credentials
/user
What about your API?
What to expose• username
• user picture or avatar
• first name and last name
• language
• time zone
• country
What not to expose• e-mail address
• phone number
• billing information
• financial information
• mailing address
• current locationrisk
Use the appropriate OAuth2 scopes.
Use the appropriate OAuth2 scopes.
“access my basic information”
Expose safe information!
Offer a way to revoke permissions!
Questions?