Comment 1 for bug 1457298

Revision history for this message
Alberto Mardegan (mardy) wrote :

Hi! The signon-plugin-oauth only handles OAuth 1.0 and 2.0. Since yupoo uses its own non-standard authentication, you cannot use the signon-plugin-oauth with it.

You need to write a signon plugin specialized for yupoo. Unfortunately this is not well documented, but at least there are a few examples of signon plugins around.
The more complex is certainly signon-plugin-oauth, but here's a few simpler ones:

https://gitlab.com/accounts-sso/signon-plugin-digest
https://gitlab.com/accounts-sso/signon-plugin-sasl
(click on the "Files" tab on the left to see the project files)

I had a look at the yupoo documentation at http://dev.yupoo.com/apidoc2/www/ but since it's in Chinese, I didn't understand much about it. It appears that it all starts with this call (please correct me if I'm wrong):

http://www.yupoo.com/services/auth/?api_key=[api_key]&perms=[perms]&api_sig=[api_sig]

The above link should be opened in a web view, where the user will be asked to authenticate and authorize the app, and then it will be redirected to the callback url, which will have the "frob" appended in a query item. Is my understanding correct?
And, what do you need in order to generate the "api_sig"?