Oauth 2.0 (and Improved Oauth 1.0a) Documentation

Discussion in 'Shapeways API' started by imdaveho, Mar 31, 2017.

  1. imdaveho
    imdaveho Shapeways Employee Product Team
    Hi all,

    We recently released OAuth 2.0 out of preview along with documentation surrounding all topics related to authorization.

    developers.shapeways.com/learn/understanding-authorization

    This is the early start of a larger push to improve the on boarding experience with more content and channels to engage with us directly. Please excuse any formatting issues with the layout--we prioritized getting the content out there.

    What does OAuth 2.0 mean for me?
    https://developers.shapeways.com/learn/understanding-authorization#pros-cons

    The TL;DR is that OAuth 2.0 enables a lot more flows and makes it incredibly easy to get that elusive access token to start calling our endpoints. It also enables deeper integration with 3D tools like Autodesk programs and Blender on the desktop and web-based solutions like OnShape and Vectary.

    We think you're going to really love the new content we're thinking about putting out there, and we encourage you all to participate with growing the community. If you're interested in a livecast online workshop for working with the Shapeways API, please sign up here: https://goo.gl/forms/Pa662b5DK7UVQiPi1

    Hope to connect soon!
     
  2. stonysmith
    stonysmith Well-Known Member Moderator
    Dave.. did you suggest somewhere that we should setup a separate "application" for the 2.0 keys?
    Or, can you use both versions to access a single application?
     
  3. imdaveho
    imdaveho Shapeways Employee Product Team
    @stonysmith I suggested that during the preview stage (which lasted all but a week :p); then realized that we had already structured our backend to allow both OAuth 1.0a and OAuth 2.0 on the same app, so we pushed it out live to everyone.

    We are hoping that OAuth 2 will become the de facto use case, but don't have a date for when we deprecate OAuth 1, yet. So, in the meanwhile, they will work side by side.
     
  4. stonysmith
    stonysmith Well-Known Member Moderator
    FYI.. if anyone wants to use curl.. this will request your access token for you
    Code:
    curl -X POST --user client_id:client_secret  --data grant_type=client_credentials https://api.shapeways.com/oauth2/token
    
    No encoding of the client_id or client_secret is required.. just copy over what is listed on your "app".

    This new Oauth2 is MUCH simpler and so much less hassle that the older version.