如何实现简单的Android OAuth和服务器API

Question

i have an android app that sends data to my web server (data is processed by php and stored in mysql db). for security reasons, i need to verify that the user sending the data is who he/she says he/she is.

i do not want to verify login/password, i would rather use the phone's registered (account manager) google account with something like federated login. i played around with nick johnson's example for GAE , but it is specific for GAE based apps and does not permit integration with my own server API's, therefore authentication does not work (i get a google authToken, but it is meaningless for my server API).

from what i understand, the safest+simplest solution would be to use OAuth.

but i am completely stumped trying to understand OAuth (i understand its concepts, but have not been able to find any example that i could implement).

does anyone have anything like a functional example that i could play around with and tweak for my needs? thanx in advance!

Answer 1

if not done already, you could check this page which explains how to implement oauth server with php/mysql

http://phpmaster.com/creating-a-php-oauth-server/

if you play with symfony2 as backend

https://github.com/FriendsOfSymfony/FOSOAuthServerBundle

i hope this helped

Answer 2

每当用户首次登录或使用您的应用程序时，您都应捕获其设备的mac地址，并将其存储到数据库中，并且可以轻松地使用此mac地址对用户进行身份验证