Google I/O 2008 - Authenticating to Google Data Services

Authenticating to Google Data Services
Jeff Fisher, Jeff Scudder (Google), and Bing Yang (Salesforce.com)

Get over that first hurdle in your prototype! Authenticating a user is a tricky, but necessary step for most applications that interact with Google services. This session will discuss the available authentication options, their limitations, and some advanced use cases such as Google Apps domains and signed requests.

Participants should be familiar with at least one GData API. Familiarity with public-key cryptography will be helpful, but is not required.

Category:

Science & Technology

Tags:

• Google
• I/O
• IO2008
• Data
• APIs
• Authentication
• gcvio052008
• plid6D9B701069B4F2F4

[VondaFononono]

I would love to authenticate to Google Data Service.

[RealGoonieKid]

lol. you said SWALLOW. funny.

[benf101]

You can hear him swallow at 15 seconds. Cool.

[nprlove1]

SO HAWT!!!

[ganezt]

i was looking for this from 1 year ! i read lotsa a docs on this topic but wanted a clear explantion. now i got it !! thx

[rayie31]

Thanks for the great presentation. RE: the question about tokens being compromised on consuming apps, I think the guy who asked missed the idea that this whole mechanism is only valid if the user trusts the consuming app's security capabilities to begin with, because the app could store the gdata it's accessing, which could also be compromised. Jeff F handled the question very gracefully though. Great job!. And great work on AuthSub and OAuth..it's awesome!