Evangelist • Software Architect • Java Godfather • JCP Executive Committee Member • Eclipse UOMo Project Lead • DevOps Guy Werner Keil - Bio 3 mardi 13 novembre 12
and Fall • The precursors • From Seam Social to JSR 357 • What went Wrong? • Episode II : Standards in Social Media • The standards part • The non standard part • So what would be a Java Standard for Social Media ? 4 mardi 13 novembre 12
Agorava Demo • From JSR 357 to Agorava • Agorava architecture • Extending Agorava • Related JSR : Security & identity • Differences from other APIs and Frameworks • Episode IV: Agorava, the technical parts • Jackson Mapping Mixin • CDI in Agorava 0.5 • JsonSchema2Pojo • JAX-RS 2.0 client Framework in Agorava 1.0 • Episode V : Demo and Q&A 5 mardi 13 novembre 12
the Twitter API. With Twitter4J, you can easily integrate your Java application with Twitter. • Its author, Yusuke Yamamoto used to work at Twitter. While he did, he was briefly meant to represent Twitter in the Social JSR EG. • It’s light and based on Java 1.4 to be integrated in mobile app for instance mardi 13 novembre 12
OAuth function • It also contains configuration for a lot of Social Media • Only one dependency on Apache Common Codec • At the heart of Agorava 0.5 9 mardi 13 novembre 12
• Adds functionality common to users, content and permissions on top of Java EE 6. • Focus on Users and Permissions. • In about every project that uses DaliCore, users should be able to login with existing credentials (Facebook, Twitter, Google Connect,...) • Dali modules extend DaliCore 10 mardi 13 novembre 12
Agorava and is more mature • Spring Social module were used to create first agorava modules (thanks to OSS and ASL2) • But it’s Spring only module.... 11 mardi 13 novembre 12
2012 on Werner Keil initiative, Java Social was submitted to the JCP to become a JSR • It proposed to standardized access to Social Media in Java • It was voted down by 8 votes against 5 12 mardi 13 novembre 12
use REST as transmission protocol • Most of them transmit data in JSON format and some in XML • Identification & Authentication are almost always based on OAuth protocol mardi 13 novembre 12
(customer, book, order) • REST is based on low level HTTP concepts • Each resource has a unique identifier (an URI). 4 HTTP verbs can be applied to a uri : GET, POST, PUT, DELETE • Java has a standard to deal with REST: JAX-RS. Version 1.0 doesn’t provide client API yet. JAX-RS 2.0 will provide one 19 mardi 13 novembre 12
an application to act on the behalf of an user who granted its rights without giving awayher login / password • Developped by Twitter, Magnolia and Google, it was made standard by IETF in april 2010 under RFC 5849 • Version 2.0, simpler to use but often citicised by its too many implementation s was standardized in October 2012 under RFC 6749 and 6750. It’s already used by many actors (Facebook, Google, Microsoft) • All social Media are based on OAuth 1.0a or 2.0. • To use OAuth, one has to create an application on the targeted service to have an entry point for consumer 21 mardi 13 novembre 12
the OAuth Social Media service • Initialization : the right granting phase also called the OAuth Dance. At the end of the dance we obtain an access token (formed by a public and secret part) use in next step • Signature : each request is signed with access token and token identifying the OAuth application that was granted the rights mardi 13 novembre 12
a resource on the consuming service Consuming service server Social Media Service (where OAuth application is declared) Consuming service ask a request token tot he Social Media (using OAuth application keys). It also send a callback url user mardi 13 novembre 12
for a resource on the consuming service Consuming service server Social Media Service (where OAuth application is declared) token is returned by SM Consuming service ask a request token tot he Social Media (using OAuth application keys). It also send a callback url user mardi 13 novembre 12
for a resource on the consuming service Consuming service server Social Media Service (where OAuth application is declared) Consuming service redirect user on the social media login page token is returned by SM 4 Consuming service ask a request token tot he Social Media (using OAuth application keys). It also send a callback url user mardi 13 novembre 12
for a resource on the consuming service Consuming service server Social Media Service (where OAuth application is declared) Consuming service redirect user on the social media login page token is returned by SM 4 5 Consuming service ask a request token tot he Social Media (using OAuth application keys). It also send a callback url Once authenticated, social media redirects user on call back url with a verification code user mardi 13 novembre 12
for a resource on the consuming service Consuming service server Social Media Service (where OAuth application is declared) Consuming service redirect user on the social media login page token is returned by SM 4 5 Consuming service ask a request token tot he Social Media (using OAuth application keys). It also send a callback url Once authenticated, social media redirects user on call back url with a verification code 6 with the code and request token consuming service request an access token user mardi 13 novembre 12
for a resource on the consuming service Consuming service server Social Media Service (where OAuth application is declared) Consuming service redirect user on the social media login page token is returned by SM 4 5 Consuming service ask a request token tot he Social Media (using OAuth application keys). It also send a callback url Once authenticated, social media redirects user on call back url with a verification code 6 with the code and request token consuming service request an access token 7 Social media returns Access token user mardi 13 novembre 12
asks for a resource on the consuming service SSL is mandatory Consuming service server Social Media Service (where OAuth application is declared) user mardi 13 novembre 12
asks for a resource on the consuming service SSL is mandatory Consuming service server Social Media Service (where OAuth application is declared) Consuming service redirect user on the social media login page user 2 mardi 13 novembre 12
asks for a resource on the consuming service SSL is mandatory Consuming service server Social Media Service (where OAuth application is declared) Consuming service redirect user on the social media login page Once authenticated, social media redirects user on call back url with a verification code user 2 3 mardi 13 novembre 12
asks for a resource on the consuming service SSL is mandatory Consuming service server Social Media Service (where OAuth application is declared) Consuming service redirect user on the social media login page Once authenticated, social media redirects user on call back url with a verification code with the code and request token consuming service request an access token user 2 3 4 mardi 13 novembre 12
asks for a resource on the consuming service SSL is mandatory Consuming service server Social Media Service (where OAuth application is declared) Consuming service redirect user on the social media login page Once authenticated, social media redirects user on call back url with a verification code with the code and request token consuming service request an access token Social media returns Access token user 2 3 4 5 mardi 13 novembre 12
or any other API across Social Media • More than that. There is no Social Media that Guarantee : • Its API won’t change for a given period • backward compatibility when its API change mardi 13 novembre 12
and Rest request • Multi Social Media connexions • Polymorphic services to enforce standard on social Media • Connector definition for Social module • So this standard would be a kind Java Social Connector definition standard So what would be a standard for Social ? 34 mardi 13 novembre 12
was Seam Social part of Seam 3 JBoss project • In begining of 2012, Seam was stopped to be merged in Apache DeltaSpike • Agorava was born mainly from Seam Social after JSR 357 attempt • One of it’s goals is to be the missing POC for a new Java Social JSR mardi 13 novembre 12
• Identity attributes are properties of a digital subject • A digital subject is a digital representation of an entity that is an actor or target of a digital operation. • Privacy is the degree to which the availability of an entity’s identity attributes can be controlled • Trust is an evaluation of the reliability of a representation of a digital subject • An identity is a set of identity attributes that distinguish an entity 38 mardi 13 novembre 12
goals for Social Media • Attribute Service composed of attribute providers • specification will define contracts to facilitate repository integrations by third parties. • Reference Implementation will provide some specific integrations including those provided by contributors to Open Source project; Facebook, Twitter, and LinkedIn will be among the identity repositories considered for integration within the reference integration, as will their associated programming interfaces and protocols, including Facebook Connect, Google-ID and OAuth 2.0. 39 mardi 13 novembre 12
getResponseValues(graphResponse); user = (String) graphValues.get(userPropertyName); Iterator<String> it = graphValues.keys(); while (it.hasNext()) { String key = it.next(); final URI id = new URI(userInfoEndpoint + "/" + key); final Collection<String> names = new ArrayList<String>(); final Object value = graphValues.get(key); final IDAttributeValue attributeValue = new IDAttributeValue() { public Serializable getValue() { return (Serializable) value; } public Collection getValues() { return Collections.EMPTY_LIST; } }; } mardi 13 novembre 12
Media (identification, Post, etc...) • Dynamic discovery of Social Media modules (core detect what modules are available at startup) • Managing multiple Social Media connection at the same time • Provides high level services (and binding) to interact with Social Media mardi 13 novembre 12
part» of the framework • Modules are mainly REST API and JSON mapping • Today Agorava has a CDI implementation only • On the roadmap we plan to provide : • full Java SE support • JSR 330 (Guice and/or Spring) support 44 Agorava Core API Java SE Impl CDI impl @Inject impl Guice impl Spring impl Twitter Module LinkedIn Module Facebook Module Social Media X module mardi 13 novembre 12
the OAuth Dance : • Public and private keys of OAuth application • Callback URL • OAuth 2.0 scope • Name of the Social Media to which these settings are related public interface OAuthAppSettings { public String getApiKey(); public String getApiSecret(); public String getCallback(); public String getScope(); public String getSocialMediaName(); } mardi 13 novembre 12
uses OAuthAppSettings to get initatilized • There one can : • Create a RequestToken • Get the URL to start connexion • Get the Acces Token • Create OAuth signature public interface OAuthProvider { public OAuthToken getRequestToken(); public OAuthToken getAccessToken(OAuthToken tok, String ver); public void signRequest(OAuthToken tok, OAuthRequest req); public String getVersion(); public String getAuthorizationUrl(OAuthToken requestToken); public OAuthRequest requestFactory(RestVerb v, String uri); public OAuthToken tokenFactory(String token, String secret); } mardi 13 novembre 12
the root for each family of API in a given social media module • Some services provides more than ten API families (for instance Twitter) • So we need a concept to gather these families mardi 13 novembre 12
to : • Provide a gathering class for all API families of a given service • Be the entry point of generic functionalities across different Social Media • They also are the entry point of Social Media configuration public interface SocialMediaApiHub extends OAuthServiceAware, Serializable { public UserProfile getMyProfile(); public void resetConnection(); public boolean isConnected(); public String getVerifierParamName(); public String getSocialMediaName(); } mardi 13 novembre 12
handle the user part of an OAuth connexion : • RequestToken • Verifier • And last but not least AccessToken • OAuthSession keeps alos track of connected user identity 52 public interface OAuthSession extends Serializable { public OAuthToken getRequestToken(); public void setRequestToken(OAuthToken requestToken); public OAuthToken getAccessToken(); public void setAccessToken(OAuthToken accessToken); public String getVerifier(); public void setVerifier(String verifier); public void setUserProfile(UserProfile userProfile); public UserProfile getUserProfile(); public Annotation getServiceQualifier(); public boolean isConnected(); } mardi 13 novembre 12
new module for Agorava 0.5, you have to : • Create a Qualifier (annotation) tagued with @ServiceRelated meta annotation • Create a low level API class containing basic endpoints to the new Social service. The class should use the same name as qualifier • Extend AbstractSocialMediaApi to create the root class for all API families of the new Social Media • Extend AbstractSocialMediaApiHub to gather Api families and implements generic services • At minima create Service class to deal with user profile in the new service mardi 13 novembre 12
solution for JSON • Works with JAX-B anotations • Provides also Json parsing tools • Provides an elegant solution : the Mixin to configure mapping outside of the pojo 57 mardi 13 novembre 12
Create beans or injection points • modify beans or injection points • Cancel beans creation • More generally to analyse all beans and change them before the application is launch 70 mardi 13 novembre 12
manager is immutable (no dynamic bean in CDI) • Extensions will be launch when the application is launch • Extensions are also Beans mardi 13 novembre 12
Process Anotated Types Scan Archive Application Running After Deployment Validation Before Shutdown Undeploy Application Process Beans After Bean Discovery Process Injection Taget Process Observer Methods mardi 13 novembre 12
implements Extension • Add one or more method that Observes CDI lifecycle steps to modify Bean Manager content • Add this file in classpath META-INF/services/javax.enterprise.inject.spi.Extension in which you add qualified name of the extension class mardi 13 novembre 12
pat, BeanManager beanManager) { final AnnotatedType<X> annotatedType = pat.getAnnotatedType(); final Class<X> javaClass = annotatedType.getJavaClass(); final Package pkg = javaClass.getPackage(); // Support for @Veto if (annotatedType.isAnnotationPresent(Veto.class) || (pkg != null && pkg.isAnnotationPresent(Veto.class))) { pat.veto(); log.info("Preventing " + javaClass + " from being installed as bean due to @Veto annotation"); return; } } mardi 13 novembre 12
• Development has just started • It will deprecated Java Scribe in Agorava • OAuth filters has to be written for this client • Json 2 pojo schema • An easy way to generate pojo from Json • Demo 75 mardi 13 novembre 12
{ public boolean sendUpdate(String message); } public interface HasTimeline { public List<String> getTimeLine(); public List<String> getTimeLine(Date from, Date to); public List<String> getTimeLine(String fromId); } public class FacebookServicesHub extends AbstractSocialMediaApiHub implements HasUpdate, HasTimeline @Inject @Any Instance<HasUpdate> updatables; ... for (HasUpdate updatable : updatables) { updatable.sendUpdate(msg); } mardi 13 novembre 12
antoine_sd
akitok_
tokibito
hashitokyo
kdubois
ichimichi
mitchan
stefafafan
olgamaciaszek
yukukotani
databricksjapan
oracle4engineer
rakus_fe
colly
addyosmani
davidbonilla
mongodb
aleyda
jnunemaker
samanthasiow
notwaldorf
destraynor
kevinliebholz
zenorocha
chrisshort
