Beginning SharePoint 2013 Development

Chapter 10

Overview of OAuth in SharePoint 2013

WHAT YOU WILL LEARN IN THIS CHAPTER:

• Getting to Know OAuth
• Discovering how SharePoint 2013 uses OAuth
• Seeing how to use OAuth in Apps for SharePoint

WROX.COM CODE DOWNLOADS FOR THIS CHAPTER

The wrox.com code downloads for this chapter are found at: http://www.wrox.com/WileyCDA/WroxTitle/productCd-1118495845.html on the Download Code tab. The code for this chapter is divided into the following major examples:

• SharePointTokenCacheApp.zip
• Tokens.zip
• S2SScript.txt

As you read in Chapter 9, “Overview of the Client-Side Object Model and REST APIs,” SharePoint 2013 provides a new, rich set of APIs that you can use to work with SharePoint data and functionality. Key to using these APIs is the ability to securely call them and receive access when doing so. Additionally, SharePoint provides the ability to secure content to groups and individuals, and it is critical that anyone calling code be subject to the same set of authorization criteria as anyone using the SharePoint Web browser user interface. This ensures information is kept secure and that only people with the correct privileges can access it. To do this effectively SharePoint 2013 has built-in support for the common and open authorization standard OAuth 2.0.

This chapter explains the new application authentication and authorization features available to developers. You will learn how applications can make calls to SharePoint to perform operations such as retrieving data as part ...