[Fiware-fia-fundingbox-integration] [FIGLOBAL] Re: SSO integration

Filippo Giuffrida filippo.giuffrida at eng.it
Thu Aug 24 11:07:29 CEST 2017


Dear FundingBox Team,

since this morning the server of http://api.fundingbox.com/users/me 
doesn't seem to work.

The Ajax call returns a pending status that ends with a 502 error


Yesterday evening it was working fine.

Please, could you take a look and give me  a feedback ?

Thank you in advance

Best Regards

/Filippo/


Il 24/08/2017 01:43, Jorge Fernandez ha scritto:
> Hi Filippo, thanks for reporting this. It's quite strange, I didn't 
> had time to check it properly, but looks like the two systems are 
> using different cost parameters in their hashing functions, but not 
> always, and this is the strange thing, because at least my account is 
> working exactly the same in both systems.
>
> Anyway, thanks for telling us ;) , we'll investigate it and fix it asap.
>
> Regards,
> Jorge
>
> On Wed, Aug 23, 2017 at 10:51 AM, Filippo Giuffrida 
> <filippo.giuffrida at eng.it <mailto:filippo.giuffrida at eng.it>> wrote:
>
>     Dear FundingBox Team,
>
>     I followed the Jorge's suggestions, getting these results:
>
>       * I cannot reset my password for the account
>         filippo.giuffrida at eng.it <mailto:filippo.giuffrida at eng.it>
>
>       * I clicked on the link shown in the following image
>
>
>       * I tried to use the same email address
>         (filippo.giuffrida at eng.it <mailto:filippo.giuffrida at eng.it>)
>         and the system (rightly) gave my an error
>
>       * I changed the email address in filgiuffrida at outlook.it
>         <mailto:filgiuffrida at outlook.it>, the account was created
>         successfully and the login works fine, redirecting to
>         http://localhost:3000/authorize.html#access_token=599d3fc4af59fc84788b4567&token_type=Bearer&expires=1504773700&expires_in=1296000
>         <http://localhost:3000/authorize.html#access_token=599d3fc4af59fc84788b4567&token_type=Bearer&expires=1504773700&expires_in=1296000>
>       * I tried to create an other account by the page
>         https://fundingbox.com/signin
>
>
>         and the account l346261 at mvrht.net <mailto:l346261 at mvrht.net>
>         gave me the same problems of filippo.giuffrida at eng.it
>         <mailto:filippo.giuffrida at eng.it> (I cannot use it on
>         http://accounts.fundingbox.com/login
>         <http://accounts.fundingbox.com/login>)
>
>     I got the following conclusions:
>
>      1. If you create the account by https://fundingbox.com/signin,
>
>           * it works fine  on https://fundingbox.com/signin
>
>           * it doesn't work on http://accounts.fundingbox.com/login
>             <http://accounts.fundingbox.com/login>
>
>      2. If you create the account by
>         http://accounts.fundingbox.com/login
>         <http://accounts.fundingbox.com/login>,
>
>           * it works fine  on http://accounts.fundingbox.com/login
>             <http://accounts.fundingbox.com/login>
>           * it works fine  on https://fundingbox.com/signin
>
>     In this way I'm able to proceed with my development, but we should
>     keep in mind that this account managementisn't working fine
>     andwith these bugs  it cannot be used in a production context.We
>     need to solve these problems, do you agree ?
>
>     Best Regards
>
>     /Filippo/
>
>     Il 22/08/2017 23:21, Jorge Fernandez ha scritto:
>>     Hi Filippo, please try again, reseting your password here:
>>     http://accounts.fundingbox.com/login
>>     <http://accounts.fundingbox.com/login>
>>     I'll be out till Sept. 1, but I'll try to check the email from
>>     time to time, so you can contact me or try to contact my
>>     colleague Jose: jose.alonso at fundingbox.com
>>     <mailto:jose.alonso at fundingbox.com>
>>
>>     Regards,
>>     Jorge
>>
>>     On Tue, Aug 22, 2017 at 3:16 PM, Filippo Giuffrida
>>     <filippo.giuffrida at eng.it <mailto:filippo.giuffrida at eng.it>> wrote:
>>
>>         Hi Jorge,
>>
>>         I'm trying to use the example provided by you.
>>
>>         I've created an account on https://fundingbox.com/ with email
>>         filippo.giuffrida at eng.it <mailto:filippo.giuffrida at eng.it>,
>>         I've verified the email and I access fine on
>>         https://fundingbox.com/
>>
>>         I've tried to access by a blank browser to
>>         http://accounts.fundingbox.com/authorize?client_id=597867a6e6c736834bd0cd1a&response_type=token
>>         <http://accounts.fundingbox.com/authorize?client_id=597867a6e6c736834bd0cd1a&response_type=token>
>>         , it redirects to http://accounts.fundingbox.com/login
>>         <http://accounts.fundingbox.com/login> where the following
>>         form appears
>>
>>
>>
>>         I've tried to access by the account filippo.giuffrida at eng.it
>>         <mailto:filippo.giuffrida at eng.it>, but it doesn't work, I got
>>         the message "*Your username or password are incorrect, please
>>         try again."*
>>
>>         I've also tried to create an account by the link "Create an
>>         account" but it links to #
>>
>>         Please, could you take a look ?
>>
>>         Thank you in advance
>>
>>         Best Regards
>>
>>         /Filippo/
>>
>>
>>
>>
>>         Il 26/07/2017 18:15, Jorge Fernandez ha scritto:
>>>         Hi Filippo,
>>>
>>>         I've prepared a brief document and a very basic example
>>>         using the "implicit grant" flow.
>>>
>>>         Example:
>>>         https://drive.google.com/file/d/0B29v6b3mGXyUUllZczNYRmsyZ1k/view?usp=sharing
>>>         <https://drive.google.com/file/d/0B29v6b3mGXyUUllZczNYRmsyZ1k/view?usp=sharing>
>>>         Document:
>>>         https://docs.google.com/document/d/14Bjn6ibrOgmq1P0sx5hDh_U98f5ypLOqUniy7Vpunvg/edit?usp=sharing
>>>         <https://docs.google.com/document/d/14Bjn6ibrOgmq1P0sx5hDh_U98f5ypLOqUniy7Vpunvg/edit?usp=sharing>
>>>
>>>         This is probably the easier one to implement, but if you
>>>         prefer to use a different grant type just tell me and we can
>>>         prepare a different example.
>>>
>>>         The example is very basic, using only javascript.
>>>         If you use php in your laptop you can run it with this
>>>         command: php -S localhost:3000
>>>         If not, you'll need to upload the files to a web server or
>>>         run it with node, etc...
>>>
>>>         Here are the credentials you'll need to use our Accounts
>>>         service:
>>>
>>>         *authorization_url*:
>>>         http://accounts.fundingbox.com/authorize
>>>         <http://accounts.fundingbox.com/authorize>
>>>         *client_id*: 597867a6e6c736834bd0cd1a
>>>         *client_secret (not needed if using the implicit grant
>>>         type)*: mac974348wncw084309du7tcnw084tcw846tndw86tbw
>>>
>>>         The URI to redirect to after the user grants/denies
>>>         permission is : *http://localhost:3000/authorize
>>>         <http://localhost:3000/authorize>*
>>>         If you need to change it you'll have to ask me to do it.
>>>
>>>         After the user granted permission you'll receive and
>>>         access_token and you should use it to call our API to get
>>>         the user details like the email, username, etc...
>>>         This can be done calling this REST method: *(GET)
>>>         http://api.fundingbox.com/users/me
>>>         <http://api.fundingbox.com/users/me>* (including a header
>>>         "Authorization": access_token)
>>>
>>>         If you need any help or examples to implement this just tell
>>>         me :)
>>>
>>>         Regards,
>>>         Jorge
>>>
>>>         On Wed, Jul 26, 2017 at 10:59 AM, Jorge Fernandez
>>>         <jorge at fundingbox.com <mailto:jorge at fundingbox.com>> wrote:
>>>
>>>             Hi Filippo, sorry for my late response, I'm been out
>>>             since friday.
>>>
>>>             We have and OAuth2 authentication service with the
>>>             following grant types:
>>>
>>>             Authorization code grant
>>>             Implicit grant
>>>             Resource owner credentials grant
>>>             Client credentials grant
>>>             Refresh token grant
>>>
>>>             I guess the simplest implementation would be use the
>>>             "implicit grant" option, since it's quite simple to
>>>             implement from scratch.
>>>             We are now preparing some documentation and examples,
>>>             and I hope to sent them to you during the day.
>>>
>>>             Regards,
>>>             Jorge
>>>
>>>             On Tue, Jul 25, 2017 at 7:03 PM, Filippo Giuffrida
>>>             <filippo.giuffrida at eng.it
>>>             <mailto:filippo.giuffrida at eng.it>> wrote:
>>>
>>>                 Dear Jorge,
>>>
>>>                 did you receive the following email, that I sent to
>>>                 fiware-fia-fundingbox-integration at lists.fiware.org
>>>                 <mailto:fiware-fia-fundingbox-integration at lists.fiware.org>
>>>                 ?
>>>
>>>                 Please, could you let us know ?
>>>
>>>                 Thank you in advance
>>>
>>>                 Best Regards
>>>
>>>                 /Filippo/
>>>
>>>                 -------- Messaggio Inoltrato --------
>>>                 Oggetto: 	SSO integration
>>>                 Data: 	Mon, 24 Jul 2017 16:11:09 +0200
>>>                 Mittente: 	Filippo Giuffrida
>>>                 <filippo.giuffrida at eng.it>
>>>                 <mailto:filippo.giuffrida at eng.it>
>>>                 A:
>>>                 fiware-fia-fundingbox-integration at lists.fiware.org
>>>                 <mailto:fiware-fia-fundingbox-integration at lists.fiware.org>
>>>
>>>
>>>
>>>
>>>                 Dear Jorge,
>>>
>>>                 as Giovanni wrote in a previous mail, one of the
>>>                 first steps of the our integration should be:
>>>
>>>                   * Integration with FundingBox via OAuth 2.0 or CAS
>>>                     (to be finally agreed, after information sent by
>>>                     Jorge)
>>>
>>>                 Currently our tool doesn't provide a native module
>>>                 to use OAuth 2.0 as SSO system, so we should develop
>>>                 it from scratch.
>>>
>>>                 An alternative route that allows us to reduce the
>>>                 time for putting the SSO into operation is the use
>>>                 of CAS.
>>>                 <https://en.wikipedia.org/wiki/Central_Authentication_Service>
>>>
>>>
>>>                 Does FundingBox implement the CAS protocol ?
>>>
>>>                 Please, could you let us know ?
>>>
>>>                 Thank you in advance
>>>
>>>                 Best Regards
>>>
>>>                 /Filippo/
>>>
>>>
>>>                 -- 
>>>                 *Filippo Giuffrida*
>>>                 Researcher, Member of the Public Administration
>>>                 Innovation Unit
>>>                 Research and Development Lab.
>>>                 filippo.giuffrida at eng.it
>>>                 <mailto:filippo.giuffrida at eng.it>
>>>
>>>                 *Engineering Ingegneria Informatica spa*
>>>                 Viale Regione Siciliana N.O. n.7275
>>>                 90146, Palermo (Italy)
>>>                 Direct phone +39 - 091 7511842
>>>                 <tel:+39%20091%20751%201842>
>>>                 Operator +39 - 091 7511711 <tel:+39%20091%20751%201711>
>>>                 www.eng.it <http://www.eng.it>
>>>                 -- 
>>>                 *Filippo Giuffrida*
>>>                 Researcher, Member of the Public Administration
>>>                 Innovation Unit
>>>                 Research and Development Lab.
>>>                 filippo.giuffrida at eng.it
>>>                 <mailto:filippo.giuffrida at eng.it>
>>>
>>>                 *Engineering Ingegneria Informatica spa*
>>>                 Viale Regione Siciliana N.O. n.7275
>>>                 90146, Palermo (Italy)
>>>                 Direct phone +39 - 091 7511842
>>>                 <tel:+39%20091%20751%201842>
>>>                 Operator +39 - 091 7511711 <tel:+39%20091%20751%201711>
>>>                 www.eng.it <http://www.eng.it>
>>>
>>>
>>>
>>
>>         -- 
>>         *Filippo Giuffrida*
>>         Researcher, Member of the Public Administration Innovation Unit
>>         Research and Development Lab.
>>         filippo.giuffrida at eng.it <mailto:filippo.giuffrida at eng.it>
>>
>>         *Engineering Ingegneria Informatica spa*
>>         Viale Regione Siciliana N.O. n.7275
>>         90146, Palermo (Italy)
>>         Direct phone +39 - 091 7511842 <tel:+39%20091%20751%201842>
>>         Operator +39 - 091 7511711 <tel:+39%20091%20751%201711>
>>         www.eng.it <http://www.eng.it>
>>
>>
>
>     -- 
>     *Filippo Giuffrida*
>     Researcher, Member of the Public Administration Innovation Unit
>     Research and Development Lab.
>     filippo.giuffrida at eng.it <mailto:filippo.giuffrida at eng.it>
>
>     *Engineering Ingegneria Informatica spa*
>     Viale Regione Siciliana N.O. n.7275
>     90146, Palermo (Italy)
>     Direct phone +39 - 091 7511842 <tel:+39%20091%20751%201842>
>     Operator +39 - 091 7511711 <tel:+39%20091%20751%201711>
>     www.eng.it <http://www.eng.it>
>
>

-- 
*Filippo Giuffrida*
Researcher, Member of the Public Administration Innovation Unit
Research and Development Lab.
filippo.giuffrida at eng.it <mailto:filippo.giuffrida at eng.it>

*Engineering Ingegneria Informatica spa*
Viale Regione Siciliana N.O. n.7275
90146, Palermo (Italy)
Direct phone +39 - 091 7511842
Operator +39 - 091 7511711
www.eng.it <http://www.eng.it>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/fiware-fia-fundingbox-integration/attachments/20170824/0b420377/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mhdpaloaofgkanlj.png
Type: image/png
Size: 24007 bytes
Desc: not available
URL: <https://lists.fiware.org/private/fiware-fia-fundingbox-integration/attachments/20170824/0b420377/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: nmdbcokakomjljpo.png
Type: image/png
Size: 10519 bytes
Desc: not available
URL: <https://lists.fiware.org/private/fiware-fia-fundingbox-integration/attachments/20170824/0b420377/attachment-0007.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: naajnndnjomfjgic.png
Type: image/png
Size: 13374 bytes
Desc: not available
URL: <https://lists.fiware.org/private/fiware-fia-fundingbox-integration/attachments/20170824/0b420377/attachment-0008.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: nbjhplbdnnmjmigb.png
Type: image/png
Size: 11917 bytes
Desc: not available
URL: <https://lists.fiware.org/private/fiware-fia-fundingbox-integration/attachments/20170824/0b420377/attachment-0009.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ikkpanfeccadmmoc.png
Type: image/png
Size: 17467 bytes
Desc: not available
URL: <https://lists.fiware.org/private/fiware-fia-fundingbox-integration/attachments/20170824/0b420377/attachment-0010.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: fmpoddjnaajjjped.png
Type: image/png
Size: 18176 bytes
Desc: not available
URL: <https://lists.fiware.org/private/fiware-fia-fundingbox-integration/attachments/20170824/0b420377/attachment-0011.png>


More information about the Fiware-fia-fundingbox-integration mailing list

You can get more information about our cookies and privacy policies clicking on the following links: Privacy policy   Cookies policy