Discuss Scratch

smileycreations15
Scratcher
1000+ posts

ScratchOAuth2 - A new way to verify Scratch users

ScratchOAuth2
ScratchVerifier is being deprecated, look at the bottom of this post to learn more.

ScratchOAuth2 is an implementation of the OAuth2 protocol for verifying Scratch users by kenny2scratch and Semisol (me) as Scratch does not have native support for it. The API + documentation is available at oauth2.scratch-wiki.info.
The source code is available on GitHub.

Features:
  • Allowing one login for potentially multiple sites
  • Fixing some of the flaws found in SV
  • Full implementation of redirect-flow OAuth2

Note to SV users:
ScratchVerifier will be responding with 410 Gone to all API requests on 31 May and on 30 June it will redirect to the deprecation notice.
9gr
Scratcher
1000+ posts

ScratchOAuth2 - A new way to verify Scratch users

Cool - Gonna test my website with it!

plz add my app thing

Last edited by 9gr (April 12, 2021 17:27:11)

CST1229
Scratcher
1000+ posts

ScratchOAuth2 - A new way to verify Scratch users

Hold on are you an admin on the scratch wiki? Normal users can't make wiki subdomains
9gr
Scratcher
1000+ posts

ScratchOAuth2 - A new way to verify Scratch users

CST1229 wrote:

Hold on are you an admin on the scratch wiki? Normal users can't make wiki subdomains
@kenny2scratch (who is an admin) is also developing this.
smileycreations15
Scratcher
1000+ posts

ScratchOAuth2 - A new way to verify Scratch users

CST1229 wrote:

Hold on are you an admin on the scratch wiki? Normal users can't make wiki subdomains
I am not. At all. Ken made the domain.
9gr
Scratcher
1000+ posts

ScratchOAuth2 - A new way to verify Scratch users

I'm trying the api and i don't understand what
Bearer <base64 token>
is. Is it a string? I kept trying but my nodejs program always fails on getting the user with a base64-encoded token.
smileycreations15
Scratcher
1000+ posts

ScratchOAuth2 - A new way to verify Scratch users

9gr wrote:

I'm trying the api and i don't understand what
Bearer <base64 token>
is. Is it a string? I kept trying but my nodejs program always fails on getting the user with a base64-encoded token.
It is a string.
You send this header:
Authorization: Bearer token

Token is:
Buffer.from(“HEX TOKEN”).toString(“base64”)

Also, did you try getting the RT/AT (Access/Refresh token) first? It is needed to do this. (Also ATs expire after a while so you need to refresh them every so often with an RT, the expiration of both are given in the get token endpoint/refresh token endpoint)
gdpr70f61245d597c25631fbb669
Scratcher
100+ posts

ScratchOAuth2 - A new way to verify Scratch users

Hmm, does this provide anything over FluffyScratch? It's interesting, but not sure where you plan to go with it in the future
9gr
Scratcher
1000+ posts

ScratchOAuth2 - A new way to verify Scratch users

Naleksuh wrote:

Hmm, does this provide anything over FluffyScratch? It's interesting, but not sure where you plan to go with it in the future
it looks much more secure imo, but fluffyscratch is easier and better in certain aspects.
smileycreations15
Scratcher
1000+ posts

ScratchOAuth2 - A new way to verify Scratch users

Naleksuh wrote:

Hmm, does this provide anything over FluffyScratch? It's interesting, but not sure where you plan to go with it in the future
SSO and secured by the Wiki (I can't do anything even if I want).

9gr wrote:

Naleksuh wrote:

Hmm, does this provide anything over FluffyScratch? It's interesting, but not sure where you plan to go with it in the future
it looks much more secure imo, but fluffyscratch is easier and better in certain aspects.
I will provide a library for JS.
smileycreations15
Scratcher
1000+ posts

ScratchOAuth2 - A new way to verify Scratch users

Bump
Raihan142857
Scratcher
1000+ posts

ScratchOAuth2 - A new way to verify Scratch users

smileycreations15 wrote:

Naleksuh wrote:

Hmm, does this provide anything over FluffyScratch? It's interesting, but not sure where you plan to go with it in the future
SSO and secured by the Wiki (I can't do anything even if I want).

9gr wrote:

Naleksuh wrote:

Hmm, does this provide anything over FluffyScratch? It's interesting, but not sure where you plan to go with it in the future
it looks much more secure imo, but fluffyscratch is easier and better in certain aspects.
I will provide a library for JS.
as far I can tell it's better because you can embed it in your webpage instead of redirecting to an ugly verification page
smileycreations15
Scratcher
1000+ posts

ScratchOAuth2 - A new way to verify Scratch users

Raihan142857 wrote:

smileycreations15 wrote:

Naleksuh wrote:

Hmm, does this provide anything over FluffyScratch? It's interesting, but not sure where you plan to go with it in the future
SSO and secured by the Wiki (I can't do anything even if I want).

9gr wrote:

Naleksuh wrote:

Hmm, does this provide anything over FluffyScratch? It's interesting, but not sure where you plan to go with it in the future
it looks much more secure imo, but fluffyscratch is easier and better in certain aspects.
I will provide a library for JS.
as far I can tell it's better because you can embed it in your webpage instead of redirecting to an ugly verification page
well its the same..

Last edited by smileycreations15 (Aug. 25, 2022 00:45:40)

smileycreations15
Scratcher
1000+ posts

ScratchOAuth2 - A new way to verify Scratch users

b u m p
9gr
Scratcher
1000+ posts

ScratchOAuth2 - A new way to verify Scratch users

bump because I want to
smileycreations15
Scratcher
1000+ posts

ScratchOAuth2 - A new way to verify Scratch users

9gr wrote:

bump because I want to
uhhhhh
bumps should have a roughly 24 hour delay

Powered by DjangoBB