These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE Technology Lab

 
  • Topic is locked indefinitely.
123Next page
 

Limited Single Sign On Trial! Sign Up Here.

First post First post
Author
CCP FoxFour
C C P
C C P Alliance
#1 - 2014-05-12 16:39:29 UTC  |  Edited by: CCP Logibro
Hey guys,

If you watched the third party developer tools update presentation at Fanfest (which you can find here if you missed it: https://www.youtube.com/watch?v=twRDTraUvEU) or talked to some people that did you may have heard we are looking at starting a trial of the EVE SSO. As a summary though so that you do not have to watch a whole presentation to find out what is going on:


  • We would like to get several web sites to integrate the EVE SSO into their site.
  • We require web apps to ensure secret keys are not leaked.
  • Chosen sites may have more than 1 developer, but not lots either.
  • Chosen sites and developers must be willing to sign the new developer’s license agreement (after seeing it and agreeing its good, which it is).
  • Chosen sites must be open and neutral.
  • Chosen sites must be willing to put development time into this effort.
  • Chosen sites must be willing to work with us to improve the SSO endpoints and documentation.


If you feel like your site would fit these requirements and you want to get involved respond to this thread with the following information:

  • A link to your web site?
  • What will SSO do for your sites users? For example beyond user management does your site have a commenting system?
  • How many developers are working on your site


So, who is interested?

@CCP_FoxFour // Technical Designer // Team Tech Co

Third-party developer? Check out the official developers site for dev blogs, resources, and more.

Akrasjel Lanate
Immemorial Coalescence Administration
Immemorial Coalescence
#2 - 2014-05-12 16:47:22 UTC
CCP FoxFour wrote:

  • Chosen sites must be open and neutral.


  • Lol

    CEO of Lanate Industries

    Citizen of Solitude

    Two step
    Aperture Harmonics
    #3 - 2014-05-12 16:47:35 UTC
    I'm interested, but most of my uses would be private. How about if I work on a plugin for the eve-kb killboard to use SSO to authenticate comments?

    CSM 7 Secretary CSM 6 Alternate Delegate @two_step_eve on Twitter My Blog

    Maximus Aerelius
    PROPHET OF ENIGMA
    #4 - 2014-05-12 16:47:49 UTC
    Awesome idea!
    Steve Ronuken
    Fuzzwork Enterprises
    Vote Steve Ronuken for CSM
    #5 - 2014-05-12 16:48:53 UTC
    https://www.fuzzwork.co.uk/
    Addition of users, for storage of assets such as blueprints with specific values.
    Also would tie into evebloggers.com (but still on fuzzwork, due to the cert) for developing custom rss feeds, (unauthenticated, but with hashes to make them less detectable)
    Just me.

    (I'm also considering digging into wordpress, to see if I can put together a login system, to allow for commenting, using your eve account. That's still up in the air though)

    Woo! CSM XI!

    Fuzzwork Enterprises

    Twitter: @fuzzysteve on Twitter

    CCP FoxFour
    C C P
    C C P Alliance
    #6 - 2014-05-12 16:49:38 UTC
    Two step wrote:
    I'm interested, but most of my uses would be private. How about if I work on a plugin for the eve-kb killboard to use SSO to authenticate comments?


    I have heard word from a few others that are interested in that sort of thing and I believe we are totally up for that. The agreement would of course that the SSO only be used for that and the sites using the commenting system would also have to be under the limited trial.

    @CCP_FoxFour // Technical Designer // Team Tech Co

    Third-party developer? Check out the official developers site for dev blogs, resources, and more.

    Skutter Midumulf
    Proioxis Assault Force
    Rogue Caldari Union
    #7 - 2014-05-12 16:51:26 UTC  |  Edited by: Skutter Midumulf
    Woohoo! Great news!
    Skutter Midumulf
    Proioxis Assault Force
    Rogue Caldari Union
    #8 - 2014-05-12 16:52:15 UTC
    Also, I'd like to help Big smile
    This is alt
    Pandemic Horde Inc.
    Pandemic Horde
    #9 - 2014-05-12 16:57:45 UTC  |  Edited by: This is alt
    I am very much interested!

    http://eve.cognitive.io My site is basically a bunch of private financial tracking tools for me, which I plan/hope to make public at some point, as well as a few public tools like the margin calculator for finding trade items. link

    I would like to be able to offer a few of the private tools that require login to more people, as they are very useful for me to keep track of financial stuff.

    It's just me working on the site, but I am open for collaborating on stuff.

    PS: The site looks like absolute crap at the moment. I 'accidentally' started playing with the CSS and then decided I better work on my bachelors project which is due in a few weeks instead. :-P

    Also I promise to bug FoxFour more on IRC about everything related to this. :D

    <- flexd
    Two step
    Aperture Harmonics
    #10 - 2014-05-12 17:06:44 UTC
    CCP FoxFour wrote:
    Two step wrote:
    I'm interested, but most of my uses would be private. How about if I work on a plugin for the eve-kb killboard to use SSO to authenticate comments?


    I have heard word from a few others that are interested in that sort of thing and I believe we are totally up for that. The agreement would of course that the SSO only be used for that and the sites using the commenting system would also have to be under the limited trial.


    OK, then sign me up. I will probably put up a duplicate AHARM KB for testing, but our current one is at http://dontshootx.com/killboard

    CSM 7 Secretary CSM 6 Alternate Delegate @two_step_eve on Twitter My Blog

    scrambled
    Imperial Academy
    Amarr Empire
    #11 - 2014-05-12 17:22:02 UTC
    Might be interested for a new project I'm working on which isn't live yet, but... yeah.
    Chribba
    Otherworld Enterprises
    Otherworld Empire
    #12 - 2014-05-12 17:22:09 UTC  |  Edited by: Chribba
    eveboard I'm sure will be benefiting from this so I'd be interested for sure

    eveboard.com -
    - login would provide people with being able to team up their api keys/characters for easier managment (rather than logging in with each key - I'm sure I will figure out many other awesome uses too)
    -dev: only me

    /c

    ★★★ Secure 3rd party service ★★★

    Visit my in-game channel 'Holy Veldspar'

    Twitter @ChribbaVeldspar

    Squizz Caphinator
    Stribog Clade
    #13 - 2014-05-12 17:27:18 UTC  |  Edited by: Squizz Caphinator
  • A link to your web site?

  • https://zkillboard.com

  • What will SSO do for your sites users? For example beyond user management does your site have a commenting system?

  • The standard benefits of SSO will apply. zKillboard curently uses the Disqus commenting system, which can easily be augmented to use the SSO login with the selected character.

  • How many developers are working on your site

  • Two very active developers and numerous others who contribute to the code.

    Various projects I enjoy putting my free time into:

    https://zkillboard.com | https://evewho.com

    Calista Pirkibo
    Cloaky.Camp
    #14 - 2014-05-12 17:28:17 UTC  |  Edited by: Calista Pirkibo
    CCP FoxFour,

    I think my project would stand to benefit greatly from this feature.

    Quote:
    A link to your web site?

    http://www.eveping.com

    This is a system for sending pings to registered EVE pilots based on their corporation and alliance. It's completely free, requires a zero bitmask API to register/confirm identity. Works for all EVE Pilots, iOS & Droid with WP8 hopefully coming soon.

    Quote:
    What will SSO do for your sites users? For example beyond user management does your site have a commenting system?

    Currently EVEPing attempts to authenticate that the person registering has access to the EVE Online Account Username and Password. It does this by requiring a zero bitmask API. Based on a number of variables, EVEPing.com will give the user a new vCode. This vCode must replace the original vCode entered on the site. While this is a way to verify that the user registering for the account has access to the username and password, it can be a pain due to caching issues with the API.

    Also, it's necesarily to confirm identity for this website, to prevent any Tom, Richard and Harry from throwing a random API for a target alliance and gleaming intel (like www.eveskunk.com for example).

    Using a system like this would simplify the registration process for a site like eveping.com, completely eliminating the need for anything related to the API.

    Quote:
    How many developers are working on your site?

    1 - 2 (Depends on the day)
    Liu Ellens
    Sebiestor Tribe
    Minmatar Republic
    #15 - 2014-05-12 17:28:32 UTC
    Are there any requirements about the size of the site & it's userbase?
    I'm somewhat interested to integrate it into eve-upro (see sig), but that would be mainly an academic pursuit as I have pretty much zero users on it.

    Well, they oughta know what to do with them hogs out there for shure.

    Indalecia
    #16 - 2014-05-12 18:25:27 UTC  |  Edited by: Indalecia
    I'd like to apply Osmium.

    Osmium is a browser-based fitting tool (and yes, you can use it from the IGB too!). One of the cool features is that you can share a loadout only to your corpmates, alliances mates, or even people in your contact list with a certain standing threshold.

    Right now, for it to work users have to authenticate their account with an API key just to make sure they actually belong in the corporation/alliance they pretend to be in. And it's really not making for great user-friendliness, considering the API creation UI isn't terribly intuitive. SSO gets rid of the problem in a neat way.

    About 30% of all accounts are API-verified at the moment. SSO could help increase that percentage a lot and thus convince more corporations or alliances to switch to it to manage their doctrines and loadouts in one easy and convenient place.

    Depending on how much information the SSO sends you back (like something tied to the account, not the character), it would also make a decent anti-cheat system for votes (like people can't cheat and vote twice by using an alt, this kind of thing).

    Osmium is a free and libre project, and I am its main developer. I've had two other people making the occasional commit here and there so far.

    https://o.smium.org/ — v0.13.5 — A browser-based fitting tool and loadout sharing platform

    Daimian Mercer
    Deep Core Mining Inc.
    Caldari State
    #17 - 2014-05-12 20:37:08 UTC
    I would like to signup!

    https://tripwire.cloud-things.com/

    Tripwire - A wormhole mapping tool.

    Tripwire provides a way to share signature information quickly and efficiently. Sharing information is done via "groups" which can include a single character or an entire alliances and multiples of these including a group of 2 alliance and 5 corps not in either alliance but also 50 characters that are NPC corp.

    During registering and log-in an API check is performed to verify an account and place the account in the available groups.

    I am the sole developer., but frequently release patches to Tripwire weekly.

    Creator of Tripwire mapping tool - EVE-O thread

    Twitter | daimian.mercer@gmail.com

    Querns
    Science and Trade Institute
    Caldari State
    #18 - 2014-05-12 20:53:49 UTC
    Aw, dag, my laziness doesn't pay off, for once -- the project I'm working on would have been perfect for this. Oh well; good luck!

    This post was crafted by the wormhole expert of the Goonswarm Economic Warfare Cabal, the foremost authority on Eve: Online economics and gameplay.

    Lucia Denniard
    Half Empty
    xqtywiznalamywmodxfhhopawzpqyjdwrpeptuaenabjawdzku
    #19 - 2014-05-12 21:47:22 UTC
    I'd like to apply with one of my projects I'm reviving - http://timerboard.net/

    Originally it was a central timer board for multiple people groups to collaborate on, and I'd like to expand it to allow users to sign in and enter timers for sharing with other corporations and alliances.

    SSO would be a huge help in this because I wouldn't have to collect a ton of API keys and continually recheck them, or trust the ingame browser headers to not be faked. SSO would break down the barrier of entry and allow people to collaborate on organising fights and working together.

    The project itself is already MIT licensed and released in a simple form, I'd be extending this into a larger site to help people share timers. I might even go as far as to include some kind of mercenary hiring option where you can offer short term contracts on offensive and defensive timers.

    I'd be the main developer, but flexd has offered to help, and I may find someone else to lend a hand.
    Wacktopia
    State War Academy
    Caldari State
    #20 - 2014-05-12 22:07:03 UTC  |  Edited by: Wacktopia
    I would like to apply for the SSO trial with Fleet-Up.com. I am the founder of this website and service since it's conception nearly two years ago. Fleet-Up is a website designed to benefit the entire community. Group of all sizes use the service from small start-ups to major alliances. I sat in on the developer tools session at FanFest this year and was excited to hear FoxFour outline the current strategy for SSO.

    A link to your web site?
    http://fleet-up.com

    (IP that accesses the API will be 46.32.252.153 - I'm adding a custom header with the url in the next update following your request at fanfest)

    What will SSO do for your sites users?
    SSO will allow users to seamlessly access Fleet-Up without needing to manage a secondary login. At present I strongly advise users to use different authentication details to their EVE Online account. The reason for this is to ensure that their EVE account details remain secure.

    However, one of the side effects of users managing different logins for different websites and services is that some inevitably forget their login or don't provide sufficient information to be able to reset their account.

    SSO will help remove the requirement for users to manage a seperate login for Fleet-Up without compromising the security of their EVE online account. Initially SSO could be used as a fast-track or additional sign up / auth process but ultimately could replace both completely.

    How many developers are working on your site
    Currently, myself. You will see that Fleet-Up is actively developed and furthermore I have access to additional resource should this be a major requirement.

    Fleet-Up is currently developed using an agile development strategy and therefore SSO can be accommodated quickly and iteratively if required. I can also provide a testing and development environment for CCP developers to test the end points in action before I roll out any updates live to the community. You can be satisfied in the Fleet-Up implementation before it is released.


    • Willing to sign the new developer’s license agreement. - Not a problem, my email is fleetupeve@gmail.com.
    • Chosen sites must be open and neutral. - Fleet-Up is 100% neutral and is open to the entire community.
    • Chosen sites must be willing to put development time into this effort. Absolutely, the SSO would take top development rank. As you can see from recent updates to the side, Fleet-Up is being actively developed. In fact Fleet-Up development tends to take priority over game-time at present for me.
    • Eilling to work with us to improve the SSO endpoints and documentation. Certainly. Happy to get involved where I can to improve and polish the SSO offering.

    Kitchen sink? Seriousy, get your ship together -  Fleet-Up.com

    123Next page