These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE Technology Lab

 
  • Topic is locked indefinitely.
Previous page12
 

The IGB JS Callbacks

First post First post
Author
Previous Topic Next Topic
Steve Ronuken
Fuzzwork Enterprises
Vote Steve Ronuken for CSM
#21 - 2015-10-01 15:54:13 UTC
Jarno Midumulf wrote:
Steve Ronuken wrote:
Jarno Midumulf wrote:
Steve Ronuken wrote:

Jarno Midumulf wrote:
stuff.. read above


There are other options possible.

Without committing CCP to anything (as I like my legs unbroken), possibillities include a long poll based system or something Websocket based, so you get a notification when the client changes system.


Hmm.. Didn't think about that yet... could work to indeed.
but then again the multiple clients on one system..



Doesn't matter. the web socket or long poll would be talking to CCP's servers. nothing to do with the client.


then you would need the api off the player.. if not you can track any one you want... or you can make a application that can spam any one you want whit lets say fitting windows.. imagine that in a combat situation..
and whit the igb you don't need the api to get the location off the player you just read out the header



Welcome to CREST.

The player logs onto an application, with the SSO, with a specific scope requested.

The application gets those scope details, along with a key to get at them. (Access token). That token can be used to form the connection to CCP's servers, to have notifications sent over the established connection.


Yes, if a scope allowed for something to be done in your client, a malicious application could do something like spam windows. But a malicious site can do that already.

Woo! CSM XI!

Fuzzwork Enterprises

Twitter: @fuzzysteve on Twitter
Jarno Midumulf
Riders of Sleipnir
Backdoor Crashers
#22 - 2015-10-01 17:31:50 UTC
Steve Ronuken wrote:
Jarno Midumulf wrote:

then you would need the api off the player.. if not you can track any one you want... or you can make a application that can spam any one you want whit lets say fitting windows.. imagine that in a combat situation..
and whit the igb you don't need the api to get the location off the player you just read out the header



Welcome to CREST.

The player logs onto an application, with the SSO, with a specific scope requested.

The application gets those scope details, along with a key to get at them. (Access token). That token can be used to form the connection to CCP's servers, to have notifications sent over the established connection.


Yes, if a scope allowed for something to be done in your client, a malicious application could do something like spam windows. But a malicious site can do that already.



:| brain must be f%#^& from the flight back home... the SSO will be good for it indeed.
The only problem i have whit the SSO atm is that some players don't trust login whit it on websites..
but that hopefully will change over time..
Arrek Lemmont
Center for Advanced Studies
Gallente Federation
#23 - 2015-10-02 06:44:50 UTC
I'd really like CCP to provide a list of the systems and stations in the character's current route. This would enable dotlan to show the current route on their maps.
Pete Butcher
The Scope
Gallente Federation
#24 - 2015-10-02 09:01:27 UTC
What about market use cases? Especially opening market details, showing info etc. This cannot be done in an OOG browser and it helps a lot of people.

http://evernus.com - the ultimate multiplatform EVE trade tool + nullsec Alliance Market tool
Jarno Midumulf
Riders of Sleipnir
Backdoor Crashers
#25 - 2015-10-02 09:05:20 UTC
Pete Butcher wrote:
What about market use cases? Especially opening market details, showing info etc. This cannot be done in an OOG browser and it helps a lot of people.


well.. after the login you could send something to the crest server and then it will open in eve ?
Pete Butcher
The Scope
Gallente Federation
#26 - 2015-10-02 09:06:46 UTC
Jarno Midumulf wrote:
Pete Butcher wrote:
What about market use cases? Especially opening market details, showing info etc. This cannot be done in an OOG browser and it helps a lot of people.


well.. after the login you could send something to the crest server and then it will open in eve ?


How - that's the question. Also note that interacting with the client by some external app can be considered botting.

http://evernus.com - the ultimate multiplatform EVE trade tool + nullsec Alliance Market tool
Kali Izia
GoomWaffe
#27 - 2015-10-02 09:22:45 UTC  |  Edited by: Kali Izia
Pete Butcher wrote:
Jarno Midumulf wrote:
Pete Butcher wrote:
What about market use cases? Especially opening market details, showing info etc. This cannot be done in an OOG browser and it helps a lot of people.


well.. after the login you could send something to the crest server and then it will open in eve ?


How - that's the question. Also note that interacting with the client by some external app can be considered botting.

I believe the current plan is still to add push functionality to CREST. So instead of your app calling a javascript function, it hits a CREST endpoint which tells your client to open a window.
Foxfour posted a video with saved fits that should give an idea of how it works: https://www.youtube.com/watch?v=ZBQaq6iUTQU
All of the JS callbacks should eventually be replaced by CREST equivalents doing something like that.
Pete Butcher
The Scope
Gallente Federation
#28 - 2015-10-02 09:29:38 UTC
Kali Izia wrote:
Pete Butcher wrote:
Jarno Midumulf wrote:
Pete Butcher wrote:
What about market use cases? Especially opening market details, showing info etc. This cannot be done in an OOG browser and it helps a lot of people.


well.. after the login you could send something to the crest server and then it will open in eve ?


How - that's the question. Also note that interacting with the client by some external app can be considered botting.

I believe the current plan is still to add push functionality to CREST. So instead of your app calling a javascript function, it hits a CREST endpoint which tells your client to open a window.
Foxfour posted a video with saved fits that should give an idea of how it works: https://www.youtube.com/watch?v=ZBQaq6iUTQU
All of the JS callbacks should eventually be replaced by CREST equivalents doing something like that.


Well, this is mighty inconvenient for the user, but assuming CREST servers won't clog up as usual, it might be good enough.

http://evernus.com - the ultimate multiplatform EVE trade tool + nullsec Alliance Market tool
Jarno Midumulf
Riders of Sleipnir
Backdoor Crashers
#29 - 2015-10-02 09:30:15 UTC
Pete Butcher wrote:
Jarno Midumulf wrote:
Pete Butcher wrote:
What about market use cases? Especially opening market details, showing info etc. This cannot be done in an OOG browser and it helps a lot of people.


well.. after the login you could send something to the crest server and then it will open in eve ?


How - that's the question. Also note that interacting with the client by some external app can be considered botting.


that's the part they need to make if they remove the IGB...
its not hard to send data to a server.. but the implementation off it on CCP's side is tricky since the users don't like a long delay between the button press and the opening off a window ingame.
and also all the other parts that come along whit it.

If you send it to a CCP server first.. then you don't modify the client right?
dexington
Caldari Provisions
Caldari State
#30 - 2015-10-06 00:27:50 UTC
Steve Ronuken wrote:

The player logs onto an application, with the SSO, with a specific scope requested.

The application gets those scope details, along with a key to get at them. (Access token). That token can be used to form the connection to CCP's servers, to have notifications sent over the established connection.


Does the token expire when the players logs out using SSO?, or do you give the application access to the current header information until you actively revoke them?

For all the flaws the IGB has, at least it easy to understand when you are submitting the headers and when you are not, at least from the browser open or closed perspective.

I'm a relatively respectable citizen. Multiple felon perhaps, but certainly not dangerous.
Steve Ronuken
Fuzzwork Enterprises
Vote Steve Ronuken for CSM
#31 - 2015-10-06 11:18:19 UTC
dexington wrote:
Steve Ronuken wrote:

The player logs onto an application, with the SSO, with a specific scope requested.

The application gets those scope details, along with a key to get at them. (Access token). That token can be used to form the connection to CCP's servers, to have notifications sent over the established connection.


Does the token expire when the players logs out using SSO?, or do you give the application access to the current header information until you actively revoke them?

For all the flaws the IGB has, at least it easy to understand when you are submitting the headers and when you are not, at least from the browser open or closed perspective.



If you log in with the full process, then yes, they get a refresh token which allows them to track you until you revoke it.

If you log on with the implicit process, then it's just a single access token, which expires in 20 minutes.

What I'm planning on writing is a client which you'll run locally, which will be able to upload to a number of sites, for a number of characters. And will be easy to turn on and off.

Woo! CSM XI!

Fuzzwork Enterprises

Twitter: @fuzzysteve on Twitter
Kelath Erebus
Federal Navy Academy
Gallente Federation
#32 - 2015-12-30 22:35:52 UTC  |  Edited by: Kelath Erebus
Perhaps a simple method would be to create what you could call a web beacon app from the menu, in place of the full browser app, since you're trying to remove the browser. With the beacon app you can add URLs, the only thing the beacon app does is send header data to the URLs (or a JSON post or something) when ever the player changes locations. You could then also expand upon such a beacon app over time to allow the player add additional options to the header, a custom field, fleet information, etc. And it would be transferred securely from the client to the sites via the beacon app without needing all the authentication, etc. required when requesting said data from outside the servers.

Just my two cents.
Louis Vitton
Viziam
Amarr Empire
#33 - 2015-12-31 05:56:57 UTC
Jarno Midumulf wrote:
If you send it to a CCP server first.. then you don't modify the client right?


This is correct.
Previous page12