Blog

Sunday, May 28, 2023Print Subscribe

Developers rely on a variety of platforms to deliver mobile apps. It is easy to set up the user authorization with an application created with Code On Time. The embedded RESTful API Engine implements OAuth 2.0 protocol with multiple authorization flows. Native applications can be programmed to have enterprise level security with little effort. The lesson explains how to configure Postman, the popular API development tool, to get the access tokens from the RESTful Backend Application. Any native client app will implement a similar pattern of authorization.

Learn to acquire access tokens in the native app via OAuth 2.0 Authorization Code flow with PKCE.

Configure New Token section allows setup of a separate request to capture a new access token from the backend application. — Postman provides the means of capturing the access tokens from any OAuth 2.0 compliant identity server. RESTful API Engine of apps created with Code On Time has the built-in support for OAuth 2.0 authorization flows. Developers can configure Postman to capture the access tokens from a Code On Time application.

Postman exchanges the authorization code for an access token with the backend application. The response is presented in the Manage Access Tokens window. — Developers can name the new *Access Token* and use it for development purposes in the *Manage Access Tokens* window. Typically the name of the token is the *username*.

Labels: OAuth2, Security

Saturday, May 27, 2023Print Subscribe

Hello, App Studio!

The new tooling for developers is being introduced in the release 8.9.29.0. It took a long time to put together a collection of features and technology that make up the groundbreaking App Studio, the integrated development environment built into live applications created with Code On Time app builder.

App Studio Roadmap outlines the features and delivery schedule. We hope you like it!

The studio mode is activated automatically when the app is started on the *localhost* address. The space surrounding the app boundaries provides quick access to the App Studio tools. Developers can instantly inspect the user interface elements of the live app to locate the corresponding definition in the application configuration. Design changes, runtime settings, data models, and navigation system can be modified and previewed instantly. A single click will bring up the app source code in the File Explorer or load the code in the Microsoft Visual Studio. Another click will start the publishing process and preview the production app in the separate browser tab.

Labels: News

Friday, May 26, 2023Print Subscribe

Lesson: Device Authorization Flow

OAuth 2.0 specifies the Device Authorization Grant, the protocol that makes it simple connecting devices with the limited input capabilities to user accounts and data. Code On Time produces apps with the built-in RESTful API Engine and multiple OAuth 2.0 authorization flows, including the Device Authorization Grant. Your applications are automatically future-proof and ready to integrate with the physical world of IoT. Learn how to enter the username and password on a control panel of a microwave or air conditioning unit.

Integrate apps in the physical world of your users with the Device Authorization Grant flow.

This HTML page implements the "Cool Gadget" device. It will display the user identity information and the most expensive product from https://demo.codeontime.com when the user authorizes the "gadget" with the OAuth Device Authorization Grant flow. Users must utilize their personal device to visit the URL specified below the code in the middle of the "gadget" screen. The "gadget" activates when a user enters the code and confirms their identity.

Labels: Device, OAuth, RESTful

Learn to acquire an access token in the native apps with the help of OAuth 2.0 Authorization Code flow with PKCE.