Share information securely with your users on iGoogle

Following the recent iGoogle launch, today we announced new gadgets from MySpace, AOL, and Google Book Search. Users can read, manage, and compose AOL Mail messages, see their updates and inbox from MySpace , and manage their Google Book Search library collection.

To make this happen, the iGoogle team implemented a new authentication feature for gadgets called the OAuth Proxy. OAuth is a relatively new privacy-preserving security standard that defines how a user can give consent for their data on one website to be accessed by another website (or in this case a gadget running on iGoogle). This consent is done without iGoogle ever seeing the user's password on the other site, such as their AOL or MySpace password, and the gadget displays the user's data from the other site without storing any of it on Google's own servers (read more details about OAuth on our Security Blog).

While we started by working with a limited set of partners, this feature is open to sites of all shapes and sizes. So, if you work for an airline, a bank, an e-commerce vendor, or run a small web service and your users could benefit from easy access to their private information, please create an OAuth-enabled gadget. To do so, this overview will get you started on exposing an API that can be accessed using OAuth. If you already know which OAuth-enabled API you want to access, you can jump directly to the gadgets documentation. Additionally, to include a canvas view in your gadget, please see these instructions.

Posted by Don Loeb, Content Partnerships

Wednesday, November 19, 2008 at 10:21 AM

1 comment:

ridiculousrachael said...

That's pretty cool. Keep up the good work google!