Java back end: Guarantee two Facebook users are friends - java

I want to be able to get a user's friends and then store them inside of my database. The issue is with javascript sdk the friends would be sent to the client and then the client would send me the list of friends.This data can obviously be manipulated now so how do I guarantee these two people are really Facebook friends? I know of the php sdk, but I am using complete java for back-end and we have no plans to ever use php.

Just call Facebook API from your Java back-end server.
There are few libraries you can use:
http://facebook4j.org/en/index.html
or
http://restfb.com/

Related

How to connect android users to my database / web application?

I have wrote a simple web application with few tables. It has it's administration area where you can manage it's table. Basic CRUD operations.
However, I need to develop an Android application which will retrieve information from this web application trough API. So I am going to write a simple API methods for fetching data. Also there will be sometimes when Android user will save some of its data to database.
Android application needs to be able to list items stored in database and bookmark some of those items over HTTP.
To me problem is how to implement SingIn / SignOut operations using Android's Google account. For example, application GMail is always signed in (at least on my device) and I want my application to be always signed in.
Then, how can I manage what items user bookmarked? Should I create a table android_bookmarked_items (android_user_id, item_id)? But then what should be android_user_id? Do I need to use OAuth?
I am doing this kind off sign in for the first time and I am really confused how to connect this web application with android user and manage bookmarked items per user...
You can make use of Android AccountManager. Check out How to get the Android device's primary e-mail address
I think i have found solution by using Google Sign-In for Android. I get idToken for currently login user before each POST request and verify it on server side. Also from the token I get property sub which is user id and store this in my database...
Auth with a backend server
However, I am pretty new to this stuff, tokens and authentication using google, I would like for someone more experinced to confirm that my solution is fine and secure...

How can we add a server-side Java code in Firebase?

Scenario:
I am planning to build a system that has 2 components. A Web App (Angular) that would push some data to Firebase. Before the data gets pushed , I want it to get validated by a server-side Java code. The data getting pushed to Firebase is fed to an Android application that consumes the data from Firebase. The Android user can perform some actions like changing the state of data. Before the data gets changed again there should be a server side code to validate it.
Question:
Where does the server-side code reside? Do we need a third party Web App hosting service other than Firebase?
If my code is in Java 7, what can be the possible options available?
If at all we use a third party server, how does the server communicate with a Firebase server?
Also can you please help me understand (if possible) how can we make sure that the data getting pushed to Firebase server gets validated by the server-side code before getting pushed?
firebaser here
You can interact with the Firebase Database through its Java SDK.
Firebase does not currently provide a way for you to run your (Java) code on our servers. We've covered this many times already, so I recommend reading up here: Server Side Calculation using Firebase
So you'll indeed have to host that code at a third party. Recommending a specific host is off-topic on Stack Overflow, but there are undoubtedly a lot of results of you search for Java hosting.
A common way to have server-side validation before sharing the data publicly is to have two separate lists.
moderationList
-K.....1
title: "how can we add a server side java code in firebase"
body: "Scenario: I am planning to build a system..."
messageList
-K.....2
title: "Firebase and backend logic"
body: "I am parse.com user, and now I look..."
Your users view messageList, but they write their items to moderationList. Your Java server code monitors this list, validates the item and then adds the item to messageList. This is a common queue pattern that we use a lot internally at Firebase.

How can I use a Joomla user database in a mobile application?

I'm coding a website for a client as well as an app that mirrors the site. Does anyone have a good understanding on how to implement users created on the Joomla site and use that same database on an App for android? The app and site will allow users to change and add new data and the data must be current on the site and the app.
Thanks.
There is Hoicoi Api in JED,
its an extension that retrieve data or user authentication from Joomla! site and converted all information into JSON format. Never tried it but I think it could help you to get started via the user authentication.

Using google oAuth2 to collect gmail email from java app

I have a web base email client that uses a java app to connect to IMAP and POP3 servers to download email. There is an issue that if a user usually logs in form the US that the java app will not have access to collect emails until that user logs in from the same county the java app is running.
I was told to overcome this to use google oAuth in order for the account user to give permission to my app to collect emails. Is this correct? Once this has been accomplished I would also like to the the API to import contacts, but for now authorization/authentication is sufficient.
The problem I am facing is that after trying to make heads a or tails of the google oAuth api documentation im really confused and did not yet manage to make a working example. Documentation often has links to a depreciated API and there is no example with a dowload link to both the API needed and exaple source code, as a result I think im using incorrect libraries for my examples.
Its also not clear to me what/how to accomplish what is needed do I use client authentication via javascript to create a popup whereby the user grants access?
Or do I use installed app client with a token and secret, this is what I tried but the 'command line' example I tried requires Java EE and this is a native app so I dont see why and I dont want to import all Java EE libraries to my small email downloader app.
Where can I find more intuitive documentation and working examples on this?
If you stay away from OpenID 2 and OAuth 1, I think the docs are pretty orderly these days. The best place to start is https://developers.google.com/accounts/docs/OAuth2

Android Chat For Private session for users ( Development Workflow)

I am developing Android Application for Chat between two users as private session.
Android application would be Android 2.0 and above . If any user wants to chat then he can enter any email to chat and session between two users will be private and can able to store in database.
Other user should not be able to watch the private sesion.
if any one answer about android application where it will be connected to web server (php) then good for me to understand .
So if any one known the develpoment flow please suggest here .
Please don't suggest about IRC Chat where all user combined in same open template.
You could use an XMPP server and use for instance asmack library for android.
Tutorials about the android application: http://davanum.wordpress.com/2007/12/31/android-just-use-smack-api-for-xmpp/
There are several different servers out there. For instance OpenFire. http://www.igniterealtime.org/projects/openfire/
If sounds like what you want is an XMPP server with client to client encryption.
Here are a list of XMPP server options: http://xmpp.org/xmpp-software/servers/
Here is a discussion on various XMPP libraries to use with Android: Android and XMPP: Currently available solutions
As for the encryption, it looks like you want to mimic what OTR does (for pidgin). The description of how the protocol works is posted here: http://www.cypherpunks.ca/otr/Protocol-v2-3.1.0.html
You can also grab their source code from here: http://www.cypherpunks.ca/otr/index.php#downloads (warning: code is written in C)
This is link for Chat application for Android for private session and best suitable for users who want to use web with android . where any user can be signup or signin then get friends list with access of database to android and easily send messages to friends in a private session can chat unlimted . this feature more include like sending request and accepting/rejecting request .
You can do this in node.js very easily and if you need already implemented code then you can use this https://github.com/heroic/node-private-chat.
If you find it insufficient then you can easily extend it with very minimal efforts and don't use php for it. It isn't design for these type of work. Node is best suitable for it. Just run above code and connect to it with your android application.
Best
Deepak

Categories

Resources