On this 10th ‘Day of Christmas’ Mule blog post, we tackle an increasingly important question in the world of APIs: Presume that you would like to create a remote API (which perhaps exposes some legacy business logic) for access by internal and/or external clients. How can you make sure that access to your API is protected in such a way that:

A) Only clients that you trust can access them;
B) Those clients can access your API through the explicit authorization of their end-users; and
C) The end-users can be authenticated with a central entity, *withouth* having to share their credentials with your API’s clients.

Read more →

Filed under: CloudHub, Mule ESB, Mule Studio by reza.shafii on Thursday, January 3, 2013 | Social tagging: APIs > Mobile > OAuth > OAuth2 > Security
No Comments »

Google Apps offers a cloud alternative to many of the office products.  If you have a Gmail account then you have Google Apps including Spreadsheets, Docs, Presentations, Contacts, Calendars and Tasks.  Of course Google Apps have APIS and of course we have the connectors to make it easy to connect Google Apps and your applications together.  Lets get the connectors and then take a look at what you can do.

Read more →

Filed under: CloudHub, Mule ESB, Mule School, Mule Studio, MuleForge, MuleSoft by Mariano Gonzalez on Tuesday, January 1, 2013 | Social tagging: APIs > Cloud Connectors > DevKit > google > multitenancy > OAuth > OAuth2 > Objectstore > salesforce
No Comments »

It’s a pleasure for me to introduce the Mule Dropbox Connector. I’m sure you have heard of Dropbox and many of you have been delighted by its simple features, and now you can take advantage of them in your Mule applications.

Getting the Dropbox Connector

It’s really easy to start using this connector thanks to Mule Studio update site. To install it:

Read more →

• Go to the menu Help -> Install new software
• Enter the connectors releases repository: http://repository.mulesoft.org/connectors/releases
• Select the Dropbox Cloud Connector available in the Community group

Filed under: CloudHub, Mule ESB, MuleForge by José Sahad Amenta on Wednesday, December 5, 2012 | Social tagging: Cloud Connect > Cloud Connectors > CloudHub > dropbox > OAuth
3 Comments »

Service-Oriented Architectures (SOA) present unique security challenges due to loose service/application coupling and operations  running across trust boundaries.  To help our customers address these challenges, we have extended the Mule ESB platform security in several key areas and are making these extensions available through our Mule Enterprise Security package. This blog post will introduce the key components of that soon to be released package.

Product Overview

The first thing to know about Mule Enterprise Security is that it builds on top of Mule ESB Enterprise’s existing security capabilities. Mule ESB Enterprise already provides a solid set of security features, including:

Read more →

Filed under: CloudHub, Mule ESB, Mule Studio, MuleSoft by reza.shafii on Tuesday, November 6, 2012 | Social tagging: encryption > OAuth > Security > Singatures > Vault
3 Comments »

Mark Zuckenberg once said: “How can you connect the world if you leave out China”. Well, I now hereby say: “How can you connect the cloud if you leave out Google”. I know I don’t have his net worth, but I have a point nevertheless. Reality is that Google has done a great job building a Gazillion of different and very cool APIs and you’d be right to feel that it’s hard to keep their pace. To help you with that is that we proudly present to you the first release of the Google Cloud Connectors Suite.

Read more →

Filed under: CloudHub, Mule ESB, Mule School, Mule Studio, Tech Ramblings by Mariano Gonzalez on Tuesday, October 30, 2012 | Social tagging: Cloud Connectors > data mapper > DevKit > google > MEL > Mule Expression > OAuth > OAuth2 > salesforce
6 Comments »

Testing using an external API can be a PITA, especially if the API uses any HTTP Callbacks or redirects such as OAuth or WebHooks. If your using any callback functionality like this then the Service Provider needs a way to callback your application and therefore be accessible to the public Internet.

When you start integrating these APIs, it’s much easier to work on your local development machine, but these are usually behind firewalls, NAT, or are otherwise not able to provide a public URL and it’s not really feasible to push to a staging environment every time you want to test something.

So we need a way to make our local applications available to the Internet; there are a few good services and tools out there to help with this such as: Tunnlr, ProxyLocal, showoff.io or you can setup your own reverse SSH Tunnel if you already have a remote system to forward you requests.

In this post, I am going to use a service called LocalTunnel and show how we can share a local Mule application with the world and customize some Cloud Connectors to receive Callbacks locally.

Read more →

Filed under: CloudHub, Mule ESB by ryan.carter on Thursday, August 23, 2012 | Social tagging: cloud > CloudHub > Mule 3 > Mule ESB > OAuth > Testing
3 Comments »

If you reached this blog and you are not a Mule user (yet) keep reading, I will not cover anything Mule specific. If you are new to OAuth or want to get an introduction to its concepts this post is the right one!

Authentication is vital in any kind of system but it is even more relevant when it comes to the web. As the web grows, more and more sites rely on distributed services and cloud computing. As resources are spread all over the web, sharing them across multiple sites is not an unrealistic requirement considering the following scenarios: a photo lab printing your Flickr photos, a social network using your Google address book to look for friends, or a third-party application utilizing APIs from multiple services. In order for these applications to access user data on other sites, they ask for usernames and passwords. Not only does this require exposing user passwords to someone else it also provides these applications unlimited access to do as they wish.

Read more →

Filed under: Tech Ramblings by Federico Recio on Tuesday, September 20, 2011 | Social tagging: authentication > cloud > howto > OAuth > Security
3 Comments »