More actions
Cleaned up, expanded, clarified, categorized, removed stub (provisionally--do correct if I'm wrong, but my judgement is that this is as long as the article needs to be). |
m Fix typo. Add link. |
||
| (One intermediate revision by one other user not shown) | |||
| Line 2: | Line 2: | ||
== Uses == | == Uses == | ||
EVE SSO authentication has found numerous uses. Some include: | EVE SSO authentication has found numerous uses. Some include: | ||
* Informing third-party tools about characters' skills and/or assets. | * Informing third-party tools about characters' skills and/or assets. | ||
** [[PYFA]], for instance, can use SSO authentication to load your character's exact skill profile and give precise details on how different ship fittings will perform in your hands. | ** [[PYFA]], for instance, can use SSO authentication to load your character's exact skill profile and give precise details on how different ship fittings will perform in your hands. | ||
** EVEMon, similarly, can make sophisticated skill plans and advise on [[Skills_and_learning#Neural_Remaps|neural remaps]] once it can see into your character's head. | ** [[EVEMon]], similarly, can make sophisticated skill plans and advise on [[Skills_and_learning#Neural_Remaps|neural remaps]] once it can see into your character's head. | ||
** jEveAssets can simplify the vast and scattered collections of assets that any long-lived character inevitably accrues. | ** [https://eve.nikr.net/jeveasset jEveAssets] can simplify the vast and scattered collections of assets that any long-lived character inevitably accrues. | ||
* Verification of applicants' characters by corporations and alliances. Many organized groups in EVE routinely screen applicants' characters to verify claims about character skills and to weed out spies. | * Verification of applicants' characters by corporations and alliances. Many organized groups in EVE routinely screen applicants' characters to verify claims about character skills and to weed out spies. | ||
* This wiki's login system! | * This wiki's login system! | ||
== Mechanics == | == Mechanics == | ||
EVE SSO uses a login procedure usually called "OAuth"<ref>[[Wikipedia:OAuth]]</ref>. Technically there are two types, the original OAuth—OAuth1 or OAuth v1—and the newer OAuth2, which is slightly more secure; this article will collectively refer to both as OAuth, as the differences between them primarily affect developers rather than end-users. | |||
EVE SSO uses a login procedure usually called "OAuth". Technically there are two types, the original OAuth—OAuth1 or OAuth v1—and the newer OAuth2, which is slightly more secure; this article will collectively refer to both as OAuth, as the differences between them primarily affect developers rather than end-users. | |||
OAuth is a web-standard shared login procedure that is well-established and tested. The nature of the login process means that the username and password are never shared with the destination website, so users can rest assured that their account cannot be compromised and that no additional information beyond what they authorized will be released to the third party tool. The OAuth server maintains control of all of the information and validation. | OAuth is a web-standard shared login procedure that is well-established and tested. The nature of the login process means that the username and password are never shared with the destination website, so users can rest assured that their account cannot be compromised and that no additional information beyond what they authorized will be released to the third party tool. The OAuth server maintains control of all of the information and validation. | ||
| Line 47: | Line 45: | ||
== Ending authentication == | == Ending authentication == | ||
The Refresh Token the Tool obtains is valid indefinitely, but can be invalidated in several ways: | The Refresh Token the Tool obtains is valid indefinitely, but can be invalidated in several ways: | ||
* The User revokes it on their [https://community.eveonline.com/support/third-party-applications EVE | * The User revokes it on their [https://community.eveonline.com/support/third-party-applications EVE Third Party Tools Authorization page] | ||
* The User changes their account password: this invalidates ''all'' Tokens on the account | * The User changes their account password: this invalidates ''all'' Tokens on the account | ||
* The User sells the Character on the Character Bazaar | * The User sells the Character on the Character Bazaar | ||
| Line 58: | Line 55: | ||
** Note: Changing the redirect URL does NOT affect Tokens issued. | ** Note: Changing the redirect URL does NOT affect Tokens issued. | ||
== References == | |||
<references /> | |||
[[Category:Game mechanics]] | [[Category:Game mechanics]] | ||