Yahoo! Application Platform (YAP)Jonathan LeBlanc – Technology Evangelist

Yahoo! Developer Network – Partner Integrations

Twitter: @jcleblanc

2

YAP Applications What’s a YAP Application?

3

• Runs on YAP

• Supports 2- & 3- legged OAuth

• Supports OpenSocial 0.8

JavaScript APIs

Open Applications

4

Open Application - Views

Small View

Large View

5

6

7

• Runs off platform

• Supports 2- & 3-legged OAuth

• Does not contain views

• Requires users to authenticate

session

OAuth Applications

8

Y!OS Components How does it work?

10

Y!OS Components – Open Authentication (OAuth)

• 2-legged & 3-legged OAuth

• Consumer / Shared Secret keys

• Similar to proprietary BBAuth, but

open standard

• http://developer.yahoo.com/oauth/

11

• Allows secured access to private data

• Whitelisted components

• Will begin integrating into OSML

• http://developer.yahoo.com/yap/yml

Y!OS Components – Yahoo Markup Language (YML)

12

• Social Directory (read)

• Contacts (read)

• User Status (read / write)

• Updates (read / write)

• http://developer.yahoo.com/social

Y!OS Components – Social APIs

13

• HTML / CSS / JavaScript securer

• Enforces standards

• Includes JSLint (http://www.jslint.com)

• One of the first to integrate Caja

• http://code.google.com/p/google-caja

• http://developer.yahoo.com/yap/guide/caja-

support.html

Y!OS Components – Caja

14

Caja - IFrame Security Concerns

IFrame Concerns

• Drive-by downloads

• No real content restrictions

• Other known exploits

Caja Implementation

• Blacklist all / Whitelist some model

• Secure OpenSocial container

15

PHP SDK Currently AvailableOpen and OAuth Applications

ActionScript 3 SDK Currently AvailableOpen Applications

Y!OS Components – SDKs

16

• SQL-like syntax

• Private / Public Data

• Use of many YDN APIs

• Captures external data feeds

• Allows custom tables with the “Open

Data Tables” feature

• http://developer.yahoo.com/yql

Y!OS Components – Yahoo! Query Language (YQL)

17

Thank You Questions?