Does linkedin API support chat bots? - bots

We need chat bots auto-reply to my connects in Linkedin.
Does Linkedin API support any chat bots?

Currently it's not possible and it's forbidden by the User Agreement.
8.2. Don’ts
[...]
m. Use bots or other automated methods to access the Services, add or download contacts, send or redirect messages;

Related

Bot Composer Web Chat embed with secure token?

I have a Bot published from Bot Composer into Azure. The bot is a simple QnA Bot. I need to securely embed it within a webpage. The iframe embed code generated has the Bot Key embedded in the URL. How do I secure this so
users cant see the Key,
limit access to users from my tenant?
Thanks in advance.
Generally speaking, if you want to hide something from the end user, you need to place it somewhere where they do not have access to. Normally, you create some kind of script that is running in the backend of your webpage and deals with creating the tokens with your secret key. These "non-critical" tokens need be to be passed to your Web Chat.
The limitation to your tenant user, you need to implement an authentication system.

How to allow public users to access my facebook chatbot using bot framework

I was trying to access my Facebook chatbot through public user accounts. Using Bot Framework only for accounts added into developer, tester of the Facebook app can get a response from chatbot. But without adding user accounts to the app directly public user should get a response from chatbot.
Does anyone know how to do it?
I believe that you will need to first submit your app for review in Facebook and once you pass the review, you will need to make your app public (and your page needs to be public too).
Take a look to the Launching your Bot documentation from Facebook.

Social auth from mobile client connected to Node.js API

I have a Node.js server using PassportJS that uses social login via Google, Facebook, and Twitter.
The Node.js server hosts an API that uses the PassportJS middleware to authenticate routes and securely serve the data. The API exists to serve an iOS application which will be where the user "logs in" through Google, Facebook, Twitter and will subsequently create their account on my service.
How can I accomplish this when the mobile SDKs for the respective companies are for a direct communication between my client and their server? I essentially want a way for my client which talks to my server which talks to their server. Please let me know if the overall idea is incorrect as well.
I believe the right way to do it is to integrate the mobile app with social login, not your website.
Depending what technology you use in your app, you can find libraries to make it easier for you. On your app, it would be a native pop-up, or a simple app-redirect to Facebook app, or Google app or whatever to get the permissions and then a app-redirect back to your app.
You probably dont want a browser to pop out and redirect the user to facebook. A lot of users just use facebook app on their smartphones and they are not even logged-in facebook website in their smartphone's browser.
Once you get the permission and get the user's information, you can securely send those data to your server and store them for future use. You can associate those information with device ID, or generate a token and sent it back to the user's device and store it there for future authentications.

Paypal: How my server can authorize some payment made by mobile client

I want to let my customers on mobile application to be able to make payments using Pypal .. so far so good!
Now I want the mobile application to send to the backend server a payment confirmation with the amount payed, if I just made the mobile application to send those information to the backend just like that without any type of authenticity, that will be very hackable and totally insecure, is there some kind of token that Paypal passes to the client, and then to the my backend server, that the server can authorize the payment?
From the official documentation, steps are listed by details:
https://developer.paypal.com/webapps/developer/docs/integration/mobile/verify-mobile-payment/

Prevent OAuth client from modifying user's request

I use a web application developed by some company to manage my social information. This web application integrates various social sites (like twitter, facebook, google+) into one. Using this application I can send tweets, read emails, and create friend requests.
The web application uses OAuth 2.0 protocol to get access to my data in these social sites. After I login to this web application, I am redirected to twitter page, and then shown a page that says that the web application needs to be able to send tweets, etc, and ask for my approval. Once I approve, I can send tweets using this web application.
To send a tweet, I type the tweet, and then click a button in the web application. At the back, the web application sends a request to twitter using OAuth access token.
What I am worried here is that the web application may modify my tweet. Is there a way in OAuth 2.0 protocol to guarantee that the web application does not modify the tweet?
I posted the question to OAuth Google Groups. Nat Sakimura kindly answered the question. You can see the answer at https://groups.google.com/forum/#!topic/oauth/2OdlR40fZsI.

Resources