Verifying that the account belongs to the person that claims - instagram

Context
Sign-up form and one of the fields is Instagram account
When the user will finish sing up, there's a link to the person's Insta account
(No integrations)
Goal
I want to make sure the user can only sign up with his own Instagram,
much like e-mail verification
My thoughts
I took a look at the Instagram API documentation and didn't find an option for it. Any thoughts about how to do that?
There would be an option to use the Insta auth basic, allow the user to sign-up via Instagram. Although this seems to be a proper overkill and it's getting deprecated anyways.

Related

Which is the correct OAuth Flow for our use case?

First of all, I apologize for eventual noob questions, we are very new to the DocuSign API and are currently trying to wrap our heads around which is the most correct way of accessing the API.
I will start with an overview of our use case. We recently purchased a DocuSign prod. Account with an Organization enabled.
We have a Partner which uses a CMS Tooling which integrates with said DocuSign Account. This Tool allows for the Backoffice to create envelopes with documents inside and a url which leads to the signin ceremony through the Templates that we create inside the DocuSign Account. This url is afterwards send to the customer for them to sign the documents in the envelope. This Part is working and is currently being used.
Now what we want to achieve on our side, we have a nextJS web-app which allows the same customers (Which are the receivers of the created envelopes in the step above, same e-mail in both steps) to sign-in our web-app. We want to show the customer in a dashboard, if there are envelopes for him open that he can sign and if this is the case we want to show him the url which leads to the signin ceremony.
We were able to see that as soon as an envelope for a certain User is created through the CMS Tooling, we can see that envelope in our DocuSign Prod Account.
Now our thought process was, to show our customer his open envelopes, we just fetch all open envelopes in our DocuSign Account which match the customers E-Mail.
Is there anything wrong with this process or are we overlooking something?
And if it is okay to proceed this way which of the OAuth Flows is the correct one to use for this case?
From my understanding, the JWT Flow seems like the most reasonable one? Since the Customers that need to sign the documents, will not have any DocuSign accounts.
What have you tried to solve the issue?
We tried using the direct API Access, which worked when set up correctly but since we didn't have a OAuth Flow in place the Access token is only valid for restricted amount of time obviously and has to be refreshed. Hence we have to think first about how to grant access correctly
I would love to hear, what the right approach would be to achieve our desired result.
Once again Apologies for this kind of question, just trying to have a better understanding before we start building :)
Best regards!
According to the use case you mentioned using JWT Grant is fine as users of your integration will use a single system account to log in, you should use JWT Grant.
I would recommend going with the below link to know more regards different use cases and check the knowledge
https://developers.docusign.com/platform/auth/choose/
https://developers.docusign.com/platform/auth/oauth2-requirements-migration/

Get Instagram data from a backend

It is possible to get data from Instagram users, like number of posts, profile photo etc from a backend service? I don't want to force my user to login into his Instagram account to get those informations.
I'm reading about Instagram new api but always it talks about oauth which implied force login vis frontend.
Thanks.
Why would Instagram give some users data, without login? Only possible option is through Instagram public APIs, using OAuth/OIDC.
You should be able to use someone else's token (... yours?) to fetch informations about users and posts.
But that will always be limited.... for example users with non public profile, you won't be able to see those, or maybe you'll loose some posts, ....

How to restrict Slack Passport authentication to a specific team?

Simply looking for some direction, whether it's a link to the docs or an example:
I want to use Passport to authenticate users using Slack/Passport but only if they belong to my company. So, for example,
olaf#mycompany can log in and view protected assets
ishtar#anotherco cannot do either, despite having an account with slack
A cursory search found this issue but I couldn't find anything in the docs.
Thanks!
Slack Passport is using the Sign in with Slack feature. It requires users to already have an existing Slack account for your Slack workspace.
So to ensure that only users belonging to your company get access to your web site all you need to do is verify that you receive an access token for the right Slack workspace, e.g. the one of your company. You can check that by comparing the team_id in the access token.
Apparently you can pass a team parameter during the oauth flow as described here. This allows slack to do the id comparison on their end, but it does require the developer to know what their team's id is ahead of time.

How to use instagram API?

I have user id's of very few instagram public accounts . All I need to do is to get the follower count information of those accounts . In the developer page they are talking about building an app and authorizing it with the users and getting some tokens and then getting the permitted information from that account . How can I get the follower count of those accounts ? Is it possible to get it without authorization from that account? What if I want to get more information like the media and likes etc?( I couldn't find many pointers in this direction)
In my practice I have not seen any api, that will provide you user personal info without token, instagram too. So you must to create login via instagram, where you will ask about some permissions from user, then if user will provide them you will be able to make requests with token and simply get media information, likes and followers. The only question is to ask user about this all permissions. It's no so hard, you need to do something like this
1.Get user token https://www.instagram.com/oauth/authorize/?client_id=377e67cfbfe840e19a903aa5ea8dbe10&redirect_uri=http://127.0.0.1/&response_type=token&scope=likes+comments+relationships+public_content+follower_list
2. then do requests, for example '/users/self/media/liked', to request this you need to provide access_token which you received in first step and signature.
Like a little example, you can try to look at this code https://github.com/zhorzhz/instagram_api.git. There you will find steps which I said and also some more request examples.
Hope it will help you

Advanced Instagram-Api access for website

I am making my research for an upcoming project:
It is going to be a website you can login via your Instagram account - I need access to the user's name, profile picture and to the people he/she is following.
Is Instagram allowing a website/project to access this information?
Just in case this is a super easy question: I am not a developer and it is very hard for me to work through the Instagram developer website - I highly appreciate any help!!
Thank you very much!
Mathew
You will first need to implement the authentication part, and receive an access_token for the user. In fact you will receive user's id, username, and profile photo along with the access_token.
That was the hardest part. Then you may use the access_token to make some API calls to get information such as follows and followed-by.
You can access Name, profile photo and followers using Instagram APIs.
Here are the 2 APIs you will need:
http://instagram.com/developer/endpoints/users/#get_users
https://api.instagram.com/v1/users/1574083/?access_token=ACCESS-TOKEN
http://instagram.com/developer/endpoints/relationships/#get_users_follows
https://api.instagram.com/v1/users/3/follows?access_token=ACCESS-TOKEN

Resources