Index - FotoWare OAuth 2.0 Example

This application demonstrates how to build different kinds of applications that use the FotoWeb API and FotoWeb embeddable Widgets and OAuth 2.0 for user authorization.

This is the configuration page, where you choose the type of application and enter necessary details. In an actual application, these details would be either hard-coded or part of a fixed configuration that is hidden from its users.

Tenant URL

Application Type

A web application with a back-end (server) component.

BACK-END: The application must have a back-end (server) component for OAuth authorization, storing a client secret, and managing bearer tokens.
FRONT-END: The application may have a front-end (HTML and JavaScript), but it may also be an API only.
API: This application can make API requests to FotoWeb. An API license is required.
CONSENT: The authenticity of the application is verified, so it only has to ask for user consent upon first authorization.
SESSIONS: Refresh tokens can be used to keep the application permanently authorized.

The application must first be registered in your FotoWeb tenant. For information on how to do this, please see Application Registration. and use the following application settings:

Type: Web App / API Native / mobile
Scope: API Selection Widget
Add this redirection URI this redirection URI this redirection URI this redirection URI this redirection URI (right-click and copy this URL)

When done, please enter the generated application details (e.g., client ID) into the fields below.

Your FotoWeb site must be reachable on the internet. If you want to test OAuth with a server in your local network, then you have to compile this application from source code and host it in your internal network, so it can connect to your FotoWeb site and request tokens.

Client ID

The client ID of your application registered in your FotoWeb tenant (e.g., a838XXXX-XXXX-XXXX-XXXX-XXXXXXXX68df)

Client Secret

The client secret of your application registered in your FotoWeb tenant

Please do NOT enter a client secret of an active production site here. The client secret is sensitive information. For your and your users' security, please use test values only. Please change your client secret or delete your application registration after using its client secret here.

Login Token [OPTIONAL]

You may enter a login token generated with the login token generator tool.
Remember to check the option "Use for widgets".
The encryption secret can be obtained from the tenant's site settings.

Welcome to the FotoWeb OAuth Demo Application