Is LinkedIn API allowing to access all user profiles? [closed] - api

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.
Closed 4 years ago.
Improve this question
We are interested to integrate LinkedIn into our CRM database to see where the people are up to now (changed job) based on person name and the current company name. Is this possible? As far as I know the API is restricted by the Linked credential and limited by his/her connections, is this right?
If it's correct, is there any LinkedIn API premium that we can access to achieve what we want then?
We know that the LinkedIn has a product called Sales Navigator and based on the demo looks like it's possible but the person has to be tagged first or something like that.
I'm appreciated your feedback.
Thanks

You can get a person profile after authentication, As of May 12th Linkedin has restricted the use of API Blog link.
According to which you may only access Basic Profile(Name,Picture,Headline,Title,Location,Current Position) for Full Profile Access you would need to Apply with Linkedin for a Partner Account.
"is there any LinkedIn API premium that we can access ?" Yes , Here is the Link to Premium link
"see where the people are up to now (changed job) based on person name and the current company name. Is this possible?" Yes in permission r_fullprofile there is a field isCurrent which is true for a current company and false for previous companies. You can also get a start date and end date for companies.
To get user connections ask for r_network permission. For a connection Profile you only get the Name,Profile Pic,Headline,Industry and link to connections linkedin profile
Have a Look at these links :
Data Fields : link
Transition Guide : link
API Terms of Use : link

You can't do this with the public api right now. You used to be able to, so if you apply for the [Partner Program] (https://developer.linkedin.com/partner-programs/apply) you should be able to get access to the features you want. This is only from my experience from what I was able to access in the past. It's worth applying to see if that data is still available to partners.
You can look at what is available through the public api right here.
https://apigee.com/console/linkedin?authTypeVal=oauth2&afterSuccessfulAuth=true

It is possible but some configuration with LinkedIn apps and i have integrate LinkedIn in Our Product. if you want to search any particular person information when first of configure LinkedIn Developer apps and get App ID and APP Secret Key and set as a default permission in your app settings or requested specifically via the scope argument during your authentication process after you will get Access Token then any user login and with your apps and authorize when you will get all profile information of authorize user
see this document may be helpful
click here
LinkedIn Throttle Limits
Application maximum : 100,000
Per individual user : n/a
Per individual developer : n/a

Related

Linkedin APIs for authentication, connection invitations and user search

I wrote this same question to #Linkedin support service and I was redirected to this link where they indicate to ask questions in Stackoverflow.
We are developing a mobile App for the Polytechnic University of Madrid and we plan to expand to other Universities in the future. This aplication will need in a first instance OAuth via Linkedin. It will also need to allow the authenticated user to send connection invitations to other users contained in a list. For creating that list of users, it will be useful if the admin of the system could search in a bar similar to the one which Linkedin has, write a user name and select it, retrieving its user ID or what is needed to identify the invitation destination.
Summing up, the App needs:
OAuth API
Connection request API
User search API
I have read on the web that some of Linkedin's APIs suffered some modifications in which most of them where limited to allowed users or apps. So the aim of this post is knowing:
Do the APIs my mobile application needs exist?
What do I need to do to obtain the access to those APIs in case they exist?
User search API
For this feature you could use something like Algolia Instant Search
LinkedIn has changed many things related to user data. If you need access to its data then you must follow the given guidelines.
Basically you have to create a LinkedIn App and then the users have to grant permissions to your app by installing it in their device(s) and then only you can collect their data.

Google Assistant action access API that I do not own [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 3 years ago.
Improve this question
I have gone thru the documentation of Account Linking but I am still unclear about the mechanics on how to build an action using a API that I do not own support Oauth2.
Let say, I want to allow Ebay users to ask "Hey Google, ask Ebay, has my order shipped?". With that question, I need to access user transactions on Ebay via API and I have no control over how Ebay OAuth2 endpoints and parameters.
Please let me know if you have done it or know a good example. Eventually, I will want to call API from various sites (some kind of mashup).
You will need to approach this in two parts - having an account in your system for each user and linking your account to their Assistant account.
The account in your system will store the credentials you need from them (usually an OAuth token) to access the API for a service on their behalf. This is typically done by having them log into your website and authorizing you to access the other service through an OAuth dance.
In the second part, the roles are slightly reversed. The Assistant now needs to get authorization from the user to access your service through an OAuth dance of some sort. This is what Account Linking does - it gets an OAuth token for your service to the Assistant so it can pass it to you and so you can verify who the user is.
Once you know who the user is (through the Assistant), you can then access their account on your service, get the auth tokens you need to access their account on another service (such as Ebay), and perform those actions.
In some situations, you can verify who the user is without Account Linking. The easiest is to require the user to sign into your service using Google Sign In (or otherwise get their Google account authorization to your service) and then use Google Sign In for Assistant to have the Assistant verify to you which Google account they're using. As above, you can then look up this account in your system and get the authorizations you have for the other services.

Linkedin API for full profile access

I want to access the full LinkedIn profile information using the API, but I have only managed to access the basic profile and e-mail address with the API-key and Secret Key.
Am I missing something or is it more restricted in some manner?
How did you get the LinkedIn API ?
Did you applied for partnership because as far as I know LinkedIn changed the policy of API , so the API will be available only through the partnership and for that you've to pay different fee based on partner program
Have a look here, the same thins we've too.
I've fulfilled the application 3 weeks ago but no response yet.
***Subject: Having acces on LinkedIn API [160721-001958]****
I had spoken with one of our experts on this and he had confirmed for me that you can still go through other workarounds for this.
Go to https://developer.linkedin.com/partner-programs
Click on either of the options based on your need. You will be directed to another page where if you scroll down you will find the button for Apply to become a LinkedIn Solutions Partner. Click on that.
You will be directed to a page that says Apply to become a LinkedIn Partner and you can fill up the form from there for access.

Google Apps API to retrieve domain names [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.
Closed 4 years ago.
Improve this question
I am looking for a Google Apps API that allows me to retrieve all domain names associated with the Google Apps instance.
I am looking for the programmatic equivalent of this: https://www.google.com/a/cpanel/gcompany.nl/DomainSettingsDomains
As an added bonus it would be really nice if there is also a way to check if a given domain name is used as an Alias or in a Multi-domain configuration.
Additional requirements:
I need this API to be available using a Google App Engine app (Java).
the API must allow authentication using OAUTH.
The owner of the app is NOT a Google Apps Reseller (no special privileges).
The app only needs readonly access.
Your answer is correct. There's a issue requesting an API call to retrieve the domains associated with an instance. I'd suggest starring it:
http://code.google.com/a/google.com/p/apps-api-issues/issues/detail?id=2278
The "lightest weight" retrieve all users function is the Retrieve All Organization Users since only the primary email and Org is returned for each user, not details like first and last name, suspended status, admin status, etc:
https://developers.google.com/google-apps/provisioning/#retrieving_organization_users_experimental
domain aliases and secondary domains which have no users won't be returned by this functionality of course.
Jay
I could not locate a Google Apps API to do this. Too bad.
The next best thing is to either use the Provisioning API or User Profiles API, fetch all (user) entries, take the PRIMARY Email address for each entry and parse that to get the domain name.
This is pretty messy, especially if you've got a Google Apps domain with tens of thousands of users.

How would I protect an API from abuse? [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 4 months ago.
Improve this question
Hey everyone, I run an image hosting website and I'm designing an API for it. My concern is that I don't want anyone to be able to do something like:
while(true) {
Upload();
}
and spam/DoS the site.
My current solution is to limit all IP addresses to a certain amount of uploads per day/hour. I believe this will work fine for desktop applications that will use the API, but for websites that wish to use it, all the users will have the same IP (the server's).
I suppose the best solution would be to have user accounts that authenticate with the API, and then ban each account if they abuse it. The problem with this is that my site has no user accounts at all, it's all completely anonymous.
What else can be done? I would like to keep things as open as possible, while at the same time have the ability to ban users/IPs who are obviously abusing the service.
If you don't want to implement user accounts, how about having those that want to use the api sign up for an api key/secret, which you can use to rate limit with.
Check out OAuth.
Check out an open source API management tool like apiGrove; apiGrove.net or on GitHub at apigrove.github.com/apigrove. apiGrove supports a variety of approaches to API protection, including IP whitelist and authorization by key.
At one company I worked for, we implemented throttling for all non-paying customers, with a limit of a certain number of requests per day, theoretically configurable per API endpoint. If You had to supply a unique ID as your application key in each request, in the QueryString for lightweight APIs or in the POST request XML for more complex APIs. For end-users not using a public API, you could pass an authentication token instead.
If you supply a public API without requiring some kind of authentication or authorization, you'll have to resort to IP-address based throttling. But it's not hard to create a lightweight provisioning web page that allows people to sign up for API access.
Your application logic can throttle based on number of requests, like we did, or daily bandwidth, like Flickr does.
Require a token to upload, and restrict the token with a CAPTCHA. Consuming code would be something like:
// 1st request
var uploadToken = api.RequestToken(sessionIdFromUser);
if (uploadToken.RequireChallenge) {
// requires challenge due to per IP limiting
// uploadToken.Captcha could be a URL
DisplayView(uploadToken.Captcha, uploadToken.SessionId);
return;
}
api.Upload(uploadToken, captchaFromUser, byte[]);
As others have mentioned on this thread, API keys is often the way to go in such situations. The fact that your site has no user accounts doe not matter: an API key identifies an application, and not a user. (In fact, if your site did have users, you woud need separate mechanisms to identify the app and the user in an API call - this is where OAuth is very helpful).
If you do not want to create your own developer registration process, API key issuing process, throttling code, etc., I would encourage you to take a look at my company, WebServius (www.webservius.com), that provides a hosted API management layer on top of an API you provide.
For APIs developed in .NET, you can use API Protector .NET.
See this answer: https://stackoverflow.com/a/56075128/1679165