oauth

Using OpenID with a WebService: Best way to authenticate?

I'm looking for some guidance on the best way to authenticate to my WebService. Right now, I have a standard WebService on .NET 3.5, and a MVC website that sits on top of this WebService. The MVC website uses OpenID to authenticate users, and during the development phase, we have simply been passing the user's OpenID Claimed Identifier...

Using Yahoo Fire Eagle on Grails / Java

Hi everyone! Has anyone implemented the Yahoo Fire Eagle API in a Java / Grails application? How did you do it? I want to poll their REST web service with my Grails application. Yahoo offers some API Kits for various programming languages such as PHP, Ruby, etc. Unfortunately, there is nothing similar available for Java / Groovy (there...

What are the characteristics of an OAuth token?

How many characters long can an oauth access token and oauth access secret be and what are the allowed characters? I need to store them in a database. ...

Launching Safari from an iPhone app using NSMutableURLRequest and OAuth

Launching a URL in Safari is easy enough in an iPhone application - UIApplication's openURL method. However, I'm doing some OAuth stuff, and want to follow the pattern that pownce used to handle OAuth. But since OAuth wants me to explicitly set the Authorization header, I don't know how to proceed. I can set headers via NSMutableURLReq...

oauth_callback on Android

I created a Twitter app I need user of my Android application to authorize its use. I'm at the point where I can call Twitter app page in the browser and successfully authorize. However, the callback seem not to be working, I end up with the confirmation message and PIN in the browser but my Android activity is never called (onResume is ...

How do I validate OAuth requests?

I'm trying to use OAuth with Twitter, and I have my head wrapped around the pieces that need to be put in place to get a request token. But, it's not working. And the error message that I'm getting back isn't terribly helpful. Luckily I found a tester but again, the error message there isn't terribly helpful. "Invalid signature." Ok, g...

How do I get the Twitter API to respect the callback parameter with OAuth?

I'm working on an iPhone app that ideally uses OAuth to communicate with Twitter. I know a lot of people are doing the OAuth workflow inside of their apps using a UIWebView, but I don't agree with that and am going with the Pownce approach. The problem is, Twitter has this whole scheme for working with desktop apps, using a pin number. ...

Ruby and Rails - oauth and http proxy

Hey all, Does anybody know how to implement an HTTP PROXY with oauth for rails? I'm using the oauth gem but am behind a proxy server. Finding it very difficult to work this out. Very frustrating! Thanks for any help, John ...

Best Security Framework to secure and authenticate an iPhone app which uses REST?

I built an iPhone app which transfers data via a REST web service (Jersey) via JSON objects to a Java middle tier back end... Question(s): (1) What is the best way to secure the login / authentication of this iPhone App? (2) Is there an open source or commercial framework used to acquire this type of functionality? So far I have com...

How should I start with OAuth server at PHP

Have found the following example of OAuth server http://oauth.googlecode.com/svn/code/php/OAuth_TestServer.php But it is unclear for me 1. How I should generate certificates How I should specify access token/access token secret/request token/request token secret, should they stored in database? Should it regenerated for each request...

Implicit user creation with Authlogic and Authlogic OAuth plugin

I'm trying to write a simple OAuth consumer app in Rails. I'm using Authlogic for handling authentication and the Authlogic OAuth plugin to do the oauth thing. The oauth plugin provides a couple of helpers to render the sign in button: oauth_login_button and oauth_register_button. Together with the Authlogic logics and the plugin's requ...

Get Twitter User Details without Authentication

I have noticed some Twitter Applications manage to get a particular users Location, Name, Profile Image etc using just the twitter username? Hows is this possible? I ask because I have not come across any where in the Twitter docs on how you can do this. I can get a users details myself using oAuth when the user provides my app permiss...

Using Twitter OpenAuth

I am currently starting a project that will interact with Twitter via it's OpenAuth system and I was wondering about a few of the details. If a user agrees to give my site access to their Twitter account, can I access their account even if they aren't on my site? For example, could I have a nightly job run that would pull in all of the...

Expectation Failed when trying to update twitter status

I can't seem to figure this one out. No matter what I do, I keep getting a "417 Expectation failed" error. Everywhere I've looked says that I need to get rid of the Expect header for the HttpWebRequest. Setting the static property ServicePointManager.Expect100Continue = false or the instance property on the web request request.ServicePoi...

Getting stats for Twitter app

I'm using Twitter's OAuth for my app (DroidIn) To my dismay I can't find any way to track who and how often is using the app. Searching Twitter for "sent from DroidIn" does not yield any results. I suppose I can call some sort of counter app from my code but that doesn't seem to be fair to my users. Any ideas or suggestions? ...

Trusted sites with oauth

Hi, Is there any ability to mark site as trusted? For example - somebody have some sites - auth.site.com (as oauth provider) and s1.site.com, s2.site.com etc as consumers. Of course - owner would like to skip step "Do you agree to add site s1.site.com as trusted?", but for security reason would like to not mark other sites like othersite...

Looking for a generic Oauth library for scala, java or python

I have a few already but wanted to merge them into one public domain oauth code library for twitter, facebook, friendfeed (and let other developers improve the library for their preferred connections). I'm having a tough time just debugging mashing friendfeed and twitters oauth into one friendly python program running on the Google App ...

authlogic and oauth-plugin

Hi all does somebody tested - will authlogic works with oauth-plugin (https://github.com/pelle/oauth-plugin) or not? ...

oAuth ASP.NET Membership Provider

Are there any recommended resources for implementing a custom membership provider that uses oAuth? The goal would be to have users to log into my ASP.NET MVC application using their existing oAuth credentials. After the user is authenticated, I'd then like to leverage the built-in ASP.NET authorization features. Thanks. ...

oauth google using python

i am fairly new to programming for web. and i want to start from scratch here. i tried to search the net but ended up completely confused. now what i want to learn is how to authenticate a google account through a python script. can anyone please provide me with a code fragment or any example. thanks a lot in advance. ...