> you can get a FB access token just by emulating what a 
> browser would do. A few https calls and a bit of xml parsing, no more.

erf, I don't know if you have already one of theses oauth services (fb or 
anotherthing), but here is a few things:  - you *don't* enter your password 
within dartable, you ask for a token with a certain valididy over time, wich is 
given to by facebook, 
    authentification is done on facebook website. and you can revoke theses 
token from our account. the token will be stored using kwallet 
    or gnome keyring (if theses backend are activated) for later use
  - on your first use of the application, the website will ask you for 
permission (what the application will be allowed to do).
just to say that doing this behind user's back might be problematic:   - 
webpages sent by fb might change without any notice, so parsing them doesn't 
seems a durable solution
   - I wouldn't trust a software accepting clauses for me automatically

-- 
Pierre Lamot
port: 06.84.87.10.97
pierre.la...@yahoo.fr

 

     Le Mardi 27 janvier 2015 21h28, Pedro Côrte-Real <pe...@pedrocr.net> a 
écrit :
   

 On Tue, Jan 27, 2015 at 5:53 PM, Marcello Perathoner
<marce...@perathoner.de> wrote:
> If you find it acceptable that the user enters her FB password in
> darktable, you can get a FB access token just by emulating what a
> browser would do. A few https calls and a bit of xml parsing, no more.

Right, that's exactly why embedding a browser is a completely bonkers
way to solve this issue. If we were going to do that we might as well
do as you suggest and grab the username and password and fake
everything. As far as I can tell redirecting to localhost is the only
viable solution and actually makes sense from both security and user
experience stand points.

Cheers,

Pedro

------------------------------------------------------------------------------
Dive into the World of Parallel Programming. The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
darktable-devel mailing list
darktable-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/darktable-devel


   
------------------------------------------------------------------------------
Dive into the World of Parallel Programming. The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
darktable-devel mailing list
darktable-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/darktable-devel

Reply via email to