OK I have some new information and questions to add to this discussion:

1 - There is some confusion in the documentation over whether registration 
is required or not.

Both here <http://code.google.com/appengine/docs/python/oauth/overview.html>and 
here<http://code.google.com/apis/accounts/docs/RegistrationForWebAppsAuto.html>,
 
it says registration is optional.  Regardless, I have registered my app.

2 - When going through the process of registering your application with 
Google, you're informed that a certificate is not necessary on Google App 
Engine, and that the OAuth signature method is HMAC-SHA1.  Can anyone 
confirm that as the case for using the OAuth for Python?

3- Testing this locally doesn't provide much feedback because no matter what 
you pass, it works.  On appspot, it's the opposite problem because there's 
no information on what failed.  I've tried the OAuth Playground, which is 
great, but wanted to verify that it supports testing OAuth for python.  I am 
using it to test my Request for a Token and it fails, reporting, 
signature_invalid.

The documentation on signature construction is confusing, in some cases it 
indicates sending a base string to the server that is the request url 
encoded, and in other places it seems to be saying that you pass the string 
directly as in: 

oauth_signature="wOJIO9A2W5mFwDgiDvZbTSMK%2FPY%3D"

Can anyone clarify?






-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.

Reply via email to