On Thu, Dec 4, 2008 at 2:54 PM, googlysmiles <[EMAIL PROTECTED]> wrote:
>
> Thank you so much Trevor for your help! make sense 8-).
> For web based installed apps (like a cross-breed between browser app
> and installed app), which path would make more sense?
>
> 1. ClientLogin with GData API (no client lib) given -
>
> 'The Google Data APIs use support multiple authentication methods,
> depending on what kind of client you're writing. If your client is a
> standalone single-user "installed" application (such as a desktop
> application), then you should use the "ClientLogin"; if your client is
> a multi-user web application client, then you should choose between
> "AuthSub" and "OAuth"; and if your application is a gadget (for use in
> iGoogle or other OpenSocial containers), then you should refer to the
> Authentication for Gadgets section.'
>
> 2. AuthSub with JS Client Lib
>
> The dilemma I see here is this:  1 would provide a better login
> experience for web based installed apps in this case, but 2 is more
> straightforward.
>
> THANKS SO MUCH!

The main benefits of using AuthSub (or OAuth) is that they tell the
user exactly what services they're granting access to, the user can
revoke their authorization later if they choose, and auth login tokens
don't expire and therefore can be cached indefinitely.

ClientLogin is really only useful when you aren't able to render the
AuthSub/OAuth login pages, because you're not operating inside of a
browser. Also, since ClientLogin auth tokens expire, you have to save
the username/password to disk, which poses security problems.

If you can use AuthSub, then I suggest doing so, regardless of which
client library you're using.

-- 
Trevor Johns

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google Calendar Data API" group.
To post to this group, send email to 
[email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/google-calendar-help-dataapi?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to