Hi, I'm developping an iGoogle gadget that uses OAuth authentication
in the process on the server. In addition, I'm also implementing our
server which is OAuth service provider, for which I am using. NET.

The process is not working quite right and I have a number of
questions:

1) I am currently generating the consumer_key and consumer_secret
values on the server and I have communicated these values to Google by
sending an email to the [email protected] address.

On the other hand I have also accessed the URL 
https://www.google.com/gadgets/directory/verify
in which I have also registered the gadget and where I have found
other values for consumer_key and consumer_secret.

What values should I use? I am having trouble validating the petitions
signed with HMAC-SHA1, can be related to consumer data and signature
sent by Google to the server? Should I change signature method to RSA-
SHA1?

2) After the user authorizes the gadget to access their data in the
authorization popup and the server redirects to the callback url
http://oauth.gmodules.com/gadgets/oauthcallback, the gadget does not
perform a request for the access token to the url specified in the
gadget xml section /ModulePrefs/OAuth/Service/Access. Is the access
token request performed automatically or I have to do something in the
gadget to do that?

Thank you.

-- 
You received this message because you are subscribed to the Google Groups 
"iGoogle Developer Forum" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/Google-Gadgets-API?hl=en.

Reply via email to