Partly because the authors weren't interested or didn't have the time. 
Partly as a personal exercise to learn new languages. Partly to 
understand the protocol in real, practical terms, and partly because 
like you, I believe it's better to just shut up and do something rather 
than whine or bitch at others to do it. I'd love to get some help, but 
I'm not fretting if I don't.

To address Hans' question, my goal is to provide a reasonably common 
library that folks can give the same sort of inputs and get the same 
sort of outputs. I'm focusing on client only services since that's going 
to be the larger audience. Programmers (like Kent) don't care what the 
minutia of OAuth is. They just want to get to people's address books, 
movie listings, or whatever crap OAuth grants them access to with the 
least amount of hassle.

The libraries all take the same set of arguments (in a few different 
ways based on what folks are most comfortable using).

The libraries all return (as much as they can) a hash of:

the fully signed and qualified GET URL (pop it into your web call of 
choice and it should just work)
the Header arguments (if you prefer using those instead).
the signature value (if that's all you wanted)
and an array of escaped parameters (should you want to construct the 
POST or other fetch)

Right now, it's limited to just HMAC-SHA1, but again, that's what most 
services are using. I can add in RSA or other encryption easily enough.

A lot of the other libraries are very good, if possibly providing more 
than most folks need or want. I'm currently working on the .Net library 
since that's where folks that are using our services are having the most 
amount of problems with. I'm building this stuff in my 'off hours' which 
means that I don't always have 40 hours a week to devote to it, and I 
may go days without doing something. Since there's no pressing demand, 
I'm not particularly worried about getting these out quickly.

Eran Hammer-Lahav wrote:
> Why alone? Did you try to partner with more people and no one was interested?
>
> EHL
>
>   
>> -----Original Message-----
>> From: [email protected] [mailto:[email protected]] On Behalf
>> Of JR Conlin
>> Sent: Wednesday, April 29, 2009 8:41 PM
>> To: [email protected]
>> Subject: [oauth] Re: True OAuth Confessions, or Why My Hand-Rolled
>> Calls All Blew Chunks
>>
>>
>> Eran Hammer-Lahav wrote:
>>     
>>> This is my favorite thread theme to bark at.
>>>
>>>       
>>> 3. Libraries are Shit
>>>
>>> Some are. How about write a new one or fix an existing one? How about
>>> just ask the developer for help? People always bring up the idea of a
>>> uniform interface across libraries which is a great idea, but no one
>>> actually put any effort into this.
>>>       
>> Actually, I am trying to do something about this, so you're wrong about
>> "no one". Trying to figure out the various nuances of languages I've
>> not
>> programmed in before is a bit of a trick so it's taking me longer to
>> build them than I'd prefer.
>>
>>
>>
>>     
>
> >
>
>   


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"OAuth" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [email protected]
For more options, visit this group at http://groups.google.com/group/oauth?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to