Ah - it seems you have read the documentation better than I :)

I suppose that this is part of the secure phone home capabilities of the
gadgets. Doing oAuth signing in javascript is not hard, however since the
shared secret or private key will be in the javascript code then, it only
ensures the request is not tampered with between the browser and the target
(e.g by the gadget server or another proxy), and even that guarantee is
doubtful (since the gadget server served the shared key to the gadget in the
first place).

So the signing will be on the gadget server (the method has been discussed
somewhere before, but I don't think you're looking for a theoretical
description, rather a practical example.

I would think that

opt_params = Authentication.SIGNED
opensocial.makeRequest(url, callback, opt_params)

is the way to do it, but this is pure speculation (as soon as the
first 0.6implementations arrive, it should be clear)


On 12/22/07, vorun <[EMAIL PROTECTED]> wrote:
>
>
> Reinoud, thank-you for your reply! In the .6 API Blog it says:
>
> "Introduced opensocial.makeRequest, which replaces _IG_FetchContent,
> allows both POST and GET, and includes an option for OAuth signing or
> authentication"
>
> http://opensocialapis.blogspot.com/2007/12/opensocial-06-and-beyond.html
>
>
>
>
>
>
>
>
>
>
> On Dec 22, 2:09 am, "Reinoud Elhorst" <[EMAIL PROTECTED]> wrote:
> > oAuth is for the data-api only, not for the javascript api
> >
> > The data api is still in a very early development stage:
> >
> > Quote fromhttp://code.google.com/apis/opensocial/docs/dataapis.html:
> >
> > *Note: *These APIs are still being designed and discussed in the
> OpenSocial
> > community. One of the current proposals is based on AtomPub--early
> revisions
> > of the documentation can be found in the People data API Reference
> > Guide<
> http://code.google.com/apis/opensocial/docs/gdata/people/reference.html
> >and
> > the Persistence
> > data API Reference
> > Guide<
> http://code.google.com/apis/opensocial/docs/gdata/persistence/referen...>
> > .
> >
> > On 12/22/07, vorun <[EMAIL PROTECTED]> wrote:
> >
> >
> >
> >
> >
> > > Anyone know how to use OAuth with opensocial.makeRequest? our know of
> > > any examples or documentation?
> >
> > > Thanxs in advance!- Hide quoted text -
> >
> > - Show quoted text -
> >
>

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"OpenSocial API Definition" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/opensocial-api?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to