[twitter-dev] Error trying to access

2010-08-01 Thread Federico
Someone called Taylor previously said that there would be maintenance
of twitter servers, and some user would not be able to use twitter for
about 5 hours.
However I have been trying to use twitter for about 21 hours and I
receive http 500 error.
Also, with my twitter app for my cellphone, I can see DM and @, but I
cant see twitts from the people I follow.
I have tried to access with my web browser and I get technically
something is wrong.
When I would be able to use twitter again?


[twitter-dev] Re: Cannot access homepage/timeline for over 24 hours

2010-08-01 Thread MrSiena
me too! When accessing the home I get the Message: something is
technically wrong! I don't know what I can do!
I contact you also on Twitter!

On 31 Lug, 19:31, Alex Popescu the.mindstorm.mailingl...@gmail.com
wrote:
 Hi guys,

 I know this is probably not the best place to report this issue, but I
 couldn't find any other way to contact you.

 For the last 24 hours I haven't been able to get on my account
 homepage. My account seems to be still activehttp://twitter.com/al3xandru,
 I can successfully log in, but when accessing the homepage I get an:

 Something is technically wrong.
 Thanks for noticing—we're going to fix it up and have things back to
 normal soon.

 Twitter apps on my iPhone cannot connect either reporting a 500 error.
 But I can send tweets and also access @replies and dm-s. So it is only
 the fetching the timeline that seems broken.

 Can someone ping the support team to look into this?

 many thanks in advance,

 :- alex


[twitter-dev] Re: Open-source, distributed PHP app and consumer secret

2010-08-01 Thread Michael Babcock
So, I think the solution has to be that the user downloads my app,
installs it on their site, then registers my app as their own app with
dev.twitter. After which, they will receive their own key  secret
pair. They will then input their key  secret pair into my app which
is living on their site, stored in some configuration file or database
settings table.

This way I don't distribute my secret. They will have to store their
own key  secret pair, but this wouldn't be different than a site with
its own proprietary solution. The only stick point is that I will not
get any branding rights on their posts/tweets, as they will have
registered the app as their own and will be in control of the post
branding.

The other option is to host a tweet service somewhere in the cloud. My
app, installed on their site, would point to the service and they
would have to grant permission to the service to make the tweets to
their accounts. I like this second solution because it seems cleaner
for the end user to set up and get running. However, this would mean
that I would then be responsible for maintaining a service. And
frankly, that sounds like a drag on resources.

These two are the best solutions I can figure given the circumstances.
Normally, I would wait for Twitter to get this sorted, however, I
don't want to risk disappointing my user base when the August 16th
deadline rolls around.

Does these solutions sound viable or am I all wet?

Pros, cons, alternatives?

Thx.

On Jul 27, 7:18 am, Decklin Foster deck...@red-bean.com wrote:
 Excerpts from Michael Babcock's message of Mon Jul 26 19:28:15 -0400 2010:

  So, I after spending the day looking through documentation,
  developer's discussion and testing various OAuth code bits, it is my
  understanding that there is no secure OAuth solution for open-source
  PHP developers. But, the August 16th deadline is still looming.

 I am also concerned about this. Here is the response I got from support:

 we're continuing to experiment with this feature, and have not made it
 available further. I apologize for the delay and inconvenience, but keep
 an eye on our developer talk group for future announcements.

 I have been watching this list for about a month (prior to checking with
 support) in case the feature is discussed here before being announced.
 @twitterapi, could we get some clarification on whether or not something
 will be ready before the August 16 deadline?


[twitter-dev] Re: Open Source CMS Module and Consumer Secret

2010-08-01 Thread Michael Babcock
Sorry for the confusion. I mean web application developers. There are
quit a number of open-source web apps for twitter. Besides standalone
apps, there are also, add-ons for all the various CMS solutions out
there, written in PHP, Perl, etc.

On Jul 27, 2:02 pm, M. Edward (Ed) Borasky zn...@borasky-
research.net wrote:
 There are plenty of open source *library* developers, and plenty of  
 applications that use open source libraries, but not all that many  
 open source full applications. The only ones I can think of at the  
 moment are Gwibber (Gnome), Choqok (KDE), mine (Social Media Analytics  
 Research Toolkit), Spaz, get2gnow, and ttytter. IMHO Choqok and  
 Gwibber are lame - I use CoTweet or Twitter.com on my desktop and  
 mobile.twitter.com, Twitter, Twidroid, Seesmic, Touiteur and Peep on  
 my HTC Verizon Droid Incredible.

 The Twitter piece of Social Media Analytics Research Toolkit is at the  
 moment read only, and as I noted earlier the main reason I even looked  
 at oAuth was to get the 1500 (read) API calls per hour. Given the  
 small number of users I have at the moment, it wouldn't be all that  
 difficult to upgrade them to oAuth and 350 calls per hour one at a  
 time by hand - all that would be required is to license that piece of  
 code separately. ;-)
 --
 M. Edward (Ed) Boraskyhttp://borasky-research.nethttp://twitter.com/znmeb

 A mathematician is a device for turning coffee into theorems. - Paul Erdos

 Quoting Michael Babcock mjet...@gmail.com:

  Correct me if I am wrong, but doesn't Twitter risk loosing a large
  percentage of their third party open-source developers, by not having
  a solid solution for the required OAuth security changes in time for
  the deadline?

  I can only guess, but, I would think that the open-source segment
  would count for quite a large number of independent developers, all
  eager to build for and promote the Twitter vision.

  Michael

  On Jul 27, 8:59 am, Taylor Singletary taylorsinglet...@twitter.com
  wrote:
  Hi Folks,

  There are a few hold ups to rolling this out more widely, the most pressing
  being that we are currently unable to serve SSL content on
  dev.twitter.com-- there are also better solutions than this
  rudimentary one that we simply
  can't implement yet. We're also concerned with releasing (and supporting) a
  solution widely that we'll soon want to deprecate.

  Taylor

  On Tue, Jul 27, 2010 at 8:53 AM, Cameron Kaiser 
  spec...@floodgap.comwrote:

I have the same question. I need to add Twitter OAuth to my widely
distributed PHP based open-source CMS add-on. All the documentation
says never ever distribute your consumer secret, which I understand
why this would be a bad idea. Yet all of the documentation/examples I
have found require that the consumer secret be hard-coded into the
source.

The closes thing I have found, that doesn't require the consumer
secret embedded in the source, is a description of how it might work,

  http://groups.google.com/group/twitter-development-talk/browse_thread...
But, I cannot find any docs/examples where this scenario has actually
been implemented.

   It does exist. While I can't speak for Twitter and whatever  
  internal issues
   are slowing up its rollout, TTYtter has been a test bed for the key
   exchange
   for some time now. Most of the users have found the process painless. You
   can
   see how a sample workflow works in the documentation, or try it yourself.
   The
   app itself is open Perl.

          http://www.floodgap.com/software/ttytter/

   I'm sure Taylor will comment on what will be happening to roll it out to
   more
   potential consumers.

   --
    personal:
  http://www.cameronkaiser.com/--
    Cameron Kaiser * Floodgap Systems *www.floodgap.com*
   ckai...@floodgap.com
   -- People are weird. -- Law  Order SVU
   ---


[twitter-dev] Can i hav an Auto Response to Tweets via API.

2010-08-01 Thread Rishit
We can read Tweets using API. But is there anything (Method/API
workaround) that lets me reply to Tweets by a predefined msg (viz. I'm
on Vacation. Will Get back on Friendship Day) automatically and real
time?


[twitter-dev] Suggestion: Search for [hashtag] but exclude people following [username] from the results

2010-08-01 Thread Zub
Hi,

I've been searching for the below functionality in Twitter's search
API:

 Search for [hashtag] but exclude people following [username] from the 
 results 

Currently it doesn't seem possible from what I can tell, but I would
be very grateful if you do know of a way to achieve this and can share
it with me here.

If it can't be done currently, I would like to put it forward as a
suggestion to the Twitter development team.
I feel it would be a powerful tool for avoiding hastag wars.

Example (made up):

@TwitterHotCakes and @TodaysHandyCalculation have together resolved to
use different hastags, and they attempt to educate their followers
about the appropriate hashtag to use (#TwitHotC or #HandyCalc).

However, human behavior being what it is, a proportion of each group's
followers persist in using #THC in their tweets without thinking.

This suggestion enables the smart searcher, using the advanced search
options, to search for #TSW (desiring tweets about #TwitterHotCakes),
but specify that they don't want to see tweets from people who follow
@TodaysHandyCalculation. Thereby reducing the chance they will be
exposed to off topic tweets.

There may of course be some small crossover, with people who follow
both tweeters being excluded from the results. I feel that this is the
lesser of two evils however, because it punishes the person using the
wrong hashtag, rather than the searcher who would otherwise have to
wade through twice as many tweets for content.

Thoughts?


[twitter-dev] Re: Uploading photo w\ OAuth echo

2010-08-01 Thread Bondi
Thanks Tom !

So that is what I thought - but I still can't upload the photo's.
I've been trying mainly with twitPic and getting 401.
I have been reading posts and discussion and I think I have it all
right.
My thought is that maybe it's a matter of encoding the header.
Should I encode the whole header ? Just the values of the twitPic
header ? Or maybe just the values for the verify credentials header ?

Help would be much obliged :-)
Roi.

On Jul 31, 3:37 am, Tom allerleiga...@gmail.com wrote:
 Basically what you do in an echo is make an oAuth request to the
 verify_credentials.json page, but you don't do the actual request -
 instead, you take the Authorization: header and send it to Twitpic.

 So, no, you don't add anything else than you would have for a normal
 call to verify_credentials.

 Tom

 On Jul 29, 3:21 pm, Bondi roibo...@gmail.com wrote:

  Hi.

  I also keep getting 401 from Twitpic.

  Just to make sure - do we need to add the realm to the signature
  calculation ? Or only to the header ?

  Thanks for the help,
  Roi.


[twitter-dev] Error http 500 again

2010-08-01 Thread Federico
Well my post has been deleted, but I did not care because the problem
was magically solved.
However, I have experienced the same problem again for the last 4
hours..
What is going on?


Re: [twitter-dev] Re: Sending 1600 DMs?

2010-08-01 Thread Vladimir Dvornik
Who knows what is Direct Message limits for oauth users?

2010/7/29, Julio Biason julio.bia...@gmail.com:
 If you need to send that many messages, put them on your public
 timeline and people that follow you will get them.

 On Wed, Jul 28, 2010 at 9:06 PM, Bess bess...@gmail.com wrote:
 There is no way to lift this DM daily limit?

 If I build an emergency system to report accidents then official
 twitter for police or Red Cross won't be able to receive more than 250
 DM per day.

 If there is a major accidents that involve more than 250 injuries
 assuming each DM per injury report, Twitter will send out Whale
 error after exceeding that limit?

 On Jul 27, 10:01 pm, Mark Sievers mark.siev...@gmail.com wrote:
 Right on, cheers Chris!

 On Jul 28, 2:53 pm, Chris Thomson chri...@chris24.ca wrote:

  You can only send 250 DMs from one account per
  day:http://support.twitter.com/articles/15364-about-twitter-limits-update...

  --
  Chris Thomson

  On Jul 28, 2010, at 12:47 AM, Mark Sievers wrote:

  http://twitter.com/blekko/status/19714365588

   Kind of curious what would happen myself. The call is not itself
   rate-
   limited, and the target must be following you (ie they have opted in)
   so this is ok, but wonder if firing off 1600 DMs in the space of a
   few
   minutes raises any red flags in the Twitter mopther ship.

  http://dev.twitter.com/doc/post/direct_messages/new



 --
 Julio Biason julio.bia...@gmail.com
 Twitter: http://twitter.com/juliobiason



[twitter-dev] Can you get back the ID when you tweet thru the API?

2010-08-01 Thread James
I'm idly playing around with a Open Source ticket system that
communicates via twitter, and was wandering if it was possible to get
the ID of my new tweet back when I post an tweet through the API?

http://dev.twitter.com/doc/post/statuses/update seems to indicate you
can't? I'm guessing the answer will be you can't due to how twitter
works?

I'm left with searching through the users recent Tweets to find it,
which isn't perfect because twitter may do something like change a URL
to a bit.ly one, thus making the text change.  Does anyone have any
better work-arounds?

Thanks,
James

ps. http://elastik.sourceforge.net/ is the project, screenshots at
http://forums.devnetwork.net/viewtopic.php?f=50t=118517



[twitter-dev] Re: Getting 401 Unautherised when tryint to authenticate with oauth on favorites create and destroy.

2010-08-01 Thread Onn E
Thank you Taylor.

That solved my problem.

All the best.
Onn


On Jul 27, 5:33 pm, Taylor Singletary taylorsinglet...@twitter.com
wrote:
 Hi Onn,

 Our documentation 
 athttp://dev.twitter.com/doc/post/favorites/create/:idmayhave been
 unclear in the past (it may even still be unclear).

 You don't need to pass the id element directly as a parameter -- it's a
 globbed parameter from the resource URL itself -- can you try your request
 after removing the id= 19408545095 element?

 Thanks,
 Taylor



 On Tue, Jul 27, 2010 at 3:24 AM, Onn E onn.elbo...@gmail.com wrote:
  Hi,

  We are integrating into OAuth. So far we managed to sign and work with
  as many as 30 API functions with OAuth. We succeed on all but 2
  functions: /favorites/create and /favorites/destroy.
  We get response code 401 with message: Could not authenticate you.
  Detailed below is the information regarding our signature base string
  and the OAuth header with the signature calculated, as well as the
  request we send to twitter and the response we get from twitter
  (sniffed with wireshark).
  What are we doing wrong here?

  Our signature base string is as follows:

  POSThttp%3A%2F%2Fapi.twitter.com%2F1%2Ffavorites%2Fcreate
  %2F19408545095.xmlid%3D19408545095%26oauth_consumer_key%3D
  %26oauth_nonce%3D1296103309843726254%26oauth_signature_method%3DHMAC-
  SHA1%26oauth_timestamp%3D1280221546%26oauth_token%3DXX-
  %26oauth_version%3D1.0

  Our Header is as follows:

   OAuth oauth_signature=6IEyw61Vi1INPo3e%2FRaeu7GfP38%3D,
  oauth_version=1.0, oauth_nonce=1296103309843726254,
  oauth_signature_method=HMAC-SHA1,
  oauth_consumer_key=XX, oauth_token=XX-
  , oauth_timestamp=1280221546

  Our request looks like this (sniffed with wireshark):

  POST /1/favorites/create/19408545095.xml HTTP/1.1
  Host: api.twitter.com
  User-Agent: AsyncHttpClient 1.0
  Content-Length: 302

  Authorization= OAuth oauth_signature=6IEyw61Vi1INPo3e
  %2FRaeu7GfP38%3D, oauth_version=1.0,
  oauth_nonce=1296103309843726254, oauth_signature_method=HMAC-SHA1,
  oauth_consumer_key=X, oauth_token=XX-
  X, oauth_timestamp=1280221546

  The response we get looks like this:

  HTTP/1.1 401 Unauthorized
  Date: Tue, 27 Jul 2010 09:04:17 GMT
  Server: hi
  Status: 401 Unauthorized
  WWW-Authenticate: Basic realm=Twitter API
  X-Runtime: 0.00346
  Content-Type: application/xml; charset=utf-8
  Content-Length: 156
  Cache-Control: no-cache, max-age=1800
  Set-Cookie: k=62.219.129.78.1280221457069202; path=/; expires=Tue, 03-
  Aug-10 09:04:17 GMT; domain=.twitter.com
  Set-Cookie: guest_id=128022145709437051; path=/; expires=Thu, 26 Aug
  2010 09:04:17 GMT
  Set-Cookie:

  _twitter_sess=BAh7CDoPY3JlYXRlZF9hdGwrCMgqJRMqAToHaWQiJWYwOTYxZjdmYTMxY2Y5% 
  250AODhlNzI5YzRiNmIyOGJhNDI2IgpmbGFzaElDOidBY3Rpb25Db250cm9sbGVy

  %250AOjpGbGFzaDo6Rmxhc2hIYXNoewAGOgpAdXNlZHsA--2aa62d945615ad137a5fe099065e 
  64a4bb5120b1;
  domain=.twitter.com; path=/
  Expires: Tue, 27 Jul 2010 09:34:17 GMT
  Vary: Accept-Encoding
  Connection: close

  ?xml version=1.0 encoding=UTF-8?
  hash
   request/1/favorites/create/19408545095.xml/request
   errorCould not authenticate you./error
  /hash

  Thanks,
  Onn


[twitter-dev] Re: Cannot access homepage/timeline for over 24 hours

2010-08-01 Thread xfreakyn
I am also experiencing the same problem! Please help. Thankyou!

On Aug 1, 1:31 am, Alex Popescu the.mindstorm.mailingl...@gmail.com
wrote:
 Hi guys,

 I know this is probably not the best place to report this issue, but I
 couldn't find any other way to contact you.

 For the last 24 hours I haven't been able to get on my account
 homepage. My account seems to be still activehttp://twitter.com/al3xandru,
 I can successfully log in, but when accessing the homepage I get an:

 Something is technically wrong.
 Thanks for noticing—we're going to fix it up and have things back to
 normal soon.

 Twitter apps on my iPhone cannot connect either reporting a 500 error.
 But I can send tweets and also access @replies and dm-s. So it is only
 the fetching the timeline that seems broken.

 Can someone ping the support team to look into this?

 many thanks in advance,

 :- alex


[twitter-dev] Re: Cannot access homepage/timeline for over 24 hours

2010-08-01 Thread xfreakyn
Hello.

I am also experiencing the same problem for over 24hours.
I cannot see the timeline and also unable to get in to the home page
as the robot page will appear.

And when i checked the API status, it seems that the service is
disrupted.
Please help!

Thankyou!


Re: [twitter-dev] Can you get back the ID when you tweet thru the API?

2010-08-01 Thread Cameron Kaiser
 I'm idly playing around with a Open Source ticket system that
 communicates via twitter, and was wandering if it was possible to get
 the ID of my new tweet back when I post an tweet through the API?
 
 http://dev.twitter.com/doc/post/statuses/update seems to indicate you
 can't? I'm guessing the answer will be you can't due to how twitter
 works?

The update method actually does return the tweet you just posted, with the
ID inside.

-- 
 personal: http://www.cameronkaiser.com/ --
  Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckai...@floodgap.com
-- Assassinate me you may; intimidate me you cannot. -- John Philpot Curran ---


Re: [twitter-dev] Can i hav an Auto Response to Tweets via API.

2010-08-01 Thread Cameron Kaiser
 We can read Tweets using API. But is there anything (Method/API
 workaround) that lets me reply to Tweets by a predefined msg (viz. I'm
 on Vacation. Will Get back on Friendship Day) automatically and real
 time?

No, but any number of bots could. However, if you reply to every tweet this
way, you are likely to hit the update limit, and Twitter will probably filter
the duplicates anyhow.

-- 
 personal: http://www.cameronkaiser.com/ --
  Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckai...@floodgap.com
-- Yes, but when I try to see things your way it gives me a headache. -


Re: [twitter-dev] Suggestion: Search for [hashtag] but exclude people following [username] from the results

2010-08-01 Thread Cameron Kaiser
 I've been searching for the below functionality in Twitter's search
 API:
 
  Search for [hashtag] but exclude people following [username] from the
 results 
 
 Currently it doesn't seem possible from what I can tell, but I would
 be very grateful if you do know of a way to achieve this and can share
 it with me here.

No, there is no way to do this specific action from the API. You would have
to ask for the results, either from the Search API or the Streaming API, and
then do your own filtering based on the follower list you would have already
constructed.

-- 
 personal: http://www.cameronkaiser.com/ --
  Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckai...@floodgap.com
-- Generating random numbers is too important to be left to chance. ---


[twitter-dev] Re: Error trying to access

2010-08-01 Thread Carla Cavalcante
I'm having the same problem as you!!

On 31 jul, 18:47, Federico f.diazr...@gmail.com wrote:
 Someone called Taylor previously said that there would be maintenance
 of twitter servers, and some user would not be able to use twitter for
 about 5 hours.
 However I have been trying to use twitter for about 21 hours and I
 receive http 500 error.
 Also, with my twitter app for my cellphone, I can see DM and @, but I
 cant see twitts from the people I follow.
 I have tried to access with my web browser and I get technically
 something is wrong.
 When I would be able to use twitter again?


[twitter-dev] Re: Sending 1600 DMs?

2010-08-01 Thread Konpaku Kogasa
On Aug 1, 3:42 am, Vladimir Dvornik hagen.perep...@gmail.com wrote:
 Who knows what is Direct Message limits for oauth users?

It's the same. OAuth limits are different from basic auth (which is
going out soon anyways) for GETS, but POST limits are the same.

- Konpaku


[twitter-dev] Getting all retwitts for a specific twitt

2010-08-01 Thread Omri
Hey,

i wonder if there is anyway to query twitter to all retwitts performed
on a specific twitt.
im looking for a method to gather up recursivly all the retwitts
originating from a specific twitt so i can line up the full
conversation from twitter.

thoughts ?

Omri


[twitter-dev] Re: Error trying to access

2010-08-01 Thread Nik Fletcher
+1 for my account too (@nikf)

-N

On Aug 1, 4:12 pm, Carla Cavalcante
carlacavalcante.cavalca...@gmail.com wrote:
 I'm having the same problem as you!!

 On 31 jul, 18:47, Federico f.diazr...@gmail.com wrote:



  Someone called Taylor previously said that there would be maintenance
  of twitter servers, and some user would not be able to use twitter for
  about 5 hours.
  However I have been trying to use twitter for about 21 hours and I
  receive http 500 error.
  Also, with my twitter app for my cellphone, I can see DM and @, but I
  cant see twitts from the people I follow.
  I have tried to access with my web browser and I get technically
  something is wrong.
  When I would be able to use twitter again?


[twitter-dev] Can't remove saved search if no results

2010-08-01 Thread Ken
I give up trying to find the bug submission page on Twitter. Here
goes.

From Twitter.com, I saw a tweet that had been posted from The Hague
(Netherlands).
I clicked the from link to see the little map and access the link,
Tweets from this place.
I clicked Tweets from this place and saw other tweets posted from
The Hague.
I clicked save this search. Since I already had 10 saved searches, I
had to remove one first.
In my saved searches now appeared The Hague, South Holland.
The next day, the name of this place (in my saved searches) had
mysteriously changed to 's-Gravenhage, Zuid-Holland.
Clicking on the link, there are no tweets from this place.
And - perhaps because there were no results - there is no link to
remove the saved search.


Re: [twitter-dev] Re: Error trying to access

2010-08-01 Thread Carla Cavalcante
Your problem has been solved?

2010/8/1 Carla Cavalcante carlacavalcante.cavalca...@gmail.com

 I'm having the same problem as you!!

 On 31 jul, 18:47, Federico f.diazr...@gmail.com wrote:
  Someone called Taylor previously said that there would be maintenance
  of twitter servers, and some user would not be able to use twitter for
  about 5 hours.
  However I have been trying to use twitter for about 21 hours and I
  receive http 500 error.
  Also, with my twitter app for my cellphone, I can see DM and @, but I
  cant see twitts from the people I follow.
  I have tried to access with my web browser and I get technically
  something is wrong.
  When I would be able to use twitter again?




-- 
*Carla Cavalcante*


[twitter-dev] Re: Can't remove saved search if no results

2010-08-01 Thread Ken
I've since found the bug submission page, but I'll just follow up here
and then post a bug.

I implemented the saved search api methods - so now it's a developer
question suitable for this list!

I was able to create saved searches for text queries and for places
(e.g. place:55da0f3350b51881)

I was able to add more than 10 saved searches to an account through
the API - using Twitter.com, there's a limit of 10.

For saved_searches/destroy.xml, according to the documentation,
supported request methods are POST and DELETE, but I got the following
response:

?xml version=1.0 encoding=UTF-8?
hash
  request/1/saved_searches/destroy.xml/request
  errorThis method requires a GET./error
/hash

So that's bizarre. Result of using destroy.xml with GET for any saved
search id was always errorNot found/error.

Finally, I created a saved search for a query that returns no results:
djsalkofsj. On Twitter.com the result is No real-time results for
djsalkofsj and there is no Remove this saved search link. You can't
actually save such a search via Twitter.com, but if a user creates an
erroneous saved search through an app, or one that dies after a while,
there is no way to delete it through Twitter.com.


[twitter-dev] Re: Uploading photo w\ OAuth echo

2010-08-01 Thread Tom
The oAuth echo header is usable for any service around, because it
does not need anything specific to the service you use.

Forget about twitpic and any service you want to use at first, because
that's the second step. First, start by creating the authorization
header for the verify_credentials.json page. If you want to check
whether the request actually works, just make the actual request to
the verify_credentials.json page - it shouldn't give a 401 error.

If you have got the proper Authorization header, then go to step 2:
don't make the request to twitter, but send *exactly the same* header
to TwitPic - just not as an Authorization header but as the oAuth
header they want.

What TwitPic does with this header is simply: instead of you making
the request to Twitter, they do it. Because you have signed the
request with the information you need, TwitPic can simply execute the
request. If you send a wrong header, then TwitPic will *get* the 401
error and simply return it to you.

If you don't like text, here's a simple data scheme:
normal: client - twitter
with echo: client - twitpic - twitter

Tom


On Aug 1, 8:40 am, Bondi roibo...@gmail.com wrote:
 Thanks Tom !

 So that is what I thought - but I still can't upload the photo's.
 I've been trying mainly with twitPic and getting 401.
 I have been reading posts and discussion and I think I have it all
 right.
 My thought is that maybe it's a matter of encoding the header.
 Should I encode the whole header ? Just the values of the twitPic
 header ? Or maybe just the values for the verify credentials header ?

 Help would be much obliged :-)
 Roi.

 On Jul 31, 3:37 am, Tom allerleiga...@gmail.com wrote:

  Basically what you do in an echo is make an oAuth request to the
  verify_credentials.json page, but you don't do the actual request -
  instead, you take the Authorization: header and send it to Twitpic.

  So, no, you don't add anything else than you would have for a normal
  call to verify_credentials.

  Tom

  On Jul 29, 3:21 pm, Bondi roibo...@gmail.com wrote:

   Hi.

   I also keep getting 401 from Twitpic.

   Just to make sure - do we need to add the realm to the signature
   calculation ? Or only to the header ?

   Thanks for the help,
   Roi.


[twitter-dev] Re: Open-source, distributed PHP app and consumer secret

2010-08-01 Thread Tom
I've thought about this a lot myself as well, and haven't really came
up with a proper solution either.

- You can try encoding all of your code with zend encoder and hope
that nobody decodes it.
- You can use your own server as a service which sends all requests to
twitter. (This would be my solution)
- You can simply not care at all about the keys - after all, there is
(imo) no real threat in exposing them to customers.
- You can let them use the new Twitter extension for open source
twitter clients - although I am not sure whether it's ready yet.

Tom


On Aug 1, 1:49 am, Michael Babcock mjet...@gmail.com wrote:
 So, I think the solution has to be that the user downloads my app,
 installs it on their site, then registers my app as their own app with
 dev.twitter. After which, they will receive their own key  secret
 pair. They will then input their key  secret pair into my app which
 is living on their site, stored in some configuration file or database
 settings table.

 This way I don't distribute my secret. They will have to store their
 own key  secret pair, but this wouldn't be different than a site with
 its own proprietary solution. The only stick point is that I will not
 get any branding rights on their posts/tweets, as they will have
 registered the app as their own and will be in control of the post
 branding.

 The other option is to host a tweet service somewhere in the cloud. My
 app, installed on their site, would point to the service and they
 would have to grant permission to the service to make the tweets to
 their accounts. I like this second solution because it seems cleaner
 for the end user to set up and get running. However, this would mean
 that I would then be responsible for maintaining a service. And
 frankly, that sounds like a drag on resources.

 These two are the best solutions I can figure given the circumstances.
 Normally, I would wait for Twitter to get this sorted, however, I
 don't want to risk disappointing my user base when the August 16th
 deadline rolls around.

 Does these solutions sound viable or am I all wet?

 Pros, cons, alternatives?

 Thx.

 On Jul 27, 7:18 am, Decklin Foster deck...@red-bean.com wrote:

  Excerpts from Michael Babcock's message of Mon Jul 26 19:28:15 -0400 2010:

   So, I after spending the day looking through documentation,
   developer's discussion and testing various OAuth code bits, it is my
   understanding that there is no secure OAuth solution for open-source
   PHP developers. But, the August 16th deadline is still looming.

  I am also concerned about this. Here is the response I got from support:

  we're continuing to experiment with this feature, and have not made it
  available further. I apologize for the delay and inconvenience, but keep
  an eye on our developer talk group for future announcements.

  I have been watching this list for about a month (prior to checking with
  support) in case the feature is discussed here before being announced.
  @twitterapi, could we get some clarification on whether or not something
  will be ready before the August 16 deadline?