Re: 3-legged-OAuth Logout

2011-07-26 Thread Vignesh Sunder
I thought a lot about this when I developed my website (with Facebook as the Server and my django-powered website as the Consumer). And what I did was include a url to Facebook after the user logged out of my website. For those interested, you are invited to check out http://www.thotvote.com. It h

Re: 3-legged-OAuth Logout

2011-07-25 Thread Lior Sion
That depends a lot on the ui. Facebook, for example, logs out on both sites, while Twitter doesn't. If you're worried about a security issue, have you "log out" button say something like "Log out of XXX" where xxx is your site name. Another option I've seen (when relying completely on a 3rd party

Re: 3-legged-OAuth Logout

2011-07-25 Thread Vignesh Sunder
Thanks for the reply..But I feel this could be a security issue, considering the fact that the user (say user1) would not be aware of the fact that he/she has not yet been logged out of Twitter. If another user (say user2) gets hold of the system before user1's cookie/session gets timed out, and ha

Re: 3-legged-OAuth Logout

2011-07-25 Thread DrBloodmoney
On Mon, Jul 25, 2011 at 5:47 AM, Vignesh Sunder wrote: > Hi. I was just curious to know about the logout functionality of > OAuth..When a User logs out from the Consumer (After 3-legged OAuth > login) site, the User's session happens to get flushed. But I believe > this happens only on the Consume

3-legged-OAuth Logout

2011-07-25 Thread Vignesh Sunder
Hi. I was just curious to know about the logout functionality of OAuth..When a User logs out from the Consumer (After 3-legged OAuth login) site, the User's session happens to get flushed. But I believe this happens only on the Consumer side. However, if the User immediately tries to connect to the