[twitter-dev] Re: Can our twitter app call /oauth/revoke?

2010-04-21 Thread Andy Freeman
While I may not want to revoke access for a key, I don't want to leave folks logged into twitter if they use my application from a shared computer. (And no, asking them to log out from twitter isn't reasonable.) It used to be that oauth/authorize did NOT leave users logged into twitter, now it

[twitter-dev] Re: How to end user session?

2010-04-21 Thread Andy Freeman
While oauth/authenticate with force_login=true does force users to provide credentials, oauth/authenticate leaves them logged into twitter, which is somewhat dangerous from a shared or public computer. oauth/authorize used to behave differently - it didn't leave users logged in. However, that

[twitter-dev] Re: 403 on statuses longer than 140 characters

2010-03-20 Thread Andy Freeman
URLs if it will get the tweet to fit into 140 characters.   ---Mark http://twitter.com/mccv On Fri, Mar 19, 2010 at 8:52 AM, Abraham Williams 4bra...@gmail.com wrote: The URLs might be shortened not the text of the status itself. Abraham On Thu, Mar 18, 2010 at 22:03, Andy Freeman

[twitter-dev] Re: 403 on statuses longer than 140 characters

2010-03-18 Thread Andy Freeman
What in the return JSON tells us that you've shortened? For example, are you setting/returning truncate? Are you returning the shortened tweet in status? On Mar 18, 12:30 pm, Mark McBride mmcbr...@twitter.com wrote: I should clarify.  Returning a 403 is what we do right now.  Later today

[twitter-dev] Re: Permanent Profile URL

2010-02-26 Thread Andy Freeman
However, there's still no way to reference a tweet using the user id. See http://code.google.com/p/twitter-api/issues/detail?id=1242 On Feb 23, 2:47 pm, Paul Tarjan ptar...@gmail.com wrote: Perfect, Marc hit the nail on the head. Thank you.

[twitter-dev] Re: How to show An application would like to connect to your account EACH TIME users login into my service?

2010-02-02 Thread Andy Freeman
Huh? http://apiwiki.twitter.com/Twitter-REST-API-Method:-oauth-authorize does not mention force_login. http://apiwiki.twitter.com/Twitter-REST-API-Method:-oauth-authenticate does. However, /oauth/authenticate leaves the user logged into twitter. On Feb 2, 12:00 pm, lalit goklani

[twitter-dev] Re: Possibility to link to the user page not by the name but by the id.

2010-01-31 Thread Andy Freeman
I starred 1412 and commented on 1242 that they're basically the same. On Jan 30, 11:46 pm, Ivan Glushkov gli.w...@gmail.com wrote: Oh, no! I haven't found it! I added comment in my issue that it's duplicate, but i don't know how to close it. On Sun, Jan 31, 2010 at 3:44 AM, Andy Freeman

[twitter-dev] Re: Possibility to link to the user page not by the name but by the id.

2010-01-30 Thread Andy Freeman
Argh! I opened such a feature request late last November AND you commented on it late last December. See http://code.google.com/p/twitter-api/issues/detail?id=1242 . On Jan 30, 11:17 am, Abraham Williams 4bra...@gmail.com wrote: There does not appear to be. You could open an feature request

[twitter-dev] Re: Search API: new HTTP response code 420 for rate limiting starting 1/18/2010

2010-01-23 Thread Andy Freeman
(1) When will http://apiwiki.twitter.com/HTTP-Response-Codes-and-Errors be updated? (2) How does 420 differ from 400? On Dec 22 2009, 4:19 pm, Wilhelm Bierbaum wilh...@twitter.com wrote: Eventually the REST API will return the same 420 response code to indicate rate limiting. We wanted to

[twitter-dev] Re: Search API: new HTTP response code 420 for rate limiting now in effect

2010-01-23 Thread Andy Freeman
1) When will http://apiwiki.twitter.com/HTTP-Response-Codes-and-Errors be updated? (2) How does 420 differ from 400? On Jan 23, 4:21 pm, Wilhelm Bierbaum wilh...@twitter.com wrote: In accordance with our previous announcement, we have completed the change to Search API rate limiting response

[twitter-dev] Re: Sent URLs received incompletely if not urlencoded - how to fix?

2010-01-18 Thread Andy Freeman
I suspect that you're sending something like 'text ' + urlencode (url). Note that sending involves urlencoding. On the other end, twitter url urldecodes the status as a whole, but try to figure out what's url encoded in the status. Don't do that. Instead, send 'text ' + url. Your send routine

[twitter-dev] Re: oAuth Authenticate vs. Authorize (force_login)

2009-12-28 Thread Andy Freeman
Then use authenticate. It accomplishes the same effect of authorize. Does it? My notes say that authenticate leaves the user logged into twitter if they weren't before and that authorize doesn't. For my purposes, I'd like to force the user to specify their twitter account and password even if

[twitter-dev] Re: oAuth Authenticate vs. Authorize (force_login)

2009-12-28 Thread Andy Freeman
Then use authenticate. It accomplishes the same effect of authorize. Does it? My notes say that authenticate leaves the user logged into twitter if they weren't before and that authorize doesn't. For my purposes, I'd like to force the user to specify their twitter account and password even if

[twitter-dev] Re: oAuth Authenticate vs. Authorize (force_login)

2009-12-28 Thread Andy Freeman
in. I would prefer that get fixed rather then adding force_login to authorize as I view leaving users logged in as a security risk. Apparently Twitter does not: http://code.google.com/p/twitter-api/issues/detail?id=1070 On Mon, Dec 28, 2009 at 17:13, Andy Freeman ana...@earthlink.net wrote

[twitter-dev] Re: Getting friends as usernames instead of user ids

2009-12-25 Thread Andy Freeman
we are working on releasing a bulk lookup API (i don't have a release date on it yet), and you will be able to use that for this purpose. It would be a big help if there were status urls that used ids - that is, an equivalent to http://twitter.com/raffi/status/7034429825 in terms of your user

[twitter-dev] Re: Getting friends as usernames instead of user ids

2009-12-25 Thread Andy Freeman
we are working on releasing a bulk lookup API (i don't have a release date on it yet), and you will be able to use that for this purpose. It would be a big help if there were status urls that used ids - that is, an equivalent to http://twitter.com/raffi/status/7034429825 in terms of your user

[twitter-dev] Re: Question about Twitter use in library names

2009-12-04 Thread Andy Freeman
IANAL but you might want to look do a trademark search. Some relevant links are at http://uspto.gov/ . On Dec 4, 1:39 pm, Duane Roelands duane.roela...@gmail.com wrote: A question for the Twitter team: I'm the developer and maintainer of an open source library called TwitterVB.  Can I expect

[twitter-dev] Re: Where is the Twitter WADL?

2009-11-16 Thread Andy Freeman
Please don't spend any time on a WADL. The twitter interface is both simple and small. If it's an obstacle to someone On Oct 20, 8:01 am, Chad Etzel c...@twitter.com wrote: Hi Edd, We may provide a WADL in the future, but right now one is not available. -Chad On Tue, Oct 20, 2009

[twitter-dev] Re: flagged as dupe post when string is unique (ideas?)

2009-11-05 Thread Andy Freeman
as noted by other people on this list, twitter is currently rejecting tweets that match either your last update, or an update you recently sent. unfortunately, the API is currently silently failing but it is on the short list to have the API return an error code instead. Can you confirm

[twitter-dev] Re: flagged as dupe post when string is unique (ideas?)

2009-11-03 Thread Andy Freeman
Is the posted status similar to any other status created by that user? Does the above imply that similar will trigger the dup detector? Argh! Please don't tell me that you're now rejecting similar tweets Url shorteners can easily generate similar urls, so if someone is in the habit of

[twitter-dev] Re: lang parameter in the search api

2009-10-27 Thread Andy Freeman
There are ways to figure out language with very short text. In fact, one can identify language changes in documents that contain text in multiple languages. http://www.stanford.edu/class/ee380/Abstracts/090114.html That's not to say that Twitter uses such methods, just that it's possible to

[twitter-dev] Re: Bug? Updates 140 characters return success with prior update payload

2009-10-20 Thread Andy Freeman
Argh - if twitter is going to reject a dup status, I need to know what it's a dup of, not just the last status. On Oct 19, 2:47 am, Dave Sherohman d...@fishtwits.com wrote: On Sun, Oct 18, 2009 at 04:48:13PM -0700, Naveen wrote: I agree. A silent failure seems like the wrong behavior.. It

[twitter-dev] Re: Duplicate Tweets

2009-10-16 Thread Andy Freeman
One thing to do is include the date/time that no chains are required. In general, status messages should be timestamped because it's almost always important to know when they were generated. Yes, tweets are timestamped, but that's the tweet's timestamp, not the date that the status was actually

[twitter-dev] Re: OAuth wed desktop feedback

2009-10-12 Thread Andy Freeman
I know that you asked about oauth workflow, but curl is really useful for debugging purposes. I mention that because using curl with oauth is very painful. I'm not sure what you can do about that. Perhaps calls using basic authentication could have very stringent rate restrictions. This would

[twitter-dev] http vs https for twitter api calls

2009-10-03 Thread Andy Freeman
When should I use https instead of http in twitter api calls? I'd guess that it's okay to use http for oauth-authenticated /show/ user and maybe /statuses/update, but what about the four oauth calls (/ oauth/request_token, /oauth/authorize, /oauth/authenticate, and /oauth/ access_token)?

[twitter-dev] Re: http vs https for twitter api calls

2009-10-03 Thread Andy Freeman
is designed to hide sensitive data (passwords, credit card numbers) from malicious persons.  So it's safe to say that whenever you will be transferring sensitive data (OAuth, passwords) you should use HTTPS. On Sat, Oct 3, 2009 at 12:03 PM, Andy Freeman ana...@earthlink.net wrote: When

[twitter-dev] Re: Changes to Twitter TOS/Rules.

2009-10-01 Thread Andy Freeman
How can an application determine that an account has been suspended? Please assume that the application has OAuth read/write for the account. Thanks, -andy On Sep 15, 9:28 am, John Kalucki jkalu...@gmail.com wrote: The account will be suspended. It won't work, and it won't be visible. You

[twitter-dev] Re: How do I get the user_id for a screen_name WITHOUT

2009-09-30 Thread Andy Freeman
, Andy Freeman ana...@earthlink.net wrote: using a rate-limited call or one with authentication. I'd be (mostly) satisfied with an analog tohttp://twitter.com/al3xin terms of user-id. -- Abraham Williams | Community Evangelist |http://web608.org Hacker |http://abrah.am|http

[twitter-dev] How do I get the user_id for a screen_name WITHOUT

2009-09-28 Thread Andy Freeman
using a rate-limited call or one with authentication. I'd be (mostly) satisfied with an analog to http://twitter.com/al3x in terms of user-id.