Re: [twitter-dev] how do we get the via Client name on Tweets

2010-03-10 Thread Ryan Alford
You have to use OAuth. http://apiwiki.twitter.com/FAQ#HowdoIget“fromMyApp”appendedtoupdatessentfrommyAPIapplication http://apiwiki.twitter.com/FAQ#HowdoIget“fromMyApp”appendedtoupdatessentfrommyAPIapplication Ryan On Wed, Mar 10, 2010 at 4:02 PM, pranzb bhatpra...@gmail.com wrote: Hello all,

Re: [twitter-dev] Pin-based authorization via .NET

2010-03-07 Thread Ryan Alford
Why are you using PIN based authorization for web applications? Web applications don't use PINs. Ryan Sent from my DROID On Mar 7, 2010 4:59 PM, Ricky ri...@digitally-born.com wrote: I'm working on version 2 of Twitterizer, a .NET library for using the Twitter API, but I've run into a weird

Re: [twitter-dev] Re: OAuth newbie question

2010-03-06 Thread Ryan Alford
The token is a posted parameter. The secret is part of the key for the signature. Ryan On Sat, Mar 6, 2010 at 5:55 PM, IDOLpeeps i...@idolpeeps.com wrote: I've overcome the nuances of generating the oauth signature. It shocks me that the API documentation provides no clear indication of

Re: [twitter-dev] Re: OAuth Rate Limit Increase - Not seeing it

2010-03-04 Thread Ryan Alford
Thanks Ryan Sent from my DROID On Mar 4, 2010 5:41 AM, Nik Fletcher nik.fletc...@gmail.com wrote: Hi Guys http://code.google.com/p/twitter-api/issues/detail?id=1501 Cheers -N On Mar 3, 9:42 pm, Milen mi...@thecosmicmachine.com wrote: I couldn't agree more, it's pretty l...

Re: [twitter-dev] Re: OAuth rate limit question

2010-03-03 Thread Ryan Alford
Just to add, I also get the 150 rate limit when using the account/rate_limit_status method. I am using OAuth and api.twitter.com. Ryan On Wed, Mar 3, 2010 at 8:57 AM, Raffi Krikorian ra...@twitter.com wrote: Well - it seems to me that rate limit status may have an issue with it. We will

Re: [twitter-dev] Re: OAuth Rate Limit Increase - Not seeing it

2010-03-03 Thread Ryan Alford
I was able to get that working. I didn't notice that those headers were only sent for requests that counted against the rate limit. Ryan On Tue, Mar 2, 2010 at 6:33 PM, twittelator and...@stone.com wrote: I reported this bug yesterday. Instead of making that extra call, why not look at the

Re: [twitter-dev] Re: OAuth Rate Limit Increase - Not seeing it

2010-03-03 Thread Ryan Alford
scenario into play. Thanks, Ryan On Wed, Mar 3, 2010 at 9:44 AM, Ryan Alford ryanalford...@gmail.com wrote: I was able to get that working. I didn't notice that those headers were only sent for requests that counted against the rate limit. Ryan On Tue, Mar 2, 2010 at 6:33 PM, twittelator

Re: [twitter-dev] forcing api.twitter.com resources - tomorrow

2010-03-02 Thread Ryan Alford
Does OAuth go to the api.twitter.com? The API documentation still has the 4 OAuth methods going to twitter.com. http://apiwiki.twitter.com/Twitter-REST-API-Method:-oauth-request_token http://apiwiki.twitter.com/Twitter-REST-API-Method:-oauth-request_token

Re: [twitter-dev] Re: forcing api.twitter.com resources - tomorrow

2010-03-02 Thread Ryan Alford
:35 pm, Ryan Alford ryanalford...@gmail.com wrote: Does OAuth go to the api.twitter.com? The API documentation still has the 4 OAuth methods going to twitter.com. http://apiwiki.twitter.com/Twitter-REST-API-Method:-oauth-request_token http://apiwiki.twitter.com/Twitter-REST-API-Method

Re: [twitter-dev] 401 - Unauthorized error when diacritics in status

2010-02-23 Thread Ryan Alford
I believe it has been fixed in some libraries in other programming languages, but I can't figure out how to do it in .Net. Ryan On Tue, Feb 23, 2010 at 12:38 PM, Aral Balkan aralbal...@gmail.com wrote: Ooh, if this is the case then it will definitely stop me from using oAuth for Feathers

Re: [twitter-dev] 401 - Unauthorized error when diacritics in status

2010-02-23 Thread Ryan Alford
to me - if you have a way to replicate this, and you are confident its not your oauth libraries, then please let me know. On Tue, Feb 23, 2010 at 11:04 AM, Ryan Alford ryanalford...@gmail.comwrote: I believe it has been fixed in some libraries in other programming languages, but I can't figure

Re: [twitter-dev] Which api url to use?

2010-02-22 Thread Ryan Alford
I *believe* Twitter is moving to versioning the API(which is what the /1/ means..it's version 1). So I would use the URL with the /1/, since the other way be deprecated in the future. Ryan On Mon, Feb 22, 2010 at 11:19 AM, Dmitri Snytkine d.snytk...@gmail.comwrote: Is there a difference

Re: [twitter-dev] Which api url to use?

2010-02-22 Thread Ryan Alford
works without /1, then that's inadvertent, and we'll probably fix that. On Mon, Feb 22, 2010 at 9:18 AM, Ryan Alford ryanalford...@gmail.comwrote: I *believe* Twitter is moving to versioning the API(which is what the /1/ means..it's version 1). So I would use the URL with the /1/, since

Re: [twitter-dev] Which api url to use?

2010-02-22 Thread Ryan Alford
a deprecation date for those yet - but developers should plan on it. please start to migrate to the api.twitter.com/1/ URLs. On Mon, Feb 22, 2010 at 9:26 AM, Ryan Alford ryanalford...@gmail.comwrote: Raffi, Just so you know, http://twitter.com/statuses/update.format; also works. That's what

Re: [twitter-dev] Which api url to use?

2010-02-22 Thread Ryan Alford
, 2010, at 9:42 AM, Ryan Alford wrote: Yes, those are the ones I am talking about. ...

Re: [twitter-dev] Which api url to use?

2010-02-22 Thread Ryan Alford
The documentation for the 4 OAuth methods do not show the versioning URL. I didn't know if they were moved over or not. Ryan Sent from my DROID On Feb 22, 2010 2:08 PM, Raffi Krikorian ra...@twitter.com wrote: the API wiki docs were painstakingly converted to use the

Re: [twitter-dev] Re: oauth request token failing

2010-02-18 Thread Ryan Alford
-SHA1oauth_timestamp=1266500348oauth_version=1.0oauth_signature=eGALeAVpxt4CB%2FuHfkLq51%2FWXRk%3D It still fails for me. I've gotta be missing something obvious. Does anything need to go into my header? On Feb 17, 9:47 pm, Ryan Alford ryanalford...@gmail.com wrote: You order all parameters EXCEPT

Re: [twitter-dev] Re: oauth request token failing

2010-02-18 Thread Ryan Alford
%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp %3D1266501208%26oauth_version%3D1.0 On Feb 18, 8:04 am, Ryan Alford ryanalford...@gmail.com wrote: Can you post the string that you hash to create the signature? Ryan On Thu, Feb 18, 2010 at 8:42 AM, Berto mstbe...@gmail.com wrote: Even with the URL

Re: [twitter-dev] Oauth Signatures

2010-02-18 Thread Ryan Alford
I just tried it and I do get the 401 Unauthorized error when I don't normalize the status text. Ryan On Thu, Feb 18, 2010 at 1:07 PM, Dewald Pretorius dpr...@gmail.com wrote: Can computing the OAuth signature on un-normalized tweet text cause Incorrect Signature issues?

Re: [twitter-dev] Re: Oauth Signatures

2010-02-18 Thread Ryan Alford
Invalid signature on a status update. So, I wondering if the text has some strange characters that cause a discrepancy between my sig calc and their sig check. On Feb 18, 3:13 pm, Ryan Alford ryanalford...@gmail.com wrote: I just tried it and I do get the 401 Unauthorized error when I don't

Re: [twitter-dev] oauth request token failing

2010-02-17 Thread Ryan Alford
Why are you doing this? StringBuilder params = new StringBuilder(); params.append(encode(oauth_consumer_key)); params.append(=\); params.append(encode(CONSUMER_KEY)); params.append(\, );

Re: [twitter-dev] oauth request token failing

2010-02-17 Thread Ryan Alford
Can you post the URL with querystring parameters when you make the request? Ryan On Wed, Feb 17, 2010 at 4:51 PM, Ryan Alford ryanalford...@gmail.comwrote: Why are you doing this? StringBuilder params = new StringBuilder(); params.append(encode(oauth_consumer_key

Re: [twitter-dev] Re: oauth request token failing

2010-02-17 Thread Ryan Alford
=1266440918oauth_nonce=1266440928oauth_version=1.0oauth_signature=l%2BYDrTyWGpvDu3owDlVQLakzVns%3D On Feb 17, 3:52 pm, Ryan Alford ryanalford...@gmail.com wrote: Can you post the URL with querys... On Wed, Feb 17, 2010 at 4:51 PM, Ryan Alford ryanalford...@gmail.com wrote: Why are you doing

Re: [twitter-dev] Re: oauth request token failing

2010-02-17 Thread Ryan Alford
? Ryan Alford wrote: Your querystring parameters are in the wrong order. You have the oauth_nonce AFTER oauth_timestamp. It needs to be before it. The parameters must be in order. Ryan Sent from my DROID On Feb 17, 2010 6:18 PM, Berto mstbe...@gmail.com wrote: To answer

Re: [twitter-dev] Re: Application Suspended

2010-02-16 Thread Ryan Alford
Is it even worst that Raffi has seen this thread and posted in it, and still not a peep? You would think that he would look into it and help out, or contact somebody that could look into it. It's seems like they just have their head in the sand. Ryan On Tue, Feb 16, 2010 at 9:13 AM, Jim

Re: [twitter-dev] Re: What's up with OAuth?

2010-02-14 Thread Ryan Alford
If I am not mistaken, the oauth_verifier is for the PIN. So if you are not a desktop app, then its not required. Ryan Sent from my DROID On Feb 14, 2010 1:04 AM, jon jonhoff...@gmail.com wrote: It worked for a one time oauth conversion for about 3000 accounts (i ran a batch job across five

Re: [twitter-dev] Re: Looking for someone to help wiith oauth

2010-02-13 Thread Ryan Alford
You can ask technical questions here. You had developers that gave up because of cookie handling? Uhhh... Ryan Sent from my DROID On Feb 13, 2010 10:44 AM, Merrows sa...@merrows.co.uk wrote: Thanks for all the interesting comments. Actually I have found it hard to locate the expertise. I

Re: [twitter-dev] Re: What's up with OAuth?

2010-02-11 Thread Ryan Alford
He specifically states the possibility for mobile apps to use xAuth. Ryan Sent from my DROID On Feb 11, 2010 11:27 PM, kehers keh...@gmail.com wrote: Talking xAuth, hope mobile apps count as 'applications except web applications'

Re: [twitter-dev] Looking for someone to help wiith oauth

2010-02-10 Thread ryan alford
I have implemented OAuth into my own WPFapplication.(written in C#) You can view my library at CodePlex. http://twiteclipseapi.codeplex.com/ Ryan On Wed, Feb 10, 2010 at 9:48 AM, Merrows sa...@merrows.co.uk wrote: I am seeking someone skilled in .NET 3.5, C# to help with implementing

Re: [twitter-dev] Re: oAuth and more users?

2010-02-10 Thread ryan alford
: And where get the users there own keys to use the application with there own twitter account? (e.g tweet deck) On 9 Feb., 18:29, John Meyer john.l.me...@gmail.com wrote: On 2/9/2010 10:03 AM, ryan alford wrote: So you are saying that the user of a third party application must register

Re: [twitter-dev] Re: oAuth and more users?

2010-02-09 Thread ryan alford
Your users should not be required to get their own consumer key and consumer secret. Ryan Sent from my DROID On Feb 9, 2010 10:04 AM, _Bensn benjaminroh...@t-online.de wrote: Where can they create there own keys? here - https://twitter.com/apps/new ? On 8 Feb., 18:55, John Meyer

Re: [twitter-dev] Re: oAuth and more users?

2010-02-09 Thread ryan alford
Yes it does seem backwards. I made my statement because the link he gave was for application consumer keys, not the OAuth tokens. Ryan Sent from my DROID On Feb 9, 2010 11:27 AM, John Meyer john.l.me...@gmail.com wrote: On 2/9/2010 9:20 AM, ryan alford wrote: Your users should

Re: [twitter-dev] Re: oAuth and more users?

2010-02-09 Thread ryan alford
So you are saying that the user of a third party application must register a completely new consumer key and consumer secret? So when TweetDeck goes to OAuth, every user will create their own consumer key and consumer secret, therefore, having 10s of thousands of TweetDeck applications

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-02-04 Thread ryan alford
Does it fail everytime? I will test mine when I get to work in about an hour. Ryan Sent from my DROID On Feb 4, 2010 12:23 AM, Duane Roelands duane.roela...@gmail.com wrote: And please forgive my obnoxious tone; I'm tired and frustrated. :) On Feb 4, 12:05 am, Duane Roelands

Re: [twitter-dev] .NET and oAuth update problems

2010-02-04 Thread ryan alford
I just did a test with this status... Testing my Twitter OAuth library with some special characters !?:*^%...@!~`=+-_ and it went through without any errors and posted the correct status. Ryan On Wed, Feb 3, 2010 at 8:02 PM, ryan alford ryanalford...@gmail.com wrote: I don't know which

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-02-04 Thread ryan alford
that I am configuring everything the right way. On Thu, Feb 4, 2010 at 4:43 PM, ryan alford ryanalford...@gmail.comwrote: Does it fail everytime? I will test mine when I get to work in about an hour. Ryan Sent from my DROID On Feb 4, 2010 12:23 AM, Duane Roelands duane.roela

Re: [twitter-dev] .NET and oAuth update problems

2010-02-03 Thread ryan alford
I have it working and have had it working for months. My code is open-source and written in C#. http://twiteclipseapi.codeplex.com/ I haven't tried every special character, though I haven't run across a character that didn't work. Ryan Sent from my DROID On Feb 3, 2010 6:53 PM, Andrew Badera

Re: [twitter-dev] .NET and oAuth update problems

2010-02-03 Thread ryan alford
pretty elegant. --ab On Wed, Feb 3, 2010 at 7:48 PM, ryan alford ryanalford...@gmail.com wrote: I have it working ...

Re: [twitter-dev] .NET and oAuth update problems

2010-02-03 Thread ryan alford
to recall there were explicit exceptions in that ver of that stuff ... maybe a year ago now? --ab On Wed, Feb 3, 2010 at 7:57 PM, ryan alford ryanalford...@gmail.com wrote: I don't want to tak...

Re: [twitter-dev] Mobile java client - happy with OAuth as it is

2010-02-02 Thread ryan alford
Another problem with this approach is that you are now required to have a server. So now a developer would have the added expense of paying for a server. Now if the developer already had a server, then it's a moot point, but not all developers have their own hosted servers. What happens when

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-02-02 Thread ryan alford
=d985f559241ea3ba0fc9d6ae842e87a3oauth_signature=hgWo0cdbttaQnUEEWkFU1USCjMc%3Doauth_signature_method=HMAC-SHA1oauth_timestamp=1265164536oauth_token=***oauth_version=1.0status=%5C%27hello%5C%27 I'm using this library http://code.google.com/p/oauth/ On Jan 29, 6:10 am, ryan alford ryanalford

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-01-29 Thread ryan alford
' = $statusStr))¨ the misterious message ¨incorrect signatures¨ as response. I dont know what to do, becouse i´m following all the stuffs that are described on the Twitter-async API. It began to happen the last Tuesday 26th. My regards. Arian On 27 ene, 00:30, ryan alford ryanalford...@gmail.com wrote

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-01-26 Thread ryan alford
I still don't see your status in the query string of the URL. I see it in string for the signature, but in your actual URL, it's not there. This is my entire URL when posting a status update:

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-01-26 Thread ryan alford
Don't do the POST request data. You do that for Basic Auth, but not for OAuth. Ryan On Tue, Jan 26, 2010 at 1:44 PM, eco_bach bac...@gmail.com wrote: Ryan Since its a POST its part of my request.data. Didn't think I also needed as part of my query string but will try. Do you know if

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-01-26 Thread ryan alford
Yes, you could assume your signature creation is correct for most API calls. However, as you see with the update status API call, it has the extra parameter that is the status. Ryan On Tue, Jan 26, 2010 at 1:46 PM, ryan alford ryanalford...@gmail.comwrote: Don't do the POST request data. You

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-01-26 Thread ryan alford
The hash algorithm can product both upper and lower case letters.. Ryan On Tue, Jan 26, 2010 at 1:53 PM, eco_bach bac...@gmail.com wrote: Also noticed, minor thing, but your signature ends in '%253d' Mine in uppercase '%253D'

Re: [twitter-dev] Re: 'Incorrect signature' on status update with OAuth when verify credentials works

2010-01-26 Thread ryan alford
It is still a POST, you just don't write the post data to the request. That post data is now in the query string where Twitter is expecting it. Ryan Sent from my DROID On Jan 26, 2010 4:32 PM, eco_bach bac...@gmail.com wrote: Hi Ryan Changed to 'GET' and it seems I still get the Incorrect

Re: [twitter-dev] Re: getting more information than 'Could not authenticate...'

2010-01-25 Thread ryan alford
Are you putting the status parameter in the query string? If not, you should be, or atleast, that's what I had to do to get it to work. Ryan On Mon, Jan 25, 2010 at 8:22 AM, eco_bach bac...@gmail.com wrote: Hi Michael Good point. Actionscript 3. Chices are Twitterscript and Tweetr. As far

Re: [twitter-dev] Not able to read unicode from Twitter Response XML in C#.net

2010-01-25 Thread ryan alford
Can you paste an example of the bad characters as .Net shows them, and what they should really be? Ryan On Mon, Jan 25, 2010 at 5:36 AM, Rejeev rejeevtho...@gmail.com wrote: Hi all, My Twitter response XML contains some unicode characters , I am not able to read that in C#.net. Its showing

Re: [twitter-dev] Re: Can new twitter account be created from API?

2010-01-25 Thread ryan alford
If Twitter allowed the API to create new accounts, what's to say that somebody won't create a script to create millions of new accounts? Ryan On Mon, Jan 25, 2010 at 11:22 AM, Cameron Kaiser spec...@floodgap.comwrote: Or is the reason this is not implemented anywhere is because this sort of

Re: [twitter-dev] 'Incorrect signature' on status update with OAuth when verify credentials works

2010-01-25 Thread ryan alford
I am just wondering why you can't keep all of your questions in the same thread? If somebody was having the same issues as you, they would have to look through 10+ of your threads. To try to answer the question, are you including the status parameter as part of the query string, which in turn,

Re: [twitter-dev] Re: sqllite command for writing to local DB

2010-01-24 Thread ryan alford
Searching Google for writing data to sqlite java would help you out. Sent from my DROID On Jan 24, 2010 7:41 PM, Kidd jva...@gmail.com wrote: Bump!!? On Jan 17, 3:38 pm, Kidd jva...@gmail.com wrote: Hello all, I'm trying to capture data from...

Re: [twitter-dev] Re: sqllite command for writing to local DB

2010-01-24 Thread ryan alford
Not java though. Thought this was the Android email list Sent from my DROID On Jan 24, 2010 7:41 PM, Kidd jva...@gmail.com wrote: Bump!!? On Jan 17, 3:38 pm, Kidd jva...@gmail.com wrote: Hello all, I'm trying to capture data from...

Re: [twitter-dev] Rate limits

2010-01-24 Thread ryan alford
If I am not mistaken, the reset time in seconds is the number of seconds from 1/1/1970. Ryan Sent from my DROID On Jan 24, 2010 8:42 PM, EastSideDev eastside...@gmail.com wrote: When I get the rate_limit_status.xml, this is what I get: Array ( [hash] = Array (

Re: [twitter-dev] Better understanding of 'signature'

2010-01-22 Thread ryan alford
That is one of your problems. The signature needs to be created for each request. Here is how I do it in C#. I know it's not the language you are using, but hopefully it will help on how to create the signature. Then you can use similar libraries in Flash(if there are similar libraries) to make

Re: [twitter-dev] Confused about OAuth 1.0 vs 1.0a and Twitter API docs

2010-01-22 Thread ryan alford
If you look at the very top of the 1.0 spec, you will see a yellow box... This specification was obsoleted by OAuth Core 1.0 Revision Ahttp://oauth.net/core/1.0a on June 24th, 2009 to address a session fixation attackhttp://oauth.net/advisories/2009-1/. The OAuth Core 1.0 Revision A specification

Re: [twitter-dev] Confused about OAuth 1.0 vs 1.0a and Twitter API docs

2010-01-22 Thread ryan alford
, at 1:18 PM, ryan alford wrote: If you look at the very top of the 1.0 spec, you will see a yellow box... This specification was obsoleted by OAuth Core 1.0 Revision A on June 24th, 2009 to address a session fixation attack. The OAuth Core 1.0 Revision A specification is being obsoleted

Re: [twitter-dev] Re: Not getting correct access token when using OAuth for sign in

2010-01-21 Thread ryan alford
The plus sign (+) in your signature should be encoded. You should URL encode the signature just as you do the other parameters. Ryan On Thu, Jan 21, 2010 at 2:25 PM, eco_bach bac...@gmail.com wrote: Hmm still not working, signature at the end. I believe I get an Httpstatus of '0'

Re: [twitter-dev] temporarily overloaded 503 Service Unavailable

2010-01-20 Thread ryan alford
I don't think they user cares why Twitter is overloaded, so simply telling them that its overloaded should be enough. Ryan Sent from my DROID On Jan 20, 2010 7:13 AM, eco_bach bac...@gmail.com wrote: Noticing quite a few ' temporarily overloaded 503 Service Unavailable messages when trying to

Re: [twitter-dev] Beginner question : How to get the user ID after authorize OAuth step?

2010-01-20 Thread ryan alford
The screen_name is returned in the querystring along with the oauth_token and the oauth_token_secret values. Ryan On Wed, Jan 20, 2010 at 6:26 AM, Pitt pierre.mar...@gmail.com wrote: Hi, I'm trying to implement a browser app and Im just blocking at the first step... After the user granted

Re: [twitter-dev] Obtaining access token WITHOUT using a PIN

2010-01-20 Thread ryan alford
You DO NOT need the PIN for a browser app. It is ONLY REQUIRED for desktop apps. 1. oauth_consumer_key = Consumer key given to you by Twitter 2. oauth_token = The token 3. oauth_signature_method = HMAC-SHA1 4. oauth_signature = computed HMAC-SHA1 hash value of the other parameters 5.

Re: [twitter-dev] please help - sporadic '403 Forbidden:' error message when using OAuth Sign-In process

2010-01-20 Thread ryan alford
Isn't this the same problem that you posted about yesterday? http://groups.google.com/group/twitter-development-talk/browse_thread/thread/90cb64e3706e1337# http://groups.google.com/group/twitter-development-talk/browse_thread/thread/90cb64e3706e1337#Why create a new post? Ryan On Wed, Jan 20,

Re: [twitter-dev] Need Help on posting Message

2010-01-20 Thread ryan alford
You need to add this messageRequest.ServicePoint.Expect100Continue = false; so your code should look like this... http://codepaste.net/ababkc Ryan On Wed, Jan 20, 2010 at 10:22 AM, Atul atul101...@gmail.com wrote: Hello Frenz, I'm building an application in C#.Net 3.5. My Requirement

Re: [twitter-dev] Re: OAuth best practice

2010-01-18 Thread ryan alford
You are correct. The PIN handshaking is only for Desktop Apps. Ryan On Mon, Jan 18, 2010 at 9:12 AM, eco_bach bac...@gmail.com wrote: Jeff, I might be wrong, as there seems to be some confusion on this, but I believe the extra PIN handshaking is ONLY required for what Twitter defines as

Re: [twitter-dev] Re: Basic Auth Deprecation in June

2010-01-18 Thread ryan alford
yes, it's official. The depreciation of Basic Auth will start in June. Ryan On Mon, Jan 18, 2010 at 10:57 AM, Hwee-Boon Yar hweeb...@gmail.com wrote: Thanks. Hope it's not official. I don't remember reading anything like that on the 2 lists. -- Hwee-Boon On Jan 18, 7:01 pm, Rich

Re: [twitter-dev] Re: OAuth best practice

2010-01-18 Thread ryan alford
, Jan 18, 2010 at 6:20 AM, ryan alford ryanalford...@gmail.comwrote: You are correct. The PIN handshaking is only for Desktop Apps. Ryan On Mon, Jan 18, 2010 at 9:12 AM, eco_bach bac...@gmail.com wrote: Jeff, I might be wrong, as there seems to be some confusion on this, but I believe

Re: [twitter-dev] Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
You are reading it correct. You do not want to give out your Consumer Key or Consumer Secret. If somebody downloads the source of your application, they are most likely going to be using it in their own application. Therefore, they need their own Consumer Key and Consumer Secret. Ryan On Mon,

Re: [twitter-dev] Re: Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
There is a difference between giving your application to others to install and use, and others downloading your code for their own applications. If a user is installing your application to use, then your code would include your consumer key. If a user is downloading your open source code to use

Re: [twitter-dev] Re: Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
. So when that app starts causing problems for users, it YOU that they start contacting. Ryan On Mon, Jan 18, 2010 at 2:32 PM, John Meyer john.l.me...@gmail.com wrote: On 1/18/2010 12:22 PM, ryan alford wrote: There is a difference between giving your application to others to install and use

Re: [twitter-dev] Re: Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
Just the consumer key, or both the consumer key and consumer secret? both are needed when doing OAuth. Ryan On Mon, Jan 18, 2010 at 2:52 PM, M. Edward (Ed) Borasky zzn...@gmail.comwrote: On Jan 18, 11:32 am, John Meyer john.l.me...@gmail.com wrote: On 1/18/2010 12:22 PM, ryan alford wrote

Re: [twitter-dev] Re: Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
Why would you be required to have a server? To keep your consumer key and consumer secret out of your app? It's not required. Mine are stored in a database that is coupled with my application. The database is password protected, so nobody is getting in. Ryan On Mon, Jan 18, 2010 at 4:27 PM,

Re: [twitter-dev] Re: Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
Also, the consumer secret is harder to get since its not sent as a parameter. Ryan Sent from my DROID On Jan 18, 2010 7:18 PM, Abraham Williams 4bra...@gmail.com wrote: It would be less work for me to run charles proxy and see catch the consumer key/secret in transit then to decompile it and

Re: [twitter-dev] Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
to get their own API key? Sounds a bit counter intuitive to me. ryan alford wrote: You do not want to give out your Consumer Key or Consumer Secret. If someb... ryan alford wrote:There is a difference between giving your application to others to install ... The problem

Re: [twitter-dev] Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
The consumer secret is not public. The consumer key can be seen in the query parameters, but the consumer secret is not a query parameter. It would have to be reverse engineered using the signature. If twitter determines that a specific application is malware, I would only hope that they would

Re: [twitter-dev] Re: Using OAuth keys in an open source application

2010-01-18 Thread ryan alford
Who said that was even an option? I haven't seen one person who said that requiring every user to create their own consumer keys to use with an application was an option. The only reason that is even in this discussion is because somebody misinterpreted an answer and that's what they thought was

Re: [twitter-dev] Re: Failed to validate oauth signature and token

2010-01-17 Thread ryan alford
Yeah, the Nonce needs to be a unique value. If your language can create GUIDs, that might be the best option. Ryan On Sat, Jan 16, 2010 at 11:11 PM, eco_bach bac...@gmail.com wrote: solved, apparently my oauth_nonce value was incorrect, I assumed it was simply a random string and I didn't

Re: [twitter-dev] Sign in with Twitter, PIN authentication and Desktop Clients

2010-01-17 Thread ryan alford
1. Desktop applications are those that are installed or ran from a PC /Mac/Linux or on a mobile device. They are outside of the browser. 2. One is used for web applications, the other is for desktop applications. 3. You are correct. PIN workflow is only for desktop applications. Ryan Sent

Re: [twitter-dev] Failed to validate oauth signature and token

2010-01-16 Thread ryan alford
The signature needs to be the very last parameter. You put all of the parameters in order except for the signature. Then you create the signature and append it to the end of the query string. Ryan Sent from my DROID On Jan 16, 2010 9:48 PM, eco_bach bac...@gmail.com wrote: Ok Yes this IS a

Re: [twitter-dev] List of Common Error messages and possible causes, ie 'Failed to validate oauth signature and token'.

2010-01-16 Thread ryan alford
Going by your other email, your query string parameters are not in the correct order. This is a very important part of OAuth. Ryan Sent from my DROID On Jan 16, 2010 9:48 PM, eco_bach bac...@gmail.com wrote: Hi I've read the FAQ, and all the documentation. Am attempting to get an AS3 client

Re: [twitter-dev] Re: Reinstate 'from app' for Basic Auth desktop apps until OAuth is fixed

2010-01-13 Thread ryan alford
I've been using OAuth for more than 3 months now, about 8 hours a day during the week while at work, using my own library and my own twitter client. I've never had an issue with stability. Now the desktop implementation is crappy(been posted about 50 billion times), but other than that, I've

Re: [twitter-dev] Re: Reinstate 'from app' for Basic Auth desktop apps until OAuth is fixed

2010-01-13 Thread ryan alford
that couldn't be used in production apps. Ryan Sent from my DROID On Jan 13, 2010 5:46 PM, Tim Haines tmhai...@gmail.com wrote: On Thu, Jan 14, 2010 at 10:52 AM, ryan alford ryanalford...@gmail.com wrote: I've been using O... I've found it just as stable as the rest of the API. It's not perfect

Re: [twitter-dev] question about PIN code

2010-01-12 Thread ryan alford
When you direct the user to oauth/authorize, the user will be presented with an Allow/Deny page from Twitter. If they Allow, they then will be given an PIN on the screen. The user will need to give this PIN to you. Ryan On Tue, Jan 12, 2010 at 7:59 PM, dduby nezzi...@gmail.com wrote: hi,,,

Re: [twitter-dev] Re: Please Help

2010-01-06 Thread ryan alford
You are don't have the parameters in the proper order. The signature goes last. The rest of the parameters must be in order. Put the parameters in order, create the signature, then append the signature to the end or the query string. Ryan Sent from my DROID On Jan 6, 2010 2:05 AM, Vikram

Re: [twitter-dev] Please Help

2010-01-05 Thread ryan alford
Post your query string. Don't necessarily need to see the code yet, just need to see the URL that you are requesting. The error means that your signature is incorrect. Ryan On Tue, Jan 5, 2010 at 2:06 PM, Vikram vikram.prav...@gmail.com wrote: When I try to get the QAuth Request token I get

Re: [twitter-dev] Re: Skipping the PIN based workflow for Desktop clients using OAuth

2010-01-03 Thread ryan alford
In the Desktop workflow, you don't have to enter the PIN every time. The user is NOT required to authorize your application every time they want to use it.After the first authorization, YOU store the access token and access token secret either in a database, file, or some other type of

Re: [twitter-dev] Removing Registered Application

2010-01-03 Thread ryan alford
You can revoke access from the Connections tab in the Settings on the web site. Ryan Sent from my DROID On Jan 3, 2010 7:56 PM, Greg gregory.av...@gmail.com wrote: Is it possible to remove a application that you registered? Like delete it from your list?

Re: [twitter-dev] Re: Request without oauth

2009-12-10 Thread ryan alford
Twitter is going to be making changes to OAuth to where the user can give you their credentials, and you can use those to get an Access Token. This is an option to bypass the PIN workflow. On Thu, Dec 10, 2009 at 10:03 AM, Fauzil Hamdi asfau...@gmail.com wrote: some body please 2009/12/10

Re: [twitter-dev] Re: What Is The Status of Twitter OAuth?

2009-12-01 Thread ryan alford
I never knew that asking questions would be considered whining. Twitter has never officially stated that OAuth is in production like they announce other features (like Lists). Now they seem to be telling developers to start moving to OAuth. You state to don't use it. It doesn't look like we

Re: [twitter-dev] What Is The Status of Twitter OAuth?

2009-11-30 Thread ryan alford
He's not referring to OAuth the specification. He is referring to Twitter's implementation of it. Ryan On Mon, Nov 30, 2009 at 1:54 PM, Chris Babcock cbabc...@kolonelpanic.orgwrote: On Mon, 30 Nov 2009 10:27:24 -0800 (PST) Dewald Pretorius dpr...@gmail.com wrote: Last information I've

Re: [twitter-dev] oauth Process flow and status Part 1

2009-11-24 Thread ryan alford
The signature has to go last. That's one mistake that most people make. You are suppose to put the parameters in order EXCEPT the signature parameter. The signature parameter is created by using the other parameters, then it's appended to the end of the query string. The OAuth signature is

Re: [twitter-dev] Authentication (user/pass )after Oauth authentication.....:S

2009-11-23 Thread ryan alford
After you get the pin, what URL do you go to? On Nov 23, 2009 7:50 AM, dmsiva danielmartinssi...@gmail.com wrote: hello. I make well oauth authentication. I put the pin, and I get the access_token, etc.. but when I request a 'get' the browser asks me another authentication (username, password).

Re: [twitter-dev] Get screen name with OAuth

2009-11-20 Thread ryan alford
In the query string of the returned response, there is a field called screen_name. That will contain the screen name of the user that authorized the application. So when you get oauth_token and oauth_token_secret from the response, get screen_name also. Ryan On Fri, Nov 20, 2009 at 10:51 AM,

[twitter-dev] Re: Read / Write Access By Default, But Can't POST

2009-11-14 Thread ryan alford
Delete your registration and add it again. On Nov 14, 2009 3:52 PM, Twlisted twlistedm...@gmail.com wrote: If I go to my application details page, it's marked as read/write access by default. But when I attempt to POST such as http://api.twitter.com/1/.$list_user./.$user_list./members.json;

[twitter-dev] Re: Getting started with a twitter application

2009-11-12 Thread ryan alford
You can use one of the many libraries for most of the more popular languages(and some for the less popular), or you can create your own library to communicate to the API. Ryan On Thu, Nov 12, 2009 at 3:09 AM, albana tejashree1@gmail.com wrote: Hi everybody! I am about to develop a

[twitter-dev] Re: .NET Class for handling Twitter Updates and Rate Checks

2009-11-12 Thread ryan alford
You are suppose to post it on a code repository site (like CodePlex or Google Code), then post a link to it here. Nobody wants 300 lines of code in their emails. Ryan On Thu, Nov 12, 2009 at 2:03 PM, ch...@stuffworldwide.com ch...@stuffworldwide.com wrote: I sent it to the twitter people to

[twitter-dev] Re: OAuth from the Browser

2009-11-07 Thread ryan alford
There are no app-specific servers. With OAuth, instead of passing user credentials, you use YOUR consumer key and consumer secret which identifies your application. You get an access token after the user has allowed your application to have access to their account. You will then use that access

[twitter-dev] Re: Handoff of Token's Between Apps

2009-10-30 Thread ryan alford
The user should authorize both applications. Yes, you can store the token and secret. That's what most apps do. On Oct 30, 2009, at 3:15 AM, YCBM youcannotb...@gmail.com wrote: Hi All, New to Twitter oAuth. We're building an app which will use the oAuth system vs. basic auth. As we're

[twitter-dev] Re: Automated Tweets

2009-10-28 Thread ryan alford
Twitter recently implemented logic to stop the ability of duplicate tweets. I can't remember if it was ever released what the time period is. On Oct 28, 2009, at 7:24 AM, Greg gregory.av...@gmail.com wrote: Hello, I have an application that sends out a Tweet when a user Authorizes the

[twitter-dev] Re: user+password

2009-10-28 Thread ryan alford
You are not required. I just used this API method without credentials. http://twitter.com/statuses/user_timeline/[InsertScreenNameHere].xml No credentials needed. Some API methods do required you to be authenticated, but some do not. You can view the methods at

[twitter-dev] Re: Find username/screenname through email addresses

2009-10-27 Thread ryan alford
No, and don't expect it to ever be available. On Oct 27, 2009, at 6:51 AM, dhaval dhaval.parik...@gmail.com wrote: Hey all Is it possible to find the screen name of a twitter user from an email address? Say suppose an email address is a...@abc.com then what is the corresponding screen

  1   2   >