Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-30 Thread Clint Shryock
See Twurl: http://thechangelog.com/post/536535280/twurl-oauth-enabled-curl-for-the-twitter-api and http://github.com/marcel/twurl +Clint On Thu, Apr 29, 2010 at 9:47 PM, mcfnord mcfn...@gmail.com wrote: I think I know the answer to this question (YES), but I wanna clarify: Everywhere in the

[twitter-dev] Re: Basic Auth Deprecation

2010-04-29 Thread mcfnord
I think I know the answer to this question (YES), but I wanna clarify: Everywhere in the docs that I see curl followed by credentials, if the topic includes REST, that's an API that I will not be using curl for, because curl doesn't use oauth, so it cannot authenticate. i'll certainly know in 30

[twitter-dev] Re: Basic Auth Deprecation

2010-04-17 Thread sdesapio
Classic ASP VBScript OAuth library and example project: http://scottdesapio.com/VBScriptOAuth/ :) On Apr 14, 11:16 am, Lil Peck lilp...@gmail.com wrote: On Tue, Apr 13, 2010 at 11:01 PM, TJ Luoma luo...@gmail.com wrote: I'm still unclear what people who use 'curl' will do after basic auth

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-17 Thread Lil Peck
On Sat, Apr 17, 2010 at 8:09 AM, sdesapio sdesa...@gmail.com wrote: Classic ASP VBScript OAuth library and example project: http://scottdesapio.com/VBScriptOAuth/ :) My hero! (Although I am still waiting for Twitter to complete its 2 legged oauth.) -- Subscription settings:

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-17 Thread Raffi Krikorian
this is part of the oauth rewrite that we mentioned at chirp - we hope to be rolling it out soon. On Sat, Apr 17, 2010 at 7:17 AM, Lil Peck lilp...@gmail.com wrote: On Sat, Apr 17, 2010 at 8:09 AM, sdesapio sdesa...@gmail.com wrote: Classic ASP VBScript OAuth library and example project:

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Raffi Krikorian
marcel (@noradio) and i have been working on http://github.com/marcel/twurl -- there is definitely some work that needs to be done, but we're getting close. On Tue, Apr 13, 2010 at 9:01 PM, TJ Luoma luo...@gmail.com wrote: On Tue, Apr 13, 2010 at 7:35 PM, Raffi Krikorian ra...@twitter.com

[twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Dean #39;at#39; Cognation dot Net
-talk@googlegroups.com [mailto:twitter-development-t...@googlegroups.com] On Behalf Of Dewald Pretorius Sent: Tuesday, April 13, 2010 7:31 PM To: Twitter Development Talk Subject: [twitter-dev] Re: Basic Auth Deprecation Could you please announce the hard turn off date somewhere on one

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Raffi Krikorian
- From: twitter-development-talk@googlegroups.com [mailto: twitter-development-t...@googlegroups.com] On Behalf Of Dewald Pretorius Sent: Tuesday, April 13, 2010 7:31 PM To: Twitter Development Talk Subject: [twitter-dev] Re: Basic Auth Deprecation Could you please announce the hard

[twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Jaanus
Of Dewald Pretorius Sent: Tuesday, April 13, 2010 7:31 PM To: Twitter Development Talk Subject: [twitter-dev] Re: Basic Auth Deprecation Could you please announce the hard turn off date somewhere on one of your Twitter blogs about a month ahead of time, so that we all have an official

[twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Jaanus
Of Dewald Pretorius Sent: Tuesday, April 13, 2010 7:31 PM To: Twitter Development Talk Subject: [twitter-dev] Re: Basic Auth Deprecation Could you please announce the hard turn off date somewhere on one of your Twitter blogs about a month ahead of time, so that we all have

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread znmeb
- Raffi Krikorian ra...@twitter.com wrote: in my ideal world, nobody would have access to a user's password except twitter.com -- oauth provides a framework so end applications are not storing the actual password. people are notoriously bad with using the same password on lots of

RE: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Dean Collins
- From: twitter-development-talk@googlegroups.com [mailto:twitter-development-t...@googlegroups.com] On Behalf Of Dewald Pretorius Sent: Tuesday, April 13, 2010 7:31 PM To: Twitter Development Talk Subject: [twitter-dev] Re: Basic Auth Deprecation Could you please announce the hard turn off

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Cameron Kaiser
Why are you Twitter guys pushing xAuth so hard? Even for new desktop clients? Instead of recommending a proper oAuth flow with PIN or such? I understood its main purpose is to help legacy clients with transition, and new clients should do proper oAuth. I can tell you that there are many

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Dan Checkoway
*Subject:* Re: [twitter-dev] Re: Basic Auth Deprecation in my ideal world, nobody would have access to a user's password except twitter.com -- oauth provides a framework so end applications are not storing the actual password. people are notoriously bad with using the same password on lots

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread TJ Luoma
On Wed, Apr 14, 2010 at 8:39 AM, Dean #39;at#39; Cognation dot Net d...@cognation.net wrote: But why is oauth better than basic for a desktop client? i understand it for the webapps but on a desktop client whats the point? Basically you are saying the desktop end user cant be trusted? Sorry

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Raffi Krikorian
-development-t...@googlegroups.com] *On Behalf Of *Raffi Krikorian *Sent:* Wednesday, April 14, 2010 8:59 AM *To:* twitter-development-talk@googlegroups.com *Subject:* Re: [twitter-dev] Re: Basic Auth Deprecation in my ideal world, nobody would have access to a user's password except twitter.com

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Raffi Krikorian
i would love it to :P On Wed, Apr 14, 2010 at 6:18 AM, zn...@comcast.net wrote: - Raffi Krikorian ra...@twitter.com wrote: in my ideal world, nobody would have access to a user's password except twitter.com -- oauth provides a framework so end applications are not storing the actual

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Raffi Krikorian
: [twitter-dev] Re: Basic Auth Deprecation Could you please announce the hard turn off date somewhere on one of your Twitter blogs about a month ahead of time, so that we all have an official source to point our users to when we explain to them why we're converting everything over to OAuth

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Raffi Krikorian
xauth is definitely useful for the browserless case. On Wed, Apr 14, 2010 at 6:33 AM, Cameron Kaiser spec...@floodgap.comwrote: Why are you Twitter guys pushing xAuth so hard? Even for new desktop clients? Instead of recommending a proper oAuth flow with PIN or such? I understood its main

RE: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Dean Collins
[mailto:twitter-development-t...@googlegroups.com] On Behalf Of Raffi Krikorian Sent: Wednesday, April 14, 2010 10:08 AM To: twitter-development-talk@googlegroups.com Subject: Re: [twitter-dev] Re: Basic Auth Deprecation again - overly dramatic. everything i said above still stands - it provides

RE: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Brian Smith
Subject: Re: [twitter-dev] Re: Basic Auth Deprecation we developed xauth specifically for that - mobile and desktop clients were complaining about usability problems when they have to bounce their users to a web browser. i'm well aware of the implications about xauth, and have blogged about

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread DeWitt Clinton
@googlegroups.com *Subject:* Re: [twitter-dev] Re: Basic Auth Deprecation in my ideal world, nobody would have access to a user's password except twitter.com -- oauth provides a framework so end applications are not storing the actual password. people are notoriously bad with using the same password

[twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Dewald Pretorius
OAuth has benefits all around for everybody. In addition to the benefits already mentioned: 1) For a web app like mine, it saves a TON of support workload with people who change their Twitter password, don't change it in my system, and then blame my system for not working because it's not able to

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread TvvitterBug by Applgasm-Apps
OAuth was intended to facilitate inter-platform user account access without requiring actual usernames or passwords to be exchanged. This would allow platforms such as Twitter, Facebook, TwitPic, etc. to access each others user accounts while maintaining the privacy of that user's access

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Raffi Krikorian
We're getting ready to release a few changes to our oauth implementation that will allow two legged oauth for public methods. On Apr 14, 2010, at 9:16 AM, Lil Peck lilp...@gmail.com wrote: On Tue, Apr 13, 2010 at 11:01 PM, TJ Luoma luo...@gmail.com wrote: I'm still unclear what people

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Josh Roesslein
I am all for oAuth replacing basic, but one of the remaining issues is consumer keys. With 1.0 signing is required thus requiring distributing keys with your application. We all know this is pretty unsafe since any hacker could yank them out. oAuth 2.0 does seem to solve a lot of the issues

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-14 Thread Raffi Krikorian
yes, it could be a problem - however, there are known solutions to obfuscating and keeping your consumer key secret. not perfect, but pretty good. maybe we can start a discussion around this? people are going to need to start to move towards this method, and we are here to help you if you need

preserving consumer key secrecy (was: Re: [twitter-dev] Re: Basic Auth Deprecation)

2010-04-14 Thread John SJ Anderson
On Wed, Apr 14, 2010 at 18:26, Raffi Krikorian ra...@twitter.com wrote: yes, it could be a problem - however, there are known solutions to obfuscating and keeping your consumer key secret.  not perfect, but pretty good.  maybe we can start a discussion around this? What's the known solution

Re: preserving consumer key secrecy (was: Re: [twitter-dev] Re: Basic Auth Deprecation)

2010-04-14 Thread Cameron Kaiser
yes, it could be a problem - however, there are known solutions to obfuscating and keeping your consumer key secret. __not perfect, but pretty good. __maybe we can start a discussion around this? What's the known solution for an open-source Web-based application that I want to distribute

Re: preserving consumer key secrecy (was: Re: [twitter-dev] Re: Basic Auth Deprecation)

2010-04-14 Thread Abraham Williams
Why not just distribute a key with it? The worst that happens is someone uses it in their app and it gets disabled and some people get pissed off at you. I have yet to hear of this happening to a Twitter application. If someone abuses your key and Twitter does not handle the situation well I will

[twitter-dev] Re: Basic Auth Deprecation

2010-04-13 Thread Dewald Pretorius
Could you please announce the hard turn off date somewhere on one of your Twitter blogs about a month ahead of time, so that we all have an official source to point our users to when we explain to them why we're converting everything over to OAuth? On Apr 13, 8:19 pm, Raffi Krikorian

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-13 Thread Raffi Krikorian
we'll make sure to message it long before hand! On Tue, Apr 13, 2010 at 4:30 PM, Dewald Pretorius dpr...@gmail.com wrote: Could you please announce the hard turn off date somewhere on one of your Twitter blogs about a month ahead of time, so that we all have an official source to point our

RE: [twitter-dev] Re: Basic Auth Deprecation

2010-04-13 Thread Dean Collins
@googlegroups.com [mailto:twitter-development-t...@googlegroups.com] On Behalf Of Dewald Pretorius Sent: Tuesday, April 13, 2010 7:31 PM To: Twitter Development Talk Subject: [twitter-dev] Re: Basic Auth Deprecation Could you please announce the hard turn off date somewhere on one of your Twitter

Re: [twitter-dev] Re: Basic Auth Deprecation

2010-04-13 Thread TJ Luoma
On Tue, Apr 13, 2010 at 7:35 PM, Raffi Krikorian ra...@twitter.com wrote: we'll make sure to message it long before hand! I'm still unclear what people who use 'curl' will do after basic auth is deprecated. Is there an OAuth for the commandline? If so: pointers, please. TjL

[twitter-dev] Re: Basic Auth Deprecation in June

2010-01-18 Thread Rich
Ryan Sarver said it last last year http://twitter.com/Scobleizer/status/6493268213 On Jan 17, 4:46 am, Hwee-Boon Yar hweeb...@gmail.com wrote: On Jan 14, 8:30 am, twittme_mobi nlupa...@googlemail.com wrote: Hello , Regarding Basic Auth Deprecation is June Any where this is announced?

[twitter-dev] Re: Basic Auth Deprecation in June

2010-01-18 Thread Hwee-Boon Yar
Thanks. Hope it's not official. I don't remember reading anything like that on the 2 lists. -- Hwee-Boon On Jan 18, 7:01 pm, Rich rhyl...@gmail.com wrote: Ryan Sarver said it last last yearhttp://twitter.com/Scobleizer/status/6493268213 On Jan 17, 4:46 am, Hwee-Boon Yar hweeb...@gmail.com

Re: [twitter-dev] Re: Basic Auth Deprecation in June

2010-01-18 Thread ryan alford
yes, it's official. The depreciation of Basic Auth will start in June. Ryan On Mon, Jan 18, 2010 at 10:57 AM, Hwee-Boon Yar hweeb...@gmail.com wrote: Thanks. Hope it's not official. I don't remember reading anything like that on the 2 lists. -- Hwee-Boon On Jan 18, 7:01 pm, Rich

Re: [twitter-dev] Re: Basic Auth Deprecation in June

2010-01-18 Thread Cameron Kaiser
Thanks. Hope it's not official. I don't remember reading anything like that on the 2 lists. No, it wasn't posted here at the time. I insert a fairly loud *ahem* to ensure such things are posted here also in the future. -- personal:

Re: [twitter-dev] Re: Basic Auth Deprecation in June

2010-01-18 Thread Raffi Krikorian
we have a command line tool that acts exactly like curl but does all the oauth signatures transparently to the end user (the user simply needs to register the keys with the tool). this way people who rely on the ability to use curl to interact with the API (such as scripts, etc.) can still do so.

Re: [twitter-dev] Re: Basic Auth Deprecation in June

2010-01-18 Thread TJ Luoma
On Mon, Jan 18, 2010 at 12:48 PM, Raffi Krikorian ra...@twitter.com wrote: we have a command line tool that acts exactly like curl but does all the oauth signatures transparently to the end user (the user simply needs to register the keys with the tool).  this way people who rely on the ability

[twitter-dev] Re: Basic Auth Deprecation in June

2010-01-18 Thread M. Edward (Ed) Borasky
Another beta tester here! ;-) On Jan 18, 9:54 am, TJ Luoma luo...@luomat.net wrote: On Mon, Jan 18, 2010 at 12:48 PM, Raffi Krikorian ra...@twitter.com wrote: we have a command line tool that acts exactly like curl but does all the oauth signatures transparently to the end user (the user

[twitter-dev] Re: Basic Auth Deprecation in June

2010-01-16 Thread Hwee-Boon Yar
On Jan 14, 8:30 am, twittme_mobi nlupa...@googlemail.com wrote: Hello , Regarding Basic Auth Deprecation is June Any where this is announced? -- Hwee-Boon

[twitter-dev] Re: Basic Auth Deprecation in June

2010-01-14 Thread twittme_mobi
Hello, Thanks for your reply! Couldn't I just save the access token in a database and use it later? Thanks. On Jan 14, 1:31 am, Cameron Kaiser spec...@floodgap.com wrote: Regarding Basic Auth Deprecation is June - would it be possible using OAuth to automate some users posts - for example

Re: [twitter-dev] Re: Basic Auth Deprecation in June

2010-01-14 Thread Cameron Kaiser
Thanks for your reply! Couldn't I just save the access token in a database and use it later? Yup. Many, if not most, applications do just that. -- personal: http://www.cameronkaiser.com/ -- Cameron Kaiser * Floodgap Systems * www.floodgap.com *

[twitter-dev] Re: Basic Auth deprecation coming

2009-12-09 Thread Patrick
Because Twitter would require keys, not usernames and passwords. Logons go to Twitter, and keys are returned. Programs would (will) break unless grandfathered, but that's a manageable issue. That said, there should be a way for developers to use Basic Auth to hash out (develop) their code for