[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-05-05 Thread Sheng Luo
Hi guys, I'm a developer from China who wanted to get the xAuth access for a web-based application the other day, but was rejected due to Twitter's policy. Brain replied to my ticket and said that I could join the discussion here. So let's get back to the topic a little bit and see if there's a

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-27 Thread Dave Sherohman
On Mon, Apr 26, 2010 at 11:09:38AM -0400, Dean Collins wrote: Yeh but John, who is going to install MySQL for a desktop client? 1) John was responding to someone who said a database wouldn't work for [him] since I do not have a desktop app, end I do not store anything in a database. If he

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-27 Thread M. Edward (Ed) Borasky
On 04/27/2010 12:11 AM, Dave Sherohman wrote: On Mon, Apr 26, 2010 at 11:09:38AM -0400, Dean Collins wrote: Yeh but John, who is going to install MySQL for a desktop client? 1) John was responding to someone who said a database wouldn't work for [him] since I do not have a desktop app, end I

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-27 Thread jaronbarends
@Dave Thanks for your suggestion. I do indeed have a mysql, but haven't seen the need to implement it in my app (http://twimply.com) since it basicly only offers an alternative web interface for using twitter. The only mentioned using a database as a possible solution: creating a desktop app

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-27 Thread Eoin
Hi, This is probably a basic question - but what is the best option if you have written an integration for a web-based application that is installed on multiple sites? The URL is going to change per installation (and won't be publicly accessible), and I would really like to minimise the impact

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-27 Thread John Meyer
On 4/27/2010 5:52 AM, Eoin wrote: Hi, This is probably a basic question - but what is the best option if you have written an integration for a web-based application that is installed on multiple sites? The URL is going to change per installation (and won't be publicly accessible), and I would

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-26 Thread Dewald Pretorius
Raffi, One solution, which I know won't win the popularity prize, is for Twitter to relax its XAuth restrictions and allow web apps to use full OAuth and/or XAuth, depending on what works best for them. In my case, I will still use full OAuth because it's so much better than dealing with Twitter

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-26 Thread Raffi Krikorian
One solution, which I know won't win the popularity prize, is for Twitter to relax its XAuth restrictions and allow web apps to use full OAuth and/or XAuth, depending on what works best for them. In my case, I will still use full OAuth because it's so much better than dealing with Twitter

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-26 Thread Dewald Pretorius
In fact, you could set a threshold per consumer key that you can vary. In other words, you can then allow a higher percentage XAuth (even 100%) to an app that caters largely to a Chinese market. And 0% or 10% to an app that caters largely to the USA market. On Apr 26, 9:43 am, Dewald Pretorius

RE: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-26 Thread Dean Collins
One solution, which I know won't win the popularity prize, is for Twitter to relax its XAuth restrictions and allow web apps to use full OAuth and/or XAuth, depending on what works best for them. In my case, I will still use full OAuth because it's so much

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-26 Thread jaronbarends
@raffi thanks for your replies. I didn't mean to start a discussion about Twitter's policy here (although I can imagine some people would like to discuss it elsewhere). I'm mostly interested in finding a solution. @dean: I'm not sure I understand your suggestion about using oAuth for both the

RE: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-26 Thread Dean Collins
-Original Message- From: twitter-development-talk@googlegroups.com [mailto:twitter-development-t...@googlegroups.com] On Behalf Of John Meyer Sent: Monday, April 26, 2010 10:48 AM To: twitter-development-talk@googlegroups.com Subject: Re: [twitter-dev] Re: countdown to OAuth

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-26 Thread John Meyer
: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse On 4/26/2010 8:43 AM, jaronbarends wrote: @raffi thanks for your replies. I didn't mean to start a discussion about Twitter's policy here (although I can imagine some people would like to discuss it elsewhere). I'm mostly

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-26 Thread monkeyninja
Hi Raffi, Not sure if I am following this correctly or not, but basically I have been developing a plugin for Textpattern for a while that uses basic authorisation to update a Twitter feed based on the username/password set for the plugin. Does this change mean that the user would now be

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-26 Thread Raffi Krikorian
i don't know very much about textpattern, however, might @anywhere be a solution for this? On Mon, Apr 26, 2010 at 11:08 AM, monkeyninja andy1...@gmail.com wrote: Hi Raffi, Not sure if I am following this correctly or not, but basically I have been developing a plugin for Textpattern for a

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-26 Thread Craig Hockenberry
It's not in this documentation, which is the first thing I found: http://dev.twitter.com/pages/auth -ch On Apr 25, 1:40 pm, Abraham Williams 4bra...@gmail.com wrote: It is specified on the XAuth documentation. On Sun, Apr 25, 2010 at 13:39, Craig Hockenberry

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-26 Thread Jaanus
I'm still not buying it that oauth is going add any value for desktop clients with regards to password security. Basically you are now storing token in the desktop client instead of password. The added security is that either your malicious app, or, say some trojan in the user's computer,

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-25 Thread Raffi Krikorian
not at all. twitter.com is already setup completely for oauth echo. at this point, its just 3rd party providers, and end clients. the @twitterapi team is ready to help out any of those that need help. On Sat, Apr 24, 2010 at 9:28 PM, Jaanus jaa...@gmail.com wrote: Is there any kind of

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-25 Thread jaronbarends
I moved my web based app from basic auth to oAuth just last week. I subsequently got several pleas from Chinese users to put the old version back up, as they could no longer use my app, since access to Twitter.com is blocked in China. This issue has discussed in this group before here:

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-25 Thread Craig Hockenberry
Hi Raffi! Is there a delay/verification after a new app is created? I just created a new app and am seeing problems getting the OAuth token with a xAuth HTTP request that looks like this: xAuth consumer key = N3fq77IdBT4qfglbcb4njg, consumer secret = REDACTED xAuth URL =

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-25 Thread Marco Kaiser
Did you whitelist your app for xAuth? On Apr 25, 2010 1:22 PM, Craig Hockenberry craig.hockenbe...@gmail.com wrote: Hi Raffi! Is there a delay/verification after a new app is created? I just created a new app and am seeing problems getting the OAuth token with a xAuth HTTP request that looks

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-25 Thread Raffi Krikorian
hi craig. have you gotten access to xAuth? applications are not, by default, given access to xAuth - if you e-mail a...@twitter.com with - your client token; and - a description of your application then we can grant it access. On Sun, Apr 25, 2010 at 1:22 PM, Craig Hockenberry

RE: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-25 Thread Dean Collins
: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse I moved my web based app from basic auth to oAuth just last week. I subsequently got several pleas from Chinese users to put the old version back up, as they could no longer use my app, since access to Twitter.com is blocked

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-25 Thread Craig Hockenberry
No, I didn't ask for access. I guess that's the bug: there's no place during the signup process that tells you that you need to go through a manual process to get xAuth access... -ch On Apr 25, 1:29 pm, Raffi Krikorian ra...@twitter.com wrote: hi craig. have you gotten access to xAuth?  

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-25 Thread Abraham Williams
It is specified on the XAuth documentation. On Sun, Apr 25, 2010 at 13:39, Craig Hockenberry craig.hockenbe...@gmail.com wrote: No, I didn't ask for access. I guess that's the bug: there's no place during the signup process that tells you that you need to go through a manual process to get

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-25 Thread Dewald Pretorius
Raffi, We really need a resolution for this issue before Basic Auth is deprecated. It sounds as if Twitter is telling developers of web apps that they cannot provide service to Chinese users, and other users behind firewalls that block access to twitter.com. But that can't be right, can it? On

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-25 Thread Abraham Williams
It is not twitter telling you it is China. -- Little androids dreaming of Nexus Ones compiled this text. On Apr 25, 2010 6:53 PM, Dewald Pretorius dpr...@gmail.com wrote: Raffi, We really need a resolution for this issue before Basic Auth is deprecated. It sounds as if Twitter is telling

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-25 Thread Ron B
China's policy didn't just recently change, Twitter's did. So it is Twitter telling us that we may not be able to support China and other firewall blocked countries any longer. It is, after all, within Twitter's power to continue to support Basic Auth. It is their conscious decision not to,

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-25 Thread Raffi Krikorian
before this gets out of hand - i, personally, am very sensitive to these issues. i've been spending some brain power trying to come up with a solution. if people have suggestions, then please feel free to reach out to me personally and off list. On Sun, Apr 25, 2010 at 7:54 PM, Ron B

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-24 Thread Raffi Krikorian
sorry! i was just reminded about a point of clarification - streaming API will still support basic auth. this note *only* pertains to the REST API. hi all. you're going to be hearing a lot from me over the next 9 weeks. our plan is to turn off basic authorization on the API by june 30, 2010

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-24 Thread Dewald Pretorius
Raffi, that is super awesome. Thank you. Any chance that you will have OAuth 2.0 in production before then? On Apr 24, 12:40 pm, Raffi Krikorian ra...@twitter.com wrote: hi all. you're going to be hearing a lot from me over the next 9 weeks.  our plan is to turn off basic authorization on

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-24 Thread Raffi Krikorian
there is a really good chance - now that oauth 2.0 has been submitted as a draft http://tools.ietf.org/html/draft-hammer-oauth2-00, we are going to spend some time catching up our oauth 2.0 implementation. at that point, we'll evaluate letting it loose. On Sat, Apr 24, 2010 at 8:44 AM, Dewald

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-24 Thread Thomas Woolway
Hi Raffi, Great that we've got a date for basic auth deprecation, but is there any news/timescales on OAuth Echo? We've got nine weeks and counting to get the spec, get the service providers to implement it, build it into clients and get our user-bases to upgrade if they want to be able to upload

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-24 Thread Raffi Krikorian
hi tom! i will be sending more info about it - we've been working with yfrog, tweetphoto, and twitpic to get their services migrated - they are either finished or are nearly there. if there are others that you would like the @twitterapi team involved with to help them get migrated over as well,

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-24 Thread John Meyer
On 4/24/2010 3:44 PM, Raffi Krikorian wrote: hi tom! i will be sending more info about it - we've been working with yfrog, tweetphoto, and twitpic to get their services migrated - they are either finished or are nearly there. if there are others that you would like the @twitterapi team

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-24 Thread John Meyer
On 4/24/2010 5:05 PM, Raffi Krikorian wrote: if there any applications / service providers that you would like the @twitterapi team to talk to - let me know. or, have the application / service provider come to us. i really want to make this transition as easy as possible. I'll probably be

Re: [twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-24 Thread Raffi Krikorian
first three are taken care of, just let me know if you need help coordinating with the others On Sat, Apr 24, 2010 at 4:34 PM, John Meyer john.l.me...@gmail.com wrote: On 4/24/2010 5:05 PM, Raffi Krikorian wrote: if there any applications / service providers that you would like the

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-24 Thread Adrian
At this point, all I'm looking for is a way to upgrade this piece of PHP code to take into account the new authentication model: $ch = curl_init('http://twitter.com/statuses/update.xml'); curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch,

[twitter-dev] Re: countdown to OAuth / basic auth removal / OAuthcalypse

2010-04-24 Thread Jaanus
Is there any kind of special involvement needed from you every time someone wants to do OAuth Echo? I thought I'll make my own server for my own app for some purpose. Judging by the spec you posted on your blog a while ago (http://mehack.com/oauth-echo-delegation-in-identity- verificatio), it does