Re: [twitter-dev] Confused about OAuth 1.0 vs 1.0a and Twitter API docs

2010-01-22 Thread ryan alford
If you look at the very top of the 1.0 spec, you will see a yellow box... This specification was obsoleted by OAuth Core 1.0 Revision Ahttp://oauth.net/core/1.0a on June 24th, 2009 to address a session fixation attackhttp://oauth.net/advisories/2009-1/. The OAuth Core 1.0 Revision A specification

Re: [twitter-dev] Confused about OAuth 1.0 vs 1.0a and Twitter API docs

2010-01-22 Thread Marc Hedlund
Yup, I know, that's what I'm asking. Why not link to and tell people to use 1.0a (or the IETF draft) rather than 1.0? For the record I checked all the other code examples and none of them support oauth_verifier (some do send oauth_callback with the first request), unless I'm missing something.

Re: [twitter-dev] Confused about OAuth 1.0 vs 1.0a and Twitter API docs

2010-01-22 Thread ryan alford
most likely, Twitter has other things to do and updating the API documentation isn't very high on the list. Ryan On Fri, Jan 22, 2010 at 4:40 PM, Marc Hedlund marcprecip...@gmail.comwrote: Yup, I know, that's what I'm asking. Why not link to and tell people to use 1.0a (or the IETF draft)

Re: [twitter-dev] Confused about OAuth 1.0 vs 1.0a and Twitter API docs

2010-01-22 Thread Abraham Williams
http://github.com/abraham/twitteroauth/ supports oauth_varifier. Abraham On Fri, Jan 22, 2010 at 13:40, Marc Hedlund marcprecip...@gmail.com wrote: Yup, I know, that's what I'm asking. Why not link to and tell people to use 1.0a (or the IETF draft) rather than 1.0? For the record I checked

Re: [twitter-dev] Confused about OAuth 1.0 vs 1.0a and Twitter API docs

2010-01-22 Thread Marc Hedlund
Ah, sorry, my mistake. -M On Jan 22, 2010, at 1:57 PM, Abraham Williams wrote: http://github.com/abraham/twitteroauth/ supports oauth_varifier. Abraham On Fri, Jan 22, 2010 at 13:40, Marc Hedlund marcprecip...@gmail.com wrote: Yup, I know, that's what I'm asking. Why not link to and